Re: [squid-users] Refresh ACL list only

2015-03-30 Thread Samuel Anderson
This is my config file. It takes about 30 seconds to reload when using the command (sudo squid3 -k reconfigure) http_port 3128 visible_hostname squid.##.local error_directory /etc/squid3/errors/en # Recommended minimum configuration: # #acl manager proto cache_object #acl localhost src 127.

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Marcus Kool
On 03/17/2015 04:32 PM, Brendan Kearney wrote: On Tue, 2015-03-17 at 16:13 -0300, Marcus Kool wrote: it has a configuration option to respond with 'allow all' during a reconfiguration. a Fail-Open policy can be a security gap, and should be considered carefully before implementing. the inte

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm already scored ufdbguard. It reconfigures momentary, without squid interruption. With arbitrarily complex ACL's. 18.03.15 1:13, Marcus Kool пишет: > > > On 03/17/2015 02:59 PM, Samuel Anderson wrote: >> Unfortunately thats not really an option

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Brendan Kearney
On Tue, 2015-03-17 at 16:13 -0300, Marcus Kool wrote: > it has a configuration option to respond with > 'allow all' during a reconfiguration. a Fail-Open policy can be a security gap, and should be considered carefully before implementing. the intention of the whitelisted URLs is to prevent acces

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Marcus Kool
On 03/17/2015 02:59 PM, Samuel Anderson wrote: Unfortunately thats not really an option for me. I've already built everything just using squid. It works great and does everything I need it to do with the exception of refreshing the ACL lists. I just need to find a way to refresh those single

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
Thanks, I'll look into using haproxy. On Tue, Mar 17, 2015 at 12:31 PM, Brendan Kearney wrote: > On Wed, 2015-03-18 at 00:08 +0600, Yuri Voinov wrote: > > Brendan reads my thoughts. :) > > > > You can, of course, use two or more squid instances and Cisco with > > configured WCCP protocol before

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Brendan Kearney
On Wed, 2015-03-18 at 00:08 +0600, Yuri Voinov wrote: > Brendan reads my thoughts. :) > > You can, of course, use two or more squid instances and Cisco with > configured WCCP protocol before it. WCCP can plays with several cache > instances in load balancing role. Running squid at this moment send

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alberto, quetsion is not about this completely. ;) 18.03.15 0:08, Alberto Perez пишет: > I did this once, with external acl, you can specify a ttl of each > external acl and also make your acl reload the list any time you > want. > > My external ac

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Alberto Perez
I did this once, with external acl, you can specify a ttl of each external acl and also make your acl reload the list any time you want. My external acl loaded users (in your case domains) from a list in hard disk to memory, and then each time squid asked acl verify for a preset elapsed time to r

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brendan reads my thoughts. :) You can, of course, use two or more squid instances and Cisco with configured WCCP protocol before it. WCCP can plays with several cache instances in load balancing role. Running squid at this moment sends "here I am" mes

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Unfortunately, there is completely impossible in current Squid realisation. Only with ufdbGuard. Or, of course, you can build hierarchical cache cluster :) with load balanser before it. And reload ACL's lists consequentially. 17.03.15 23:59,

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Brendan Kearney
On Tue, 2015-03-17 at 11:59 -0600, Samuel Anderson wrote: > Unfortunately thats not really an option for me. I've already built > everything just using squid. It works great and does everything I need > it to do with the exception of refreshing the ACL lists. I just need > to find a way to refresh

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
Unfortunately thats not really an option for me. I've already built everything just using squid. It works great and does everything I need it to do with the exception of refreshing the ACL lists. I just need to find a way to refresh those single lists without disrupting Internet traffic to the user

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did you hear about rewriters and filters? I.e., squidGuard, or Dansguardian? Or, of course https://www.urlfilterdb.com/products/ufdbguard.html ? It has separate server process which can be restart VERY quickly independently of squid. 17.03.15 23:35, S

[squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
Hello all, Does anyone know of a way to reload a single ACL list? I have a very complicated and large config file that takes around 30 seconds to reload when I run the (squid3 -k reconfigure) command. I have several ACL lists that need to be updated throughout the day and it would be nice if I cou