[squid-users] Exchange server authentication via squid reverse proxy not working after upgrade from squid 4.15 to 5.6

2022-09-08 Thread Hannes Fasching
Hello, A customer have an issue that after upgrading from squid 4.15 to actual 5.6 with reverse proxy mode for an exchange server. The authentication is not working anymore when the integrated Windows authentication is enabled (needed for SSO). When disabled, the authentication via squid is then

Re: [squid-users] Unwanted authentication requests

2022-09-08 Thread Alex Rousskov
On 9/8/22 03:13, Marek Greško wrote: Is there some way to limit the use of basic auth only to the users on the second vlan and not present it to the users on the first vlan and vice versa? This is not my area of expertise, but the auth_schemes directive does support ACLs, so you can tell Squ

[squid-users] [Troubleshoot] Squid 3.3 - Lots of 403 erros when reducing the workers number

2022-09-08 Thread Xavier Lecluse
Hello everybody, I am new to this list so feel free to react if my request is incorrect in any way (missing topic, tag, ) We are using two squid proxies (Squid 3.3) behind a load balancer, to handle our users requests (http/https). The "hardware" of our VMs is : 2 vCPU @ 4.0GHz 4 Go Ram iSC

Re: [squid-users] [Troubleshoot] Squid 3.3 - Lots of 403 erros when reducing the workers number

2022-09-08 Thread Alex Rousskov
On 9/8/22 10:15, Xavier Lecluse wrote: We are using two squid proxies (Squid 3.3) Squid v3 is not officially supported. My answers below may apply to Squid v3, but they are based on Squid v5+. In order to address some issues with Java clients, we tried to lower the worker directive from 8

Re: [squid-users] Unwanted authentication requests

2022-09-08 Thread Alex Rousskov
On 9/8/22 15:22, Marek Greško wrote: thanks for tip. I did not know about that directive. Is it possible to specify no method for others? Hi Marek, If you do not want authentication for others, adjust your http_access rules (that trigger authentication). The auth_schemes directive contr

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-09-08 Thread Amos Jeffries
On 9/09/22 11:41, Praveen Ponakanti wrote: Hi Alex, Thanks for all the help from the squid dev group with upstreaming the enhancement to scale up outbound TCP sessions on Linux with the IP_BIND_ADDRESS_NO_PORT sockopt flag. Our canary instances have been doing great the last few weeks with t

Re: [squid-users] Unwanted authentication requests

2022-09-08 Thread Amos Jeffries
On 9/09/22 07:22, Marek Greško wrote: Hello Alex, thanks for tip. I did not know about that directive. Is it possible to specify no method for others? I tried none, but squid complained. Not necessarily needed now, but I tried to specify no method for other vlans without success. I left basic

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-09-08 Thread Alex Rousskov
On 9/8/22 19:41, Praveen Ponakanti wrote: * We have a large number of workers (30) to help with handling a high RPS. However, TCP session reuse does not seem to be optimal even with server_persistent_connections enabled as a new outbound session would have to be opened up if the req

Re: [squid-users] Exchange server authentication via squid reverse proxy not working after upgrade from squid 4.15 to 5.6

2022-09-08 Thread Amos Jeffries
On 8/09/22 19:40, Hannes Fasching wrote: Hello, A customer have an issue that after upgrading from squid 4.15 to actual 5.6 with reverse proxy mode for an exchange server. The authentication is not working anymore when the integrated Windows authentication is enabled (needed for SSO). When disa