Re: [squid-users] rock issue

rock ] squid version [ Version 4.8] thank u From: Alex Rousskov Sent: Tuesday, July 7, 2020 4:32 PM To: patrick mkhael ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] rock issue On 7/7/20 6:26 AM, patrick mkhael wrote: > **What kind of

Re: [squid-users] rock issue

. thank u From: Alex Rousskov Sent: Saturday, July 4, 2020 3:40 AM To: patrick mkhael ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] rock issue On 7/3/20 4:50 AM, patrick mkhael wrote: > workers 3 > cpu_affinity_map process_numbers=1,2,3

Re: [squid-users] rock issue

e a way to use aufs ? thank u From: Alex Rousskov Sent: Thursday, July 2, 2020 4:24 PM To: patrick mkhael ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] rock issue On 7/1/20 4:45 PM, patrick mkhael wrote: > ***Please note that you have

Re: [squid-users] rock issue

squid-cache.org Subject: Re: [squid-users] rock issue On 2/07/20 8:45 am, patrick mkhael wrote: > > ***Please note that you have 20 kids worth mapping (10 workers and 10 > diskers), but you map only the first 10.​{since i did not get the point > of the diskers ,as far as i understood ,

Re: [squid-users] rock issue

s and timeouts for cache_dirs? [I took it also from online forum , can i leave it empty for both] Do you see any ERRORs or WARNINGs in cache log? [NO error or warning found in cache] thank u so much ! From: Alex Rousskov Sent: Wednesday, July 1, 2020 10:26 PM

[squid-users] rock issue

Dears, Kindly note that i have a lab, where the internet traffic is 100 Mb/s of pure http targeted traffic, i m trying to achieve cache gain ratio of 60% , i was able to do this using ufs cache dir and single worker. But i found that i need to work with rock cache dir since the real traffic is

[squid-users] squid+apache+php-fpm How squid could mark DEAD a peer where Apache is alive and php-fpm dead?

have setup some watchdogs scripts that will now, from the VM intern itself, check if there is a 504 code returned by Apache, and in that case, will restart php-fpm. But how to tell squid to mark dead a peer that returns 504 code ? Tha

Re: [squid-users] domains with accented international characters fail with Invalid URL

Sorry for this, it seems it is not linked to accented characters. Other not accented domains don't work too. I am checking my configuration. Patrick Le 12/05/2020 à 14:40, Patrick Chemla a écrit :

[squid-users] domains with accented international characters fail with Invalid URL

/5.0 (X11; Fedora; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0" TCP_MEM_HIT_ABORTED:HIER_NONE I tried to search google  but can't find any details on a special setting in squid.conf to accept accented internationals letters. Maybe someone here could help? Many thanks in advance. Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Multiple SSL certificates on same IP

es on one single IP, and I would like to do the same with squid. I did few years ago with HaProxy, but I would prefer to keep squid. 3 choices: - Having more than one IP on the server, create

[squid-users] Intercepting proxy creates forwading loop

Hello list, I have resolved first problem about cache_peer using Kerberos authentication. Now I want to make that setup transparent/intercepting. Keep in mind that my situation does NOT involve browsers or port 80 at any point, it's a pure machine-to-machine API communication. I have added the "i

Re: [squid-users] Squid as Kerberos client?

in a continuous "401 Unauthorized" loop. I have more problems but will start a separate question for that. On Thu, Mar 15, 2018 at 12:53 PM, Amos Jeffries wrote: > On 15/03/18 23:52, Patrick Nick wrote: > > Thanks Amos, this sounded promising. Unfortunately the behavior I > >

Re: [squid-users] Squid as Kerberos client?

ed to happen? Or am I not configuring it right? (The keytab is readable by the squid user) On Thu, Mar 15, 2018 at 9:44 AM, Amos Jeffries wrote: > On 15/03/18 11:01, Patrick Nick wrote: > > It consumes the data for its graphs from a REST API via HTTP, on ports > > in the 8000-9000 ra

