Re: [squid-users] Slowness in Squid

On Sunday 23 October 2016 at 05:36:22, Krishna Kulkarni wrote: > I am new to squid.. I have installed squid 3.5 on CentOS 6.7. As a > configuration part, I have kept most of the things default. Please advice > on how to allocate cache memory of 20 GB to squid. Do you mean cache memory, or disk ca

[squid-users] external_acl_type problem

1) According to http://www.squid-cache.org/Doc/config/external_acl_type/ in squid.conf, this external_acl_type check_delay ttl=0 cache=0 %SRC /etc/squid/check_delay.sh should start 0 helpers immediately after squid (3.5.22) start-up. However, I always see 5. 2) I often see this: Sat Oct 22 23:

Re: [squid-users] Slowness in Squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Keep in mind - a huge in-memory cache does not always give the acceleration. Moreover, in most cases you can get the opposite effect expected. It is a common misconception - that the giant memory cache will give a giant performance gain. 23.10.20

Re: [squid-users] Slowness in Squid

On 23.10.16 17:15, Yuri Voinov wrote: Keep in mind - a huge in-memory cache does not always give the acceleration. Moreover, in most cases you can get the opposite effect expected. It is a common misconception - that the giant memory cache will give a giant performance gain. doesn't that imply

Re: [squid-users] Slowness in Squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This effect is good known to all who have worked with relational databases. In fact, it is typical in general for all caches except purpose-built highly scalable systems. 23.10.2016 17:37, Matus UHLAR - fantomas пишет: > doesn't that imply kind o

Re: [squid-users] Slowness in Squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 In fact, the explanation is very simple. At some point soon will get the content from the disc using an index of any kind than consequentially and fully scan the giant structure in RAM. Performance indicator is expressed in the data access time. B

Re: [squid-users] Slowness in Squid

23.10.2016 17:40, Yuri Voinov пишет: This effect is good known to all who have worked with relational databases. In fact, it is typical in general for all caches except purpose-built highly scalable systems. 23.10.2016 17:37, Matus UHLAR - fantomas пишет: > doesn't that imply kind of effective

Re: [squid-users] Slowness in Squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 23.10.2016 18:09, Matus UHLAR - fantomas пишет: >> 23.10.2016 17:40, Yuri Voinov пишет: >>> This effect is good known to all who have worked with relational >>> databases. In fact, it is typical in general for all caches except >>> purpose-built

Re: [squid-users] Slowness in Squid

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 In the final, I do not think Squid architecture is designed for fast access to huge amounts of memory. It came from a time when computers were young, memory cost like Boeing and hardly Squid itself seriously reworked in this part since then. 23.10

Re: [squid-users] FTP : Squid sending private IP in PASV response

On 21/10/2016 10:02 p.m., Garri Djavadyan wrote: > On Fri, 2016-10-21 at 08:27 +, Gael Ancelin wrote: >> WAN_IP---[FW]---localIP1-[SQUID]-localIP2localIP3- >> [FTP_Server] >> >> I was expecting something like "227 Entering Passive Mode >> (54,xx,xx,xx,213,249)." >> with public

Re: [squid-users] sourcehash load balance

On 22/10/2016 12:21 a.m., André Janna wrote: > I set up a Squid proxy that forwards all requests to 2 parent caches. > I'm using Squid version 3.5.19. > My goal is that multiple connection from a client to a server should be > forwarded to the same parent, so that the server see all requests coming

Re: [squid-users] squid-users Digest, Vol 26, Issue 82

tOS 6.7. As a > configuration part, I have kept most of the things default. Please advice > on how to allocate cache memory of 20 GB to squid. I got to know that, more > cache memory would increase performance of squid.. > > Thanks, > Krishna >

Re: [squid-users] Slowness in Squid [squid-users Digest, Vol 26, Issue 82]

On Sunday 23 October 2016 at 14:42:02, Krishna Kulkarni wrote: > Hi Antony, > Thanks for the reply. I have made changes in squid.conf as per your > suggestion and have allocated 20 GB of Hard disk space. Have you made any measurements at all (either before making the disk cache bigger, or since)

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

On 23/10/2016 1:43 a.m., gar...@comnet.uz wrote: > > Nevertheless, I believe that core developers should publish an > _official_ explanations regarding the tendency, as it often becomes a > "center of gravity" of many topics. > I did so. Back when these removals started:

Re: [squid-users] squid-users Digest, Vol 26, Issue 82

squid. I got to know that, more > cache memory would increase performance of squid.. > > Thanks, > Krishna > -- next part -- > An HTML attachment was scrubbed... > URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

