Re: [squid-users] [squid-announce] Squid 3.5.15 is available

> 2016/02/24 10:07:23 kid1| assertion failed: FwdState.cc:447: "serverConnection() == conn" Hello everybody, same problem here. I have downgraded to 3.5.14 ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listi

Re: [squid-users] assertion failed: String.cc:174: "len_ + len < 65536"

Im unable to reproduce this. When i to to this link: http://www.oggi.it/global_assets/js/plugins.js?v=1.6 Im getting : server: squid Mime-Version: 1.0 Date: Wed, 24 Feb 2016 09:24:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7036 X-Squid-Error: ERR_TOO_BIG 0 Vary: Accept-Lang

Re: [squid-users] Android OS / Updates

On 24/02/2016 7:34 p.m., John Pearson wrote: > Thanks! I meant if Squid can cache Android installs? I am deploying 10+ new > Android devices and wanted to cache the OS > It's not something that has been a hot topic around here. So the best answer will probably be twhat you find out yourself, usin

Re: [squid-users] Youtube "challenges"

On 23/02/16 05:01, Darren wrote: AI am putting together a config to allow the kids to access selected videos in YouTube from a page of links on a local server. I am serving up the YouTube links in the format that is used for embedding and they play embedded on a page from a local server. The

[squid-users] Configure Question

Okay I just Had to get Satellite Internet After my ISP ditches my whole area. Any way I have squid3 running on my Server 2012 box. I am wanting to know if you can set it up to only update between 2-8 am. To update old pages or how ever it works. I think that is my free time. No one uses the inte

Re: [squid-users] SSL bump memory leak

On 23/02/16 21:28, Amos Jeffries wrote: Ah, you said "a small number" of wiki cert strings with those details. I took that as meaning a small number of definitely squid generated ones amidst the 130K indeterminate ones leaking. Ah, a misunderstanding on my part - sorry. Yes, there were 302 st

Re: [squid-users] Squid None Aborted problem

Antony thank you very much for your answer.i reinstall ubuntu and squid.and i removed ssl bump configuration.but the problem is not solved . i write answer the down.Can you help me ? Antony Stone wrote > On Sunday 21 February 2016 at 12:56:03, secoonder wrote: > >> My Firewall eth0: 192.168.1.1

Re: [squid-users] Squid for caching windows updates

if you know what you ar doing this might help you long time i didn't check if its still working but try them in your conf add acl wind-upd url_regex -i \.(microsoft|windowsupdate)\.com.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip|psf|appx|esd) store_id_access allow wind-upd refresh_pattern -i (mi

Re: [squid-users] [squid-announce] Squid 3.5.15 is available

On 02/23/2016 11:10 PM, Dmitry Melekhov wrote: > After installing 3.5.15 on ubuntu 12.04 I get squid crash: > > > 2016/02/24 10:07:23 kid1| assertion failed: FwdState.cc:447: > "serverConnection() == conn" FYI: This is a known bug: http://bugs.squid-cache.org/show_bug.cgi?id=4447 Alex. __

Re: [squid-users] Squid 3.5.2 will only start if cache directory is empty

chmod 777 /dev/shm That fixed it for me... even root didn't have permissions to access /dev/shm... ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Clarification of what I should be seeing in the log files.

I can't seem to find a straight answer for this. I'm running squid 3.4.8. Compiled from source. I'ts talking via wccp to our firewall. We're using it only for informational purposes, IE we're not blocking anything, just trying to get some visibility into what our pipe is being used for. http w

[squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

Hello, I have squid 3.5.5, I see Security Update Advisory SQUID-2016:2: You suggest 2 solutions on http://www.squid-cache.org/Advisories/SQUID-2016_2.txt -- 1)* add in squid.conf: * acl Vary rep_header Vary store_miss deny Vary -- *2) or add in squid.conf :*cache deny all -- What's the best sol

