Re: [squid-users] url_rewrite_program and ACLs

2017-11-22 Thread Amos Jeffries
On 23/11/17 03:33, Vieri wrote: From: Amos Jeffries If we assume that each request opens a new connection and they are not closed until TCP times out on the socket we do get numbers much more like that 11K+ you are seeing. That implies that ICAP transactions

Re: [squid-users] url_rewrite_program and ACLs

2017-11-22 Thread Vieri
From: Amos Jeffries > > If we assume that each request opens a new connection and they are not > closed until TCP times out on the socket we do get numbers much more > like that 11K+ you are seeing. > > That implies that ICAP transactions are probably not finis

Re: [squid-users] url_rewrite_program and ACLs

2017-11-20 Thread Amos Jeffries
On 20/11/17 22:15, Vieri wrote: From: Amos Jeffries I would compare your custom script to the ext_sql_session_acl.pl.in script we bundle with current Squid. I've rewritten my perl script, and have been running it for a full week now without any issues. Free

Re: [squid-users] url_rewrite_program and ACLs

2017-11-20 Thread Vieri
From: Amos Jeffries > > I would compare your custom script to the ext_sql_session_acl.pl.in > script we bundle with current Squid. I've rewritten my perl script, and have been running it for a full week now without any issues. Free RAM drops down to alarming va

Re: [squid-users] url_rewrite_program and ACLs

2017-11-13 Thread Vieri
From: Amos Jeffries >> >> File descriptor usage for squid: >> Maximum number of file descriptors: 65536 >> Largest file desc currently in use: 6980 >> Number of file desc currently in use: 6627 >> Files queued for open: 0 >> Available number of file descriptors: 5

Re: [squid-users] url_rewrite_program and ACLs

2017-11-11 Thread Vieri
From: Amos Jeffries > > I would compare your custom script to the ext_sql_session_acl.pl.in > script we bundle with current Squid. > If yours lacks concurrency channel-ID I highly recommend adding that > behaviour. > If the DB is designed to store the protocol

Re: [squid-users] url_rewrite_program and ACLs

2017-11-10 Thread Amos Jeffries
On 11/11/17 01:01, Vieri wrote: BTW the docs say: # %PATH Requested URL path # %METHOD Request method # %MYADDR Squid interface address # %MYPORT Squid http_port number # %PATH Requested URL-path (including query-string if

Re: [squid-users] url_rewrite_program and ACLs

2017-11-10 Thread Vieri
BTW the docs say: # %PATH Requested URL path # %METHOD Request method # %MYADDR Squid interface address # %MYPORT Squid http_port number # %PATH Requested URL-path (including query-string if any) There's no such thing as %

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Amos Jeffries
On 10/11/17 00:39, Vieri wrote: From: Amos Jeffries Darn. You have the one case that calls for keeping the helper :-( You can still move the ACLs that load in a reasonable times into squid.conf and leave the others in SG/ufdbguard. Using url_rewrite_access to

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Vieri
From: Amos Jeffries > > The shutdown time with two sequential calls should be only the time > needed to close all the open FD connections, shutdown helpers and > release however much memory Squid is using. All that happens in just a > few seconds normally I u

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Vieri
From: Amos Jeffries > > Darn. You have the one case that calls for keeping the helper :-( > > You can still move the ACLs that load in a reasonable times into > squid.conf and leave the others in SG/ufdbguard. Using > url_rewrite_access to restrict which transac

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Amos Jeffries
On 09/11/17 20:51, Vieri wrote: From: Amos Jeffries acl foo ... http_access deny foo deny_info 302:http://example.com/ foo In Squid-3.2+ the deny_info URL portion can use logformat macros for dynamic redirection - like the "rew" substitutions only changing

Re: [squid-users] url_rewrite_program and ACLs

2017-11-08 Thread Vieri
From: Amos Jeffries > > acl foo ... > http_access deny foo > deny_info 302:http://example.com/ foo > > In Squid-3.2+ the deny_info URL portion can use logformat macros for > dynamic redirection - like the "rew" substitutions only changing > portions of the URL

Re: [squid-users] url_rewrite_program and ACLs

2017-11-08 Thread Amos Jeffries
On 09/11/17 03:12, Vieri wrote: Thanks. I defined the following, and it worked as expected: url_rewrite_access deny allowed_domains url_rewrite_access deny allowed_ips url_rewrite_program /usr/bin/squidGuard url_rewrite_children 80 startup=10 idle=3 How can I rewrite a URL in squid without a h

Re: [squid-users] url_rewrite_program and ACLs

2017-11-08 Thread Amos Jeffries
On 08/11/17 22:21, Vieri wrote: Hi, I'm not sure I understand how url_rewrite_program works. Squid takes the URI from an HTTP request it is servicing and delivers it to the helper. The helper delivers a new URI back to Squid (or not). Squid then generates an entirely new HTTP request to use