Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-26 Thread Brett Lymn
, my bad). You merge the keytab for the machine with the keytab for the HA user. This way the clients are able to both auth to the HA and to the the underlying machine. It is what we do, it works fine. -- Brett Lymn This email has been sent on behalf of one of the following companies within the

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Brett Lymn
or header into the http traffic and then modified the logging to log both the loadblancer and client IP. -- Brett Lymn This email has been sent on behalf of one of the following companies within the BAE Systems Australia group of companies: BAE Systems Australia Limited - Australian Company N

Re: [squid-users] whats wrong with this url regex line

2020-01-19 Thread Brett Lymn
an the whole string for a match. So if you know that the string you are looking for must be right at the start of the string then it is much better to use the ^ anchor to let the regex library know that. -- Brett Lymn This email has been sent on behalf of one of the following companies within the

[squid-users] Why does this proxy configuration ignore no-cache and no-store?

2018-09-27 Thread Brett
I'm having some trouble because my 4.0.24-VCS squid proxy is caching requests that it shouldn't be, breaking the website I'm routing through it. From the HAR output of the client using the proxy: Response Headers Cache-Control no-cache;no-store Content-Encoding gzip Content-T

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-21 Thread Brett Anderson
Thanks again Alex, For anyone else trying to solve this issue, here's a repo I created which sets everything up in Docker to allow ssl_bump and cache_peer to work. https://github.com/brett--anderson/squid_proxy On Fri, Sep 21, 2018 at 7:53 AM Alex Rousskov < rouss...@measurement-fac

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-20 Thread Brett Anderson
e recent branch of https://github.com/measurement-factory <https://github.com/measurement-factory/squid/tree/SQUID-360-peering-for-SslBump> ? Thanks again! B. On Thu, Sep 20, 2018 at 12:47 PM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 09/20/2018 12:36 PM, Brett

[squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-20 Thread Brett
I currently have squid setup to use a self-signed certificate for MITM to cache HTTPS requests. This works. If an item is not in the cache I want to request from an online proxy like Crawlera. Unfortunately Crawlera only offer an http endpoint. When I try to forward to this endpoint, everything wor

Re: [squid-users] Ssl-Bump and revoked server certificates

2015-10-20 Thread Brett Lymn
perating systems not conforming to Linux; > Only for linux sounds a bit specious - I can understand not for Windows but other unix operating systems should be close enough. -- Brett Lymn This email has been sent on behalf of one of the following companies within the BAE Systems Australia group

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-15 Thread Brett Lymn
esses. As long as your process demands do not exceed physical RAM then all will be fine, the file cache size will shrink and grow depending on process demands. -- Brett Lymn This email has been sent on behalf of one of the following companies within the BAE Systems Australia group of companies

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Brett Lymn
y: find . -type f | xargs rm Though if you have a large cache then it will take a very long time to remove the files. If your cache is on a separate file system then it may be quicker and simpler just to unmount the file system and reinitialise it. -- Brett Lymn This email has been sent on be

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Brett Lymn
t the site will force the user to log in again. -- Brett Lymn This email has been sent on behalf of one of the following companies within the BAE Systems Australia group of companies: BAE Systems Australia Limited - Australian Company Number 008 423 005 BAE Systems Australia Defence Pty