Hello,
A customer have an issue that after upgrading from squid 4.15 to actual 5.6
with reverse proxy mode for an exchange server.
The authentication is not working anymore when the integrated Windows
authentication is enabled (needed for SSO). When disabled, the authentication
via squid is then
On 9/8/22 03:13, Marek Greško wrote:
Is there some way to limit the use of basic auth only to the users on
the second vlan and not present it to the users on the first vlan and
vice versa?
This is not my area of expertise, but the auth_schemes directive does
support ACLs, so you can tell Squ
Hello everybody,
I am new to this list so feel free to react if my request is incorrect in any
way (missing topic, tag, )
We are using two squid proxies (Squid 3.3) behind a load balancer, to handle
our users requests (http/https).
The "hardware" of our VMs is :
2 vCPU @ 4.0GHz
4 Go Ram
iSC
On 9/8/22 10:15, Xavier Lecluse wrote:
We are using two squid proxies (Squid 3.3)
Squid v3 is not officially supported. My answers below may apply to
Squid v3, but they are based on Squid v5+.
In order to address some issues with Java clients, we tried to lower
the worker directive from 8
On 9/8/22 15:22, Marek Greško wrote:
thanks for tip. I did not know about that directive. Is it possible
to specify no method for others?
Hi Marek,
If you do not want authentication for others, adjust your
http_access rules (that trigger authentication). The auth_schemes
directive contr
On 9/09/22 11:41, Praveen Ponakanti wrote:
Hi Alex,
Thanks for all the help from the squid dev group with upstreaming the
enhancement to scale up outbound TCP sessions on Linux with the
IP_BIND_ADDRESS_NO_PORT sockopt flag. Our canary instances have been
doing great the last few weeks with t
On 9/09/22 07:22, Marek Greško wrote:
Hello Alex,
thanks for tip. I did not know about that directive. Is it possible to specify
no method for others? I tried none, but squid complained. Not necessarily
needed now, but I tried to specify no method for other vlans without success. I
left basic
On 9/8/22 19:41, Praveen Ponakanti wrote:
* We have a large number of workers (30) to help with handling a
high RPS. However, TCP session reuse does not seem to be optimal
even with server_persistent_connections enabled as a new outbound
session would have to be opened up if the req
On 8/09/22 19:40, Hannes Fasching wrote:
Hello,
A customer have an issue that after upgrading from squid 4.15 to actual 5.6
with reverse proxy mode for an exchange server.
The authentication is not working anymore when the integrated Windows
authentication is enabled (needed for SSO). When disa