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Squid's upgrade is the best solution. 24.02.16 22:13, Paul Martin пишет: > Hello, > > I have squid 3.5.5, I see Security Update Advisory SQUID-2016:2: > You suggest 2 solutions on http://www.squid-cache.org/Advisories/SQUID-2016_2.txt > -- > 1)_a

Re: [squid-users] Rock Store max object size 3.5.14

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.02.16 3:38, Heiler Bemerguy пишет: > > > 23/02/2016 16:40, Yuri Voinov wrote: >> >> When you CPU's/cores waiting for HDD access, they got high-loag. >> > > Are you sure it would show up as "User" load and not as "Wait" ? Depending OS. Most li

Re: [squid-users] Clarification of what I should be seeing in the log files.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This entries is a sign of normal https tunneling phase. You simple don't know how HTTPS works. :) 24.02.16 21:32, Bruce Markey пишет: > I can't seem to find a straight answer for this. > > I'm running squid 3.4.8. Compiled from source. > > I'ts t

[squid-users] Optimizing squid

Hi Eliezer, thanks for your reply. As you've suggested, I removed all cache_dirs to verify if the rest was stable/fast and raised cache_mem to 10GB. I didn't disable access logs because we really need it.. And it is super fast, I can't even notice it using only ONE core.. (and it isn't runn

Re: [squid-users] Optimizing squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AFAIK, if you solve issue with cache_mem 10 GB and completely disabled disk cache, then you had disk IO bottleneck exactly. You completely disable disk caches. So, all obvious now. But - what you will do after squid restart? :) A deadl

Re: [squid-users] Optimizing squid

Not to mention only 10GB of cache is almost useless for us... lol But I still think cpu is cpu and i/o is i/o. "WAIT" fields on both TOP and VMSTAT shows almost always a ZERO Why would it show a process using cpu while actually it's waiting for a I/O.. ? Best Regards -- Heiler Bemerguy -

Re: [squid-users] Optimizing squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It's simple. It is strange that you do not understand. Do you have a thread on the CPU, the pending IO. Then comes another one. Third. Do you think that makes the OS? It unloads it in a swap? Ha ha, with several tens of gigabytes of RAM you have no

Re: [squid-users] Optimizing squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 But you can continue to think that the problem is in the Squid. :) And keep looking for a magical setting configuration. :) 25.02.16 2:40, Heiler Bemerguy пишет: > > Not to mention only 10GB of cache is almost useless for us... lol > > But I still

Re: [squid-users] Configure Question

On 24/02/2016 11:09 p.m., Robert Cooper wrote: > Okay I just Had to get Satellite Internet After my ISP ditches my > whole area. Any way I have squid3 running on my Server 2012 box. I am > wanting to know if you can set it up to only update between 2-8 am. > To update old pages or how ever it works

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

On 25/02/2016 7:21 a.m., Yuri Voinov wrote: > > Squid's upgrade is the best solution. > > 24.02.16 22:13, Paul Martin пишет: >> Hello, > >> I have squid 3.5.5, I see Security Update Advisory SQUID-2016:2: >> You suggest 2 solutions on > http://www.squid-cache.org/Advisories/SQUID-2016_2.txt >>

Re: [squid-users] Clarification of what I should be seeing in the log files.

On 25/02/2016 8:11 a.m., Yuri Voinov wrote: > > This entries is a sign of normal https tunneling phase. You simple don't > know how HTTPS works. :) > And to clarify that... There is no GET at the beginning of HTTPS unless the user wrongly enters http:// into their UA. In which case it *might* t

Re: [squid-users] Android OS / Updates

On 24/02/2016 08:34, John Pearson wrote: Thanks! I meant if Squid can cache Android installs? I am deploying 10+ new Android devices and wanted to cache the OS Hey Jhon, This subject is not so simple and requires some kind of investigation of both the Android and the Web side of the picture.

