Amos, I opened a bug report:
https://bugs.squid-cache.org/show_bug.cgi?id=5251
hopefully I got the wording right, please edit it if needs be.
in the meantime, is there any workaround to be used?
On Wed, 30 Nov 2022 at 03:00, Amos Jeffries wrote:
> On 29/11/2022 9:07 pm, N wrote:
> > Hi Amos,
>
On 29/11/2022 9:07 pm, N wrote:
Hi Amos,
thanks for the quick response.
following your comments, my configuration now looks like this:
acl auth_users proxy_auth REQUIRED
http_access deny !auth_users
acl wg_uk note user uk
tcp_outgoing_address 10.200.0.70 wg_uk
tcp_outgoing_address fe80::bd02:7fd
On 26/11/2022 11:49 pm, N wrote:
Hi,
I'm trying to use tcp_outgoing_address to forward traffic from
specific users to a specific interface.
running squid 5.7 (on openwrt).
have a few interfaces on my machine, two of which are VPN interfaces
with IPs (internal) 10.200.0.70 and10.102.237.50.
t
On 7/15/19 4:50 PM, --Ahmad-- wrote:
> i ask is it possible we have it as variable ?
>
> and tcp_outgoing_address to match acl as variable header from incoming
> packs ?
Sorry, I do not understand what "as variable" means in this context.
Please give an example or explain why the proposed soluti
Hi Alex Thank you very much .
i ask is it possible we have it as variable ?
and tcp_outgoing_address to match acl as variable header from incoming packs ?
> On 15 Jul 2019, at 22:00, Alex Rousskov
> wrote:
>
> acl requestsWithStartEqual1p1p1p1 req_header Start ^1[.]1[.]1[.]1$
> ...
> tcp
On 7/15/19 10:33 AM, --Ahmad-- wrote:
> i want to ask how can i adapt external ip address in squid based on incoming
> requests .
>
> say i have squid with ips :
> 1.1.1.1
> 2.2.2.2
> 3.3.3.3
> client will initiate a header called start with value = 1.1.1.1
> how can i let squid make tcp_outgo
On 16/06/18 01:18, davidjesse091 wrote:
> That's right, I'm using the IP address of the interface for
> tcp_outgoing_address. I want to be using tcp_outgoing_address based on
> the port number of the incoming connection. Would that be possible by
> using Linux routing?
You are asking the wrong qu
To: squid-users
Sent: Fri, Jun 15, 2018 3:01 am
Subject: Re: [squid-users] tcp_outgoing_address working on Windows machine but
not on Ubuntu
On 15.06.18 01:05, davidjesse...@aol.com wrote:>On my Windows machine I can
successfully connect to interface 1 and have> the connections go out from
i
To: squid-users
Sent: Fri, Jun 15, 2018 3:01 am
Subject: Re: [squid-users] tcp_outgoing_address working on Windows machine but
not on Ubuntu
On 15.06.18 01:05, davidjesse...@aol.com wrote:>On my Windows machine I can
successfully connect to interface 1 and have> the connections go out from
i
On 15.06.18 01:05, davidjesse...@aol.com wrote:
On my Windows machine I can successfully connect to interface 1 and have
the connections go out from interface 2 using "tcp_outgoing_address", but
this does not work on my Linux Ubuntu machine. Anyone else notice this
and know the reason and soluti
On 21/03/18 08:12, Michael Pro wrote:
> Totally agree with you, and at the same time - do not agree. But,
> consider the following situation. There is https://site.net/ where
> there is 1.jpg and 2.jpg. If I download from this site 1.jpg from the
> address 1.1.1.1 and 2.jpg from the address 2.2.2.2
On 03/20/2018 01:12 PM, Michael Pro wrote:
> Totally agree with you, and at the same time - do not agree.
AFAICT, I only stated facts, not opinions. There is nothing to agree or
disagree with in my response.
Alex.
