Re: [squid-users] Squid appears to be ignoring url_rewrite_program

2024-09-17 Thread Nishant Sharma
Sorry for jumping the gun. Just read your mail again. You want to redirect and not block. Regards, Nishant On 17 September 2024 4:04:24 pm UTC, Nishant Sharma wrote: >Hi Martin, > >On 17/09/24 19:04, Martin A. Brooks wrote: >> On 2024-09-17 13:39, Martin A. Brooks wrote: >

Re: [squid-users] Squid appears to be ignoring url_rewrite_program

2024-09-17 Thread Nishant Sharma
Hi Martin, On 17/09/24 19:04, Martin A. Brooks wrote: On 2024-09-17 13:39, Martin A. Brooks wrote: I am trying to use a URL rewriter program to redirect client requests for certain URLs elsewhere.  I found this on github which seems to do what I need: https://github.com/rchunping/squid-urlre

Re: [squid-users] Squid 5.7 - HOWTO Transparent SSL-Bump

2024-07-30 Thread Nishant Sharma
Hi John, On 30/07/24 18:05, John Mok wrote: Hi all, I am using squid 5.7 on Debian Bookworm, and would like to setup a transparent + SSL bump proxy. Anyone can point to the right direction ? Squid on Debian and Ubuntu do not have following options: --enable-ssl --enable-ssl-crtd You may wa

Re: [squid-users] FATAL: assertion failed: mem/PageStack.cc:159: "StoredNode().is_lock_free()"

2024-07-04 Thread Nishant Sharma
On 03/07/24 21:27, Alex Rousskov wrote: On 2024-07-03 09:27, Nishant Sharma wrote: I was able to compile by replacing `uint64_t` to `uint32_t` and squid worked with workers > 1. Where did you replace uint64_t with uint32_t? In IdSet::Node typedef? Any other changes? AFAICT, changing j

Re: [squid-users] FATAL: assertion failed: mem/PageStack.cc:159: "StoredNode().is_lock_free()"

2024-07-03 Thread Nishant Sharma
Hello, On 28/06/24 20:01, Nishant Sharma wrote: On 28/06/24 19:44, Alex Rousskov wrote: I do not know the answer to your question. SMP performance penalties are often smaller for smaller cache sizes, but cache size is not the only performance-affecting locking-sensitive parameter, so YMMV

Re: [squid-users] FATAL: assertion failed: mem/PageStack.cc:159: "StoredNode().is_lock_free()"

2024-06-28 Thread Nishant Sharma
On 28/06/24 19:44, Alex Rousskov wrote: I do not know the answer to your question. SMP performance penalties are often smaller for smaller cache sizes, but cache size is not the only performance-affecting locking-sensitive parameter, so YMMV. I was able to compile after commenting the specific

Re: [squid-users] FATAL: assertion failed: mem/PageStack.cc:159: "StoredNode().is_lock_free()"

2024-06-27 Thread Nishant Sharma
Thanks for your reply Alex. On 27/06/24 23:06, Alex Rousskov wrote: and how your traffic tickles them, SMP Squid without atomic locks might become very slow! We do not (and, IMO, should not) optimize performance for environments without lock-free atomics! I see the following options for going

[squid-users] FATAL: assertion failed: mem/PageStack.cc:159: "StoredNode().is_lock_free()"

2024-06-27 Thread Nishant Sharma
Hello, I am running squid 6.10 on Openwrt 23.05.2, which is cross compiled for ramips / mipsel_24kc which has a 32 bit CPU (MT7621A) with 2 cores and 2 threads. Squid fails to start in SMP mode when I set workers > 1. SMP worked fine with squid 4.13 on same architecture. I have filed a bug

Re: [squid-users] Error 503 accessing Instagram/facebook via IPv6

2021-10-29 Thread Nishant Sharma
Hello, On 30/10/21 11:40 am, marcelorodr...@graminsta.com.br wrote: > Since last 3-4 days my customers haven't been able to access > www.instagram.com and Facebook throug IPv6s that were already working as > proxies for years. > > I only get 503 error after a time out. > The strangest thing is th

Re: [squid-users] SSL handshake

2021-07-27 Thread Nishant Sharma
On 27/07/21 9:15 pm, Vieri wrote: > > I have not changed anything in the OS so it might be because of change in the > remote web service. > It might be that my openssl version is already too old (1.1.1g), and that the > web site forces the use of an unsupported cypher? I have also observed it o

Re: [squid-users] Allow some domains to bypass Squid

2018-03-11 Thread Nishant Sharma
Hi Nicolas, On Sunday 11 March 2018 05:35 PM, Nicolas Kovacs wrote: Le 11/03/2018 à 12:31, Amos Jeffries a écrit : OK, I got something that's starting to work. # Exceptions EXCEPTIONS=$(egrep -v '(^\#)|(^\s+$)' /usr/local/sbin/no-proxy.txt) for EXCEPTION in $EXCEPTIONS; do $IPT -A PREROUTING

