[squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

2023-02-17 Thread MATYAS, Tibor
Hello List, trying to move from 4.7 to 5.7 (on gentoo Linux). Splash portal is in use https://wiki.squid-cache.org/ConfigExamples/Portal/Splash squid -k parse -> OK /var/lib/squid/session/ is clean, old berkeleyDB session files deleted. Owner of the folder is the squid user. Squid compiled wi

[squid-users] Understanding maximum outgoing HTTP CONNECT requests?

2023-02-17 Thread divan . whelk . 0u
Hi there! I’m trying to understand what would the “theoretical” maximum amount of outgoing connections with squid setup as a HTTP CONNECT forward proxy would be (hardware permitting)? From the [squid-users] About bottlenecks (Max number of connections, etc.) thread, I saw mention of the follow

Re: [squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

2023-02-17 Thread MATYAS, Tibor
Here are my further experiments: #1 Created an empty tdb database with tdbtool, the errors are gone, although no sessions are stored, the file remains untouched. #2 recompiled squid without tdb -> fallback to berkeleydb ? like in 4.x: same errors in the log: FATAL: (ext_session_acl): Failed to

[squid-users] Squid returns 500 on rapidly changing DNS records

2023-02-17 Thread Maciej Leks
Hello, We have being facing the 500 error codes in our squids (v5.7) when it comes to communicate with Salesforce DNS for ephemeral hosts (they live no longer than 30 days but we can delete at any moments, SF calls them scratches): Let's have a look at some DNS req/res for some scratch: $dog shoy

Re: [squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

2023-02-17 Thread Alex Rousskov
On 2/17/23 09:20, MATYAS, Tibor wrote: FATAL: (ext_session_acl): Failed to open session db '/tmp/session/session' An empty session file with zero byte is always created (with or without tdb), and then the error flow. This is a long shot, but check permissions of that file (and its director

Re: [squid-users] Squid returns 500 on rapidly changing DNS records

2023-02-17 Thread Alex Rousskov
On 2/17/23 09:31, Maciej Leks wrote: We have being facing the 500 error codes in our squids (v5.7) when it comes to communicate with Salesforce DNS for ephemeral hosts A cs128-fra.fra.r.salesforce.com. 30s 85.222.154.211 A cs128-fra.fra.r.salesforce.com. 30

Re: [squid-users] Squid returns 500 on rapidly changing DNS records

2023-02-17 Thread Maciej Leks
I understand your last question but it's hard me to answer clearly - yes/no . Instead of this let me show you this log: 17/Feb/2023:17:16:21 +0100 1676650581.827103 100.121.11.70 100.121.11.70 NONE_NONE/500 0 CONNECT scala-module-5515.scratch.lightning.force.com:443 - HIER_NONE/- - 17/Feb/202

Re: [squid-users] Log 407-transactions when username is known

2023-02-17 Thread Amos Jeffries
On 17/02/2023 7:29 pm, Andrey K wrote: Hello, I would like to disable logging of 407-errors, except when the username is known. Is it possible to configure? Assuming that you have the wrapper script from your previous request about always logging usernames you should be able to use a note t

Re: [squid-users] Squid returns 500 on rapidly changing DNS records

2023-02-17 Thread Alex Rousskov
On 2/17/23 13:24, Maciej Leks wrote: I understand your last question but it's hard me to answer clearly - yes/no. Yes, it is a difficult question to answer. Logging DNS traffic with tcpdump might help, but it does require some non-trivial work to correlate everything. For now, without that or

Re: [squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

2023-02-17 Thread MATYAS, Tibor
Dear Alex, the file permissions must be ok. Check my log messages, I made an extra test with a short path under /tmp squid is able to create the session file: -rw-r- 1 squid squid 0 17. Feb 14:44 session and even so, I get the error messages. The same configuration was and is perfect under s

Re: [squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

2023-02-17 Thread Alex Rousskov
On 2/17/23 14:27, MATYAS, Tibor wrote: A statement, that that part has no regressions, works also in the 5.x versions would give me hope :-D Hopefully, somebody using the