___
squid-users mailing list
squid-user
Totally agree with you, and at the same time - do not agree. But,
consider the following situation. There is https://site.net/ where
there is 1.jpg and 2.jpg. If I download from this site 1.jpg from the
address 1.1.1.1 and 2.jpg from the address 2.2.2.2. Even more. There
are situations when you nee
On 03/20/2018 05:11 AM, Michael Pro wrote:
> Question: how can we break the established channel (unpinn it) along
> the old route and establish a new channel along the new route, when we
> already know how.
Squid supports using multiple sequential connections for the same
from-client request, but
On 21/03/18 00:11, Michael Pro wrote:
> squid-5 master branch, not have personal/private repository changes,
> not use cache_peer's ability, (if it's matters - not use transparent
> proxying ability).
>
> We have a set of rules (ACL's with url regex) for content, depending
> on which we make a d
Hi Alex, Ivan,
I finally found time to change/test the squid config to load balance on
outgoing IPs, and thanks you very much it works very good. All traffic
is not output according to the rules to the right IPs.
Other question I will open a new thread.
Many many thanks.
Patrick
Le 23/02/
On 02/22/2018 02:52 PM, Ivan Larionov wrote:
> Your balancing rules are incorrect. This is how we balance 30% per IP:
You won the race! Perhaps our similar emails will increase the page rank
of the correct answers to this FAQ. :-).
Alex.
___
squid-users
On 02/22/2018 11:15 AM, Patrick Chemla wrote:
> acl Percent001 random 1/5
> acl Percent002 random 1/5
> acl Percent003 random 1/5
> acl Percent004 random 1/5
> acl Percent005 random 1/5
It is trivial to google up wrong configurations. Think about it: Giving
the same "random 1/5" ACL five differen
Your balancing rules are incorrect. This is how we balance 30% per IP:
# 33% of traffic per local IP
acl third random 1/3
acl half random 1/2
tcp_outgoing_address X.X.X.2 third
tcp_outgoing_address X.X.X.3 half
tcp_outgoing_address X.X.X.4
Read https://wiki.squid-cache.org/Features/AclRandom.
B
On Mon, Jun 29, 2015 at 9:35 PM, Amos Jeffries wrote:
> On 30/06/2015 8:54 a.m., Nick Rogers wrote:
> > Hello,
> >
> > I am experiencing an issue with squid 3.5.5 and FreeBSD 10.1 where
> > tcp_outgoing_address correctly rewrites the source address of outgoing
> > packets, but fails to bind the s
On 30/06/2015 8:54 a.m., Nick Rogers wrote:
> Hello,
>
> I am experiencing an issue with squid 3.5.5 and FreeBSD 10.1 where
> tcp_outgoing_address correctly rewrites the source address of outgoing
> packets, but fails to bind the socket to the correct interface. I've been
> using this kind of setu
On 16/04/2015 5:59 p.m., Alex Samad wrote:
> On 16 April 2015 at 14:54, Amos Jeffries wrote:
>> On 16/04/2015 3:20 p.m., Alex Samad wrote:
>>> :) Living in Australia that has just sign into law meta data
>>> recording. So I am sending some of my traffic OS via a vpn service.
>>>
>>> But I still wa
On 16 April 2015 at 14:54, Amos Jeffries wrote:
> On 16/04/2015 3:20 p.m., Alex Samad wrote:
>> :) Living in Australia that has just sign into law meta data
>> recording. So I am sending some of my traffic OS via a vpn service.
>>
>> But I still want some things to go locally, so I was using src
On 16/04/2015 3:20 p.m., Alex Samad wrote:
> :) Living in Australia that has just sign into law meta data
> recording. So I am sending some of my traffic OS via a vpn service.
>
> But I still want some things to go locally, so I was using src ip
> address to help my router determine which path to
:) Living in Australia that has just sign into law meta data
recording. So I am sending some of my traffic OS via a vpn service.