Re: [squid-users] Squid as Kerberos client?

ation? > > Am 14. März 2018 19:27:48 MEZ schrieb Patrick Nick >: >> >> Hi Enrico, >> >> You write >> >>> But squid cannot authenticate those requests on the destination server >>> if it needs authentication as well. >> >> >&g

Re: [squid-users] Squid as Kerberos client?

trict it to both, src and destination and additionaly specific > ports. But squid cannot authenticate those requests on the destination > server if it needs authentication as well. > > Best regards, > Enrico > > > Am 14. März 2018 18:58:54 MEZ schrieb Patrick Nick >:

[squid-users] Squid as Kerberos client?

Hello list, We are in the process of Kerberizing our Big Data operation, but we have a GUI tool in use that is not capable of Kerberos authentication. I'm looking for a way to keep using it, which means that it needs to read data from a Kerberos-protected service. To be clear, I'm looking for a p

[squid-users] Redirect input http to https

will send a 302 redirect to https to all requests coming in in http? Many thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

Hi Alex, Ivan, I finally found time to change/test the squid config to load balance on outgoing IPs, and thanks you very much it works very good. All traffic is not output according to the rules to the right IPs. Other question I will open a new thread. Many many thanks. Patrick Le 23/02

[squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

squid outgoing traffic on this IP, and I can't find how to deny tcp_outgoing_address to be on the main IP. I hope it's clear, and I need help after I searched for days many combinations. Many thanks Patrick ___ squid-users mailing list squid-us

[squid-users] Change are not taking

Hi, I am making changes to my squid.conf, yet they don't seem to take. Is there something I'm missing? Any help appreciated # Squid Proxy Configuration # Network(s) where proxy traffic is originating # acl localnet src 10.0.0.0/8 # RFC1918 possible internal network # acl loca

Re: [squid-users] Trusted CA Certificate with ssl_bump

t all others? Thanks Patrick Le 17/11/2016 à 20:11, Patrick Chemla a écrit : Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thank

Re: [squid-users] Trusted CA Certificate with ssl_bump

Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thanks for valuable help. Patrick Le 17/11/2016 à 19:48, Patrick Chemla a écrit

Re: [squid-users] Trusted CA Certificate with ssl_bump

ist: ACLFilledChecklist destroyed 0x78737acd2520 2016/11/17 18:36:15.609 kid1| 28,4| Checklist.cc(197) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x78737acd2520 Thanks for help Patrick Le 16/11/2016 à 20:16, Patrick Chemla a écrit : Many Thanks Alex. I will try in the next hours a

Re: [squid-users] Trusted CA Certificate with ssl_bump

Many Thanks Alex. I will try in the next hours and let you if I am successful. Patrick Le 16/11/2016 à 20:04, Alex Crow a écrit : On 16/11/16 17:33, Patrick Chemla wrote: Thanks for your answers, I am not doing anything illegal, I am trying to build a performant platform. I have a big

Re: [squid-users] Trusted CA Certificate with ssl_bump

wto, clear, that will help? I found many on Google and not any gave me the solution working. The other question is about Trusted Certificates. We have on the websites trusted certificates. Should we use the same on the squid? Thanks for appeciate help Patrick Le 16/11/2016 à 14:27, Amos

Re: [squid-users] Trusted CA Certificate with ssl_bump

tings, from where I could get how to do? Thanks for help Patrick Le 15/11/2016 à 18:30, Yuri Voinov a écrit : 15.11.2016 22:28, Alex Crow пишет: On 15/11/16 16:22, Yuri Voinov wrote: You can if you have control over the clients, ie install your CA into the browser/OS. ... and this can be il