Re: [squid-users] Youtube "challenges"

On 24/02/2016 7:44 p.m., Darren wrote: > Hi > > and thanks for the feedback. I have Splice running OK however want I > really want to do is to allow the splice when a user opens a link > that navigates to https://www.youtube.com/embed/blahblah but not > allow the user just to go directly to https:

Re: [squid-users] Optimizing squid

On 02/24/2016 12:44 PM, Heiler Bemerguy wrote: > I don't think I had a bottleneck on I/O itself, In general, I/O bottlenecks with rock or ufs cache_dirs do not result in sustained 100% CPU utilization. I do not know enough about aufs to say whether that cache_dir type can have those symptoms dur

Re: [squid-users] Squid None Aborted problem

On 24/02/2016 11:10 p.m., secoonder wrote: > Antony thank you very much for your answer.i reinstall ubuntu and squid.and i > removed ssl bump configuration.but the problem is not solved . > i write answer the down.Can you help me ? > Firstly, NON_ABORTED means that the client made a request and t

Re: [squid-users] any way to get squid-4 compiled on CentOS-6?

On 24/02/2016 1:25 p.m., Dan Charlesworth wrote: > That’s the version I’m on actually (RPM compiled by me): > > squid-3.5.13-1.el6.x86_64 > openssl-1.0.1e-42.el6_7.2.x86_64 > > I’m not setting sslproxy_cipher in my config, so I guess that’s not it. My > openssl library the problem perhaps? Perh

Re: [squid-users] Squid 3.5.12

On 24/02/2016 10:05 a.m., nando mendonca wrote: > Could not Activate TLS connection I found this in the archives, might be useful for you: Amos ___ squid-users mailing list squid-u

Re: [squid-users] SSL bump memory leak

On 24/02/2016 11:17 p.m., Steve Hill wrote: > On 23/02/16 21:28, Amos Jeffries wrote: > >> Ah, you said "a small number" of wiki cert strings with those details. I >> took that as meaning a small number of definitely squid generated ones >> amidst the 130K indeterminate ones leaking. > > Ah, a mi

Re: [squid-users] SSL bump memory leak

I’m just catching up with this one, but we’ve observed some memory leaks on a small percentage of our boxes, which we migrated to Peek & Splice late last year. We’re on 3.5.13, about to move to 3.5.15. What’s the least disruptive way to keep this under control, if there is one? Is there anyth

Re: [squid-users] SSL bump memory leak

On 25/02/2016 11:44 a.m., Dan Charlesworth wrote: > I’m just catching up with this one, but we’ve observed some memory leaks on a > small percentage of our boxes, which we migrated to Peek & Splice late last > year. > > We’re on 3.5.13, about to move to 3.5.15. > > What’s the least disruptive

Re: [squid-users] any way to get squid-4 compiled on CentOS-6?

Thanks for the hint. I tried this, based on the docs here: http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit … But it doesn’t seem to help. FYI trying to bump traffic from Instagram’s iOS app seems to trigger it pretty consistently. > On 25 Feb 2016, at 9:24 AM, Amos Jeffries

Re: [squid-users] any way to get squid-4 compiled on CentOS-6?

On 25/02/2016 12:17 p.m., Dan Charlesworth wrote: > Thanks for the hint. > > I tried this, based on the docs here: > http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit > > … But it doesn’t seem to help. FYI trying to bump traffic from Instagram’s > iOS app seems to trigger it p

Re: [squid-users] any way to get squid-4 compiled on CentOS-6?

I don’t; at least not this week. I predict a rather long list of SNIs which get spliced instead :-] > On 25 Feb 2016, at 10:27 AM, Amos Jeffries wrote: > > On 25/02/2016 12:17 p.m., Dan Charlesworth wrote: >> Thanks for the hint. >> >> I tried this, based on the docs here: >> http://wiki.squi

Re: [squid-users] Youtube "challenges"

Hey Steve, I have not reviewed every product but I have tried couple and these I have tested do not have a really good system that filters YouTube videos the way I would have imagined. I have not tested your product... and I was wondering if the next URL will be filtered by you software in som