But I still want some things to go locally, so I was using src ip
address to help my router determine which path to use.
unfortunately my vpn service doesn't handle IP
On 16/04/2015 2:33 p.m., Alex Samad wrote:
> Hi
>
> Is there any way to make some sites to be access only via ipv4 ? So
> even if there is a ipv6 address I reject it
Not in the way you are thinking.
acl to_ipv6 dst ipv6
http_access deny to_ipv6
will deny access to any IPv6-enabled website (
Hi
Is there any way to make some sites to be access only via ipv4 ? So
even if there is a ipv6 address I reject it
Thanks
Alex
On 15 April 2015 at 19:52, Amos Jeffries wrote:
> On 15/04/2015 8:32 p.m., Alex Samad wrote:
>> Hi
>>
>> I have squid-3.5.2-2.el6.x86_64 on centos 6.6
>>
>> I am trying
On 15/04/2015 8:32 p.m., Alex Samad wrote:
> Hi
>
> I have squid-3.5.2-2.el6.x86_64 on centos 6.6
>
> I am trying to direct certain destinations from certain ip addresses
>
>
> acl viaTest dstdomain .abc.com
>
> tcp_outgoing_address 192.168.11.11 viaTEst
>
> This works well for
>
> www.abc.c
On 01/25/2015 02:33 PM, Amos Jeffries wrote:
On 26/01/2015 4:59 a.m., Marcus Kool wrote:
The debug trace starts with:
Xaction.cc(133) openConnection: *Adaptation::Icap::OptXact* opens
connection to 10.10.0.6:1344
and then
comm.cc(549) comm_openex: comm_openex: Attempt open socket for:
*a.pub
On 26/01/2015 4:59 a.m., Marcus Kool wrote:
>
>
> The debug trace starts with:
> Xaction.cc(133) openConnection: *Adaptation::Icap::OptXact* opens
> connection to 10.10.0.6:1344
> and then
> comm.cc(549) comm_openex: comm_openex: Attempt open socket for:
> *a.public.IP.address*
> comm.cc(590) com
On 01/25/2015 01:12 PM, Amos Jeffries wrote:
On 25/01/2015 11:43 p.m., Marcus Kool wrote:
On 01/24/2015 11:24 PM, Amos Jeffries wrote:
On 25/01/2015 9:39 a.m., Marcus Kool wrote:
On 01/24/2015 10:15 AM, Amos Jeffries wrote:
On 22/01/2015 10:11 a.m., Marcus Kool wrote:
I am using Squid
On 25/01/2015 11:43 p.m., Marcus Kool wrote:
>
>
> On 01/24/2015 11:24 PM, Amos Jeffries wrote:
>> On 25/01/2015 9:39 a.m., Marcus Kool wrote:
>>>
>>>
>>> On 01/24/2015 10:15 AM, Amos Jeffries wrote:
On 22/01/2015 10:11 a.m., Marcus Kool wrote:
> I am using Squid 3.4.9 and have an issue
On 01/24/2015 11:24 PM, Amos Jeffries wrote:
On 25/01/2015 9:39 a.m., Marcus Kool wrote:
On 01/24/2015 10:15 AM, Amos Jeffries wrote:
On 22/01/2015 10:11 a.m., Marcus Kool wrote:
I am using Squid 3.4.9 and have an issue with tcp_outgoing_address.
The Squid server is connceted to the inter
On 25/01/2015 9:39 a.m., Marcus Kool wrote:
>
>
> On 01/24/2015 10:15 AM, Amos Jeffries wrote:
>> On 22/01/2015 10:11 a.m., Marcus Kool wrote:
>>> I am using Squid 3.4.9 and have an issue with tcp_outgoing_address.
>>>
>>> The Squid server is connceted to the internet with multiple NICs and
>>> u
On 01/24/2015 10:15 AM, Amos Jeffries wrote:
On 22/01/2015 10:11 a.m., Marcus Kool wrote:
I am using Squid 3.4.9 and have an issue with tcp_outgoing_address.
The Squid server is connceted to the internet with multiple NICs and uses
tcp_outgoing_address a.public.IP.address
and also want t
On 22/01/2015 10:11 a.m., Marcus Kool wrote:
> I am using Squid 3.4.9 and have an issue with tcp_outgoing_address.
>
> The Squid server is connceted to the internet with multiple NICs and uses
>tcp_outgoing_address a.public.IP.address
>
> and also want to use an ICAP server on the same host u
36 matches
Mail list logo