Re: [squid-users] squid-users Digest, Vol 27, Issue 26

the response. So TAG_NONE/503 means Squid could not connect to www.website.com on behalf of the 2 clients. Is that correct? Thanks again, Patrick >>No, >>TAG_NONE/503 is not able to connect. 15.11.2016 2:05, Patrick Flaherty пишет: > > Hello, > > > > Can any

[squid-users] 21 sec connect timeout

not connect to www.website.com and timed out after ~21 secs. 09/Nov/2016:11:54:53 -0500 21029 10.10.15.96 TAG_NONE/503 0 CONNECT www.website.com:443 - HIER_NONE/- - 09/Nov/2016:11:54:53 -0500 21029 10.10.15.81 TAG_NONE/503 0 CONNECT www. website.com:443 - HIER_NONE/- - Thanks in adv

Re: [squid-users] squid-users Digest, Vol 27, Issue 4

a site does require SSL then can squid handles that where again the responses back to the client are http. -Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Groups of peers load-balancing

Many thanks Amos for your help. I will set up my servers in the next days, and will let you know how it works, well I am sure. Patrick Le 06/10/2016 à 13:11, Amos Jeffries a écrit : On 6/10/2016 8:52 p.m., George William Herbert wrote: Usually you load balance with another tool... HTTP

[squid-users] Groups of peers load-balancing

t the cache_peer_access to the needed group. Can you help? Do you have similar examples? Thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Preserving Squid.conf when upgrading

Hi, For the Windows version of Squid from the good folks at Diladele, will it ever preserve the squid.conf file when uninstalling and reinstalling (upgrading)? Thank you, Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org

[squid-users] Slow App through Proxy

ow because I would like to see if there is an easier method to fix this as opposed to the one I just outlined. Any input would be greatly appreciated. Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid

Re: [squid-users] Fw: Squid 32-bit (2.7.2) much faster than 64-bit (3.5.11)

27;dns_v4_first', was I experiencing a IPv6 timeout and it falling back on IPv4? Because it does ultimately work... just slow. Third question if the answer to question 2 is yes, should the DNS IPv4 lookup (successful) be cached so that next time it is fast? Thanks Amos, Patrick Message: 3 Date:

[squid-users] Fw: Squid 32-bit (2.7.2) much faster than 64-bit (3.5.11)

(2.7.2) much faster than Message-ID: <566b9c8d.9000...@treenet.co.nz> Content-Type: text/plain; charset=utf-8 On 12/12/2015 7:42 a.m., Patrick Flaherty wrote: > Hello, > > I added the following line to my squid.conf and now Squid 3.5.11 is as fast > as 2.7.2 and feels like dire

Re: [squid-users] Fw: Squid 32-bit (2.7.2) much faster than

Hello, I added the following line to my squid.conf and now Squid 3.5.11 is as fast as 2.7.2 and feels like direct internet access. dns_v4_first on Thank You, Patrick Message: 3 Date: Sat, 12 Dec 2015 02:47:05 +1300 From: Amos Jeffries To: squid-users@lists.squid-cache.org Subject: Re

[squid-users] Squid 32-bit (2.7.2) much faster than Squid 64-bit (3.5.11)

nk my 2.7.2 squid.conf needs work. See below Startup Cache logs from both 3.5.11 and 2.7.2 and also the squid.conf files from 3.5.11 and 2.7.2. Thank You, Patrick Squid 3.5.11 Startup Cache Log: 2015/12/10 19:50:09 kid1| Current Directory is /cygdrive/c/Windows/system32 2015/12/10 19:50:09

Re: [squid-users] Slow Squid

Hi , I have changed my 3.5.11 squid.conf based on your excellent feedback Amos. Please have a look at my edits to see if it is improved. Thank You, Patrick # Squid Proxy Configuration # listening port http_port 3128 # max_filedesc max_filedesc 2048 # debug_options ALL,2 # acl

[squid-users] Slow Squid

e hit. See my squid config below and please offer any suggestions. Thank You, Patrick # Proxy Configuration http_port 3128 # acl and http_access to ("whitelist.txt") acl whitelist dstdomain "c:/squid/etc/squid/whitelist.txt" http_accessallow whi