On 23/10/2016 2:32 a.m., garryd wrote: > On 2016-10-22 17:56, Antony Stone wrote: >> Disclaimer: I am not a Squid developer. >> >> On Saturday 22 October 2016 at 14:43:55, garryd wrote: >> >>> IMO: >>> >>> The only reason I believe [explains] why core developers of Squid >>> tend to >>> move HTTP v

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

On 23/10/2016 1:56 a.m., Antony Stone wrote: > Disclaimer: I am not a Squid developer. > > On Saturday 22 October 2016 at 14:43:55, garry wrote: > >> IMO: >> >> The only reason I believe [explains] why core developers of Squid tend to >> move HTTP violating settings from average users is to preve

Re: [squid-users] squid-users Digest, Vol 26, Issue 82

On Sunday 23 October 2016 at 15:26:54, Yuri Voinov wrote: > You can have slow DNS. Consider to use local caching DNS recursor as > source for proxy & users. Why would that result in requests via Squid being slower than direct? @Krishna: You *have* confirmed that Squid requests are slower than di

Re: [squid-users] squid-users Digest, Vol 26, Issue 82

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 We're don't know, whhat DNS uses Squid itself, it's clients, which DNS provided by ISP. Tis is one of possibilities. Anyway require to investigate - what exactly is slow. 23.10.2016 20:02, Antony Stone пишет: > On Sunday 23 October 2016 at

Re: [squid-users] Caching http google deb files

On 2016-10-22 23:18, Heiler Bemerguy wrote: I've never used ICAP, and I think hacking the code is way faster than creating/using a separate service for that. And I'm not sure, but I don't think I can manage to get this done with current squid's options. Hi, For this case I also suggest to use

[squid-users] Squid with ASR9001

Good day all Has anyone had any experience setting up Squid with any IOS XR Cisco routers? The Cisco ASR9000 range doesn't support WCCP and I cannot find any examples online. I have also found quotes regarding PBR on the ASR9000... "With IOS XR traditional policy-based routing (PBR) is histor

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

On 2016-10-23 18:31, Amos Jeffries wrote: On 23/10/2016 2:32 a.m., garryd wrote: Since I started use Squid, it's configuration always RFC compliant by default, _but_ there were always knobs for users to make it HTTP violent. It was in hands of users to decide how to handle a web resource. Now it

[squid-users] icap (squidclamav) and squid 3.5 ssl peek splice

Hello, I'm actually trying to scan https web pages for viruses. I have a working squid 3.5.21 configured for https intercept with ssl bump peek splice (basic) like following : [...] ssl_bump peek all ssl_bump splice all [...] icap_enable on adaptation_send_client_ip on adaptation_send_username on

Re: [squid-users] Squid with ASR9001

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 https://supportforums.cisco.com/discussion/12227051/ios-xr-and-wccp https://supportforums.cisco.com/discussion/11561126/wccp-not-working-after-asr-migration-done 23.10.2016 23:16, Garth van Sittert | BitCo пишет: > Cisco ASR9000 -BEGIN PGP

Re: [squid-users] icap (squidclamav) and squid 3.5 ssl peek splice

On 10/23/2016 11:33 AM, Ulysse 31 wrote: > ssl_bump peek all > ssl_bump splice all > Does peek / splice don't allow icap scanning/filtering ? The splice action does not allow for scanning/filtering message bodies. The bump action does. The bump action is not compatible with the peek action durin

Re: [squid-users] Squid with ASR9001

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 23.10.2016 23:16, Garth van Sittert | BitCo пишет: > > Good day all > > > > Has anyone had any experience setting up Squid with any IOS XR Cisco routers? The Cisco ASR9000 range doesn’t support WCCP and I cannot find any examples online. > Seri

[squid-users] skype connection problem

hi there, i've had problems with windows skype clients with the only internet connection is through squid. the clients can login successful but when they make a call, it hangs after 12 secconds. I checked the client connections and see that attempts to connect directly even if the proxy is properl

Re: [squid-users] skype connection problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.10.2016 4:11, N V пишет: > hi there, > i've had problems with windows skype clients with the only internet connection is through squid. the clients can login successful but when they make a call, it hangs after 12 secconds. > > I checked the c

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

On 24/10/2016 6:28 a.m., gar...@comnet.uz wrote: > On 2016-10-23 18:31, Amos Jeffries wrote: >> On 23/10/2016 2:32 a.m., garryd wrote: >>> Since I started use Squid, it's configuration always RFC compliant by >>> default, _but_ there were always knobs for users to make it HTTP >>> violent. It was i

Re: [squid-users] external_acl_type problem

On 23/10/2016 11:39 p.m., reinerotto wrote: > 1) > According to > http://www.squid-cache.org/Doc/config/external_acl_type/ > > in squid.conf, this > > external_acl_type check_delay ttl=0 cache=0 %SRC /etc/squid/check_delay.sh > > should start 0 helpers immediately after squid (3.5.22) start-up.