Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-24 Thread Alex Rousskov
On 2024-12-23 21:59, Andrey K wrote: in my opinion, the ACL used in the policy is fast, as stated in the documentation (https://www.squid-cache.org/Doc/config/acl/): acl aclname dstdomain [-n] .foo.com ... # Destination server from URL [fast] That documentation is misleading: In s

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-23 Thread Andrey K
Hello, I am sorry to interrupt the conversation, but in my opinion, the ACL used in the policy is fast, as stated in the documentation ( https://www.squid-cache.org/Doc/config/acl/): acl aclname dstdomain [-n] .foo.com ... # Destination server from URL [fast] So the configuration is re

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-23 Thread A. Pechenin
Unfortunately, there is no greater clarity in the practical application of the techniques used in the topics you have provided. I would be grateful for practice specifically in my case for a better understanding of the work. пн, 23 дек. 2024 г. в 00:42, Alex Rousskov : > On 2024-12-22 15:13, A.

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-22 Thread Alex Rousskov
On 2024-12-22 15:13, A. Pechenin wrote: could you please explain in more detail and in my case what needs to be added to "strengthen and ensure" the operation of my solution? Does Q2 and Q3 at [1] help? If not, I hope that others can guide you through using a never-matching http_access rule an

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-22 Thread A. Pechenin
Thank you for your clarification. But could you please explain in more detail and in my case what needs to be added to "strengthen and ensure" the operation of my solution? The quote from the file squid.conf.documented is not very clear to me. # # # First, mark transactions accepted afte

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-22 Thread Jonathan Lee
Great Job sorry I assumed this was related to ssl bump issues. Sent from my iPhone > On Dec 22, 2024, at 11:47, Alex Rousskov > wrote: > > On 2024-12-22 08:13, A. Pechenin wrote: >> The reason and solution were not simple and obvious at first glance. >> I have two providers accessing the gatew

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-22 Thread Alex Rousskov
On 2024-12-22 08:13, A. Pechenin wrote: The reason and solution were not simple and obvious at first glance. I have two providers accessing the gateway, the main and backup channels, and automatic switching is configured when the connection on the main channel is lost. To check, I switched the

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-22 Thread A. Pechenin
The reason and solution were not simple and obvious at first glance. I have two providers accessing the gateway, the main and backup channels, and automatic switching is configured when the connection on the main channel is lost. To check, I switched the proxy server to the second channel and the p

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
.googleapis.com >> >> Make sure you follow the enterprise policy for Google Android based >> products. >> >> Some sites simply can not and or should not be bumped and you only should >> look at the get header. >> >> -- >&g

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
No, ssl_bump is not used in any form in Squid, I intentionally reproduced the problem on the default configuration file. In access.log i do not observe any questionable recordings when reproducing the problem: acl hasRequest has request access_log daemon:/var/log/squid/access.log squid hasRequest

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Alex Rousskov
On 2024-12-21 12:26, A. Pechenin wrote: This week, when connecting users through a proxy server, some Google services became inaccessible, such as Calendar, Translator, user profile. Do you use any ssl_bump directives? You have mentioned a test with "default configuration file" below. That con

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
com> Sent: Saturday, December 21, 2024 11:46 To: Jonathan Lee <jonathanlee...@gmail.com> Cc: squid-users@lists.squid-cache.org <squid-users@lists.squid-cache.org> Subject: Re: [squid-users] SQUID problem with unavailability of Google services   I apologize for the formatting of the t

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
m/> >> >> Make sure you follow the enterprise policy for Google Android based >> products. >> >> Some sites simply can not and or should not be bumped and you only should >> look at the get header. >> >> From: A. Pechenin mailto:alexm...@gm

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
-- > *From:* Jonathan Lee > *Sent:* Saturday, December 21, 2024 11:57 > *To:* A. Pechenin > *Cc:* squid-users@lists.squid-cache.org > > *Subject:* Re: [squid-users] SQUID problem with unavailability of Google > services > > You can use the followi

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
t; .googleapis.com > > Make sure you follow the enterprise policy for Google Android based > products. > > Some sites simply can not and or should not be bumped and you only should > look at the get header. > > -- > *From:* A. Pechenin >

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
works. support.apple.com From: Jonathan Lee Sent: Saturday, December 21, 2024 11:57 To: A. Pechenin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] SQUID problem with unavailability of Google services You can use the following acl NoSSLIntercept ssl::server_name_

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
Lee Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] SQUID problem with unavailability of Google services I apologize for the formatting of the text of the letter? I will be incorrect if I do not say that there are entries in the cache.log, although the IP does not resolv

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
I apologize for the formatting of the text of the letter? I will be incorrect if I do not say that there are entries in the cache.log, although the IP does not resolve directly to google subdomains, but according to whois, this is the Google LLC farm. 2024/12/21 21:54:57 kid1| conn43356657 local

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
Have you created a splice only file with lists of items that must be spliced at all times, Google mail ethically should be spliced just as an example. Some know sites must be spliced. Sent from my iPhone > On Dec 21, 2024, at 09:32, A. Pechenin wrote: > >  > This week, when connecting users

[squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
This week, when connecting users through a proxy server, some Google services became inaccessible, such as Calendar, Translator, user profile. When clicking on the services section in the browser on the Google portal, the page does not open and then a connection error is displayed. When directly