[squid-users] Understand debug Logs

Hi, I have debug level set to 2 (ALL,2) and was wondering if ANY of the following messages in the logs below were of concern. I'm new to Squid and loving it. Particularly where it says always_direct = DENIED & never_direct = DENIED. Thanks Patrick CONNECT mydomain.com:443

[squid-users] SQUID_ERR_SSL_HANDSHAKE

Hi, Doing some debugging (ALL,9) and looking at the cache log just after starting the Squid Windows Service and I see the following error. Can anyone help with what this means? Is it a misconfiguration? Thanks Patrick name: SQUID_ERR_SSL_HANDSHAKE detail: "%ssl_error_

[squid-users] SQUID_ERR_SSL_HANDSHAKE

Hi, Doing some debugging (ALL,9) and looking at the cache log just after starting the Squid Windows Service and I see the following error. Can anyone help with what this means? Is it a misconfiguration? Thanks Patrick name: SQUID_ERR_SSL_HANDSHAKE detail: "%ssl_error_

[squid-users] Disabling IP6 in 3.5.x

Hello, Is there a way to disable IP6 in the 3.5.x Squid builds? Thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] DNS Socket Created

Hello, What does Squid open Sockets for? (As shown below) 2015/12/02 17:20:53 kid1| DNS Socket created at [::], FD 5 2015/12/02 17:20:53 kid1| DNS Socket created at 0.0.0.0, FD 6 Thanks, Patrick ___ squid-users mailing list squid-users

[squid-users] Windows Uninstall to Update

Hi, When I uninstalled Squid 3.5.10, my squid.conf file got deleted by the uninstall. Is this a bug or by design? I guess this question is for Rafael of Diladele who very generously creates Windows binaries for people like me. Thank you Rafael, very much appreciated. -Patrick

[squid-users] read/write failure: (113) Software caused connection abort

res/5b6b43a8ccee YOU DO NOT NEED WIRESHARK TO VIEW SMALL PACKET CAPTURE. (WEB_BASED) Any help or insight would be greatly appreciated. Thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-ca

Re: [squid-users] squid-users Digest, Vol 15, Issue 71

Hello, Here is my squid config. -Patrick --- # Squid Proxy Configuration http_port 3128 # acl and http_access to

[squid-users] (113) Software caused connection abort

. Thanks Patrick kid1| local=192.168.1.1:3128 remote=192.168.1.216:61171 FD 9 flags=1: read/write failure: (113) Software caused connection abort

Re: [squid-users] affinity session load balancing

Hi, This is exactly the problem. When users connect to the application, they go through the squid, then reach a login page where they enter login/passwd. The application creates cookies including a PHPSESSION cookie. Can squid use such cookie? Patrick On 16/11/2015 12:49, Antony Stone

Re: [squid-users] affinity session load balancing

affinity LB, my need is to use a round-robin load balancing, but, very important, each user should always directed to the same backend. Can we do that with squid? avoiding user login on squid (userhash is not convenient)? Patrick On 16/11/2015 11:41, Antony Stone wrote: On Monday 16 November 2015

[squid-users] affinity session load balancing

robin? some affinity session load balancing? Thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Fw: new message

Hey! New message, please read patrick.la...@inserm.fr ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] 32-bit Windows Installer

Hi, Does anyone know if there are current 32-bit Windows Squid install binaries? If not what is the latest version that I can download a squid folder where I can create a service manually from? Thank You, Patrick ___ squid-users mailing list

[squid-users] Pass client DNS requests

in a network trace with "Destination Unreachable". acl Safe_ports port 53 http_access allow Safe_ports Thank You, Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.