Re: [squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-08-21 Thread Nishant Sharma
Hi Eliezer, On Sunday 18 June 2017 02:12 AM, Eliezer Croitoru wrote: I believe that you should aim for the more standard hardware devices which squid can be built on-top such as: - x86 - x86_64 - arm64 - arm5 - arm8 In order to improve response time on capable hardware, we have just pushed

Re: [squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-06-17 Thread Nishant Sharma
On 17 June 2017 11:17:38 PM IST, Amos Jeffries wrote: >That would mean making Squid aware of the internal workings of the >helper. Namely that it uses connections to a specific server, port and >which transport. One of the major points of flexibility with helpers is > >that this kind of thing

Re: [squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-06-17 Thread Nishant Sharma
Hi Eliezer, On Saturday 17 June 2017 12:37 PM, Eliezer Croitoru wrote: I wanted to be sure I am not day-dreaming but from the code it seems that every request is given a single TCP connection. Am I right? If so there is much to improve. You can use the same tcp connection for more then a singl

Re: [squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-06-16 Thread Nishant Sharma
Hi Eliezer, On 14 June 2017 11:07:16 PM IST, Eliezer Croitoru wrote: >I want to offer you a more advanced helper that supports actual >concurrency compared to the current perl helper on github, >which understands the protocol but do not use threads or any other >method of concurrency. > >Let

Re: [squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-06-14 Thread Nishant Sharma
Hi Benjamin, On Wednesday 14 June 2017 08:22 PM, Benjamin E. Nichols wrote: This sounds great, and would you mind specifying the source of the blacklist data at the core of your services? In other words, what I dare ask you is this, and im sure others might want to know, are you using the bla

[squid-users] Introducing Charcoal - Centralised URL Filter for squid

2017-06-14 Thread Nishant Sharma
Hi, We are excited to invite early users to test drive Charcoal (http://charcoal.io) - a Squid URL Rewriter for distributed proxies. Charcoal is designed to help administrators manage access rules for the proxies at just one place with a GUI, instead of editing configuration of individual pr

Re: [squid-users] Large text ACL lists

2016-10-01 Thread Nishant Sharma
Hi, On 2 October 2016 9:54:52 AM IST, Darren wrote: >Hi > >I have now opened the Pandora box of writing my own helper as per Bobs >suggestion.  We are working on a redirector which we are currently using at around 100 geographically distributed squids. These squid are running on OpenWRT and Pf

Re: [squid-users] DNS lookup fails initially for FQDN in squid

2016-05-27 Thread Nishant Sharma
Hi, On Friday 27 May 2016 09:21 PM, Aashima Madaan wrote: > (The last two commands in as quick succession as possible - preferably on a >> single line separated by a semi-colon) >> > > yes the problem still exists > > Could it be because squid is trying to resolve and connect to IPv6 address fir

Re: [squid-users] Squid authetication with Google Apps

2015-05-30 Thread Nishant Sharma
twice right?, one to authenticate in proxy and one with >google >apps. It is like use openldap authentication with GADS. What our >customer >needs is that the users can use the credentials only one time. > >Thanks >El 30/05/2015 11:15, "Nishant Sharma" >escribió: &g

Re: [squid-users] Squid authetication with Google Apps

2015-05-30 Thread Nishant Sharma
Hi, Not exactly single sign on, but I had written an IMAP auth helper which can authenticate against google apps. See this: https://github.com/codemarauder/Squid-IMAPS-Auth-Helper/ It will be a Proxy-Auth with Google Apps credentials. Regards, Nishant On 30 May 2015 19:26:16 GMT+05:30, Ope

Re: [squid-users] Squid proxy to block sites

2015-05-29 Thread Nishant Sharma
On Friday 29 May 2015 03:09 PM, Flupke wrote: All those files are under 1mb, one file is bigger the file of Porn is around 16mb, when loading this file, the squid service crashed. When I loaded this config it worked just perfect. What can I do to walk around this issue? Can you try to run sq

Re: [squid-users] Centralized Squid - design and implementation

2014-11-19 Thread Nishant Sharma
On 19 November 2014 6:41:44 pm IST, brendan kearney wrote: >it >if the Content-Type header is not set to >"application/x-ns-proxy-autoconfig". > Ah so that is why most of the java applets don't honour PAC settings and I was blaming poor coding of those applets. I usually serve PAC file with

Re: [squid-users] Centralized Squid - design and implementation

2014-11-19 Thread Nishant Sharma
On 19 November 2014 6:41:44 pm IST, brendan kearney wrote: >Yes and it seems java is even more sensitive. I had an array member >defined on a line that was not terminated with a semicolon and browsers >did >not throw errors, but java did. Pactester did not catch this. Missing >curly braces an