Re: [squid-users] What does this error mean?

othing in between meaning it's the client connecting to Squid directly. So it must be out client software creating a RST or the Windows Stack itself. Thanks Patrick -- Message: 2 Date: Mon, 9 Nov 2015 22:42:08 +0530 From: Sreenath BH To: Alex Rousskov Cc: squid-us

[squid-users] What does this error mean?

11 flags=1: read/write failure: (113) Software caused connection abort Any help here would be greatly appreciated. Thanks Patrick ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Strange Interaction between Squid and Facebook

. And thank you again for packaging newer squid versions for CentOS! Pat Blair Sr. Unix Administrator Peapod, LLC pbl...@peapod.com On Oct 29, 2015 21:09, "Eliezer Croitoru" wrote: > Hey Patrick, > > Thanks for clearing the picture out. > Since it's HTTPS traffic it wil

Re: [squid-users] Strange Interaction between Squid and Facebook

Hi Amos, I ran squid with those debug options you indicated and here is the output for requesting https://www.facebook.com and https://www.facebook.com/PeapodDelivers/ access.log 1446160994.160471 10.1.99.147 TCP_MISS/200 3628 CONNECT api.ip2info.org:443 pblair HIER_DIRECT/178.63.49.5 - 14461

Re: [squid-users] Strange Interaction between Squid and Facebook

Hi Eliezer, First, THANK YOU for packaging squid for CentOS 7! I actually reused your SRPM for my squid 3.5.x builds, just changed a few options :) About the issue itself. > Couple questions? > Are you running\using ssl-bump or not? No, not at all, it should just be set to "none" > When a clie

Re: [squid-users] Strange Interaction between Squid and Facebook

Amos, Thanks for the reply, I apologize if this doesn't come through correctly as gmail doesn't seem to be parsing the list emails properly. Are these https:// traffic arriving to the proxy in the form of CONNECT > requests? > Or regular http:// URLs arriving as GET method? > Is a POST or PUT met

[squid-users] Strange Interaction between Squid and Facebook

Hi All, I apologize for the length of this post, but I'm really at my wits' end and am completely out of ideas as to how I might fix this or why this is happening. Background and Architecture: We are using Squid as our user internet access proxy, it is performing authentication via LDAP if a site

Re: [squid-users] squidGuard configuration test - echo test

We switched to ufdbGuard recently and were a bit confused on that point as well. But see: https://www.urlfilterdb.com/products/ufdbguard.html "ufdbGuard is copyright-protected, but free for use. Also in commercial environments." The pricing page and licensing model you have linked is only for th

Re: [squid-users] url_rewrite_extras - not getting data excepted

my helpers don't seem like they're being called when I use it. The user= value no longer shows up in access.log and my helper logs are empty. Is this a known issue? Is there anything I can provide that would be helpful? On Fri, May 22, 2015 at 10:44 AM, Patrick wrote: > Hmm, the

Re: [squid-users] url_rewrite_extras - not getting data excepted

ies wrote: > On 23/05/2015 12:59 a.m., Patrick wrote: > > Thanks for looking at this, Amos. Unfortunately, I am still seeing the > > same result with the squid-3.5.4-20150522-r13836 daily. > > > > I was thinking I might just being seeing what's described at &g

Re: [squid-users] url_rewrite_extras - not getting data excepted

e dash on every request. On Fri, May 22, 2015 at 12:27 AM, Amos Jeffries wrote: > On 22/05/2015 4:10 a.m., Patrick wrote: > > Hello, > > > > I think I'm having a problem with the url_rewrite_extras function. I'm > > using version 3.5.3. I've been trying

[squid-users] url_rewrite_extras - not getting data excepted

excepted in access.log: 1432219189.592 40 172.20.15.235 TCP_MISS/404 509 GET http:// <http://www.ipchicken.com/>www.ipchicken.com/ <http://www.ipchicken.com/> user@ example.com HIER_DIRECT/ 209.68.27.16 text/html Does anyone see anything I might have mis-configured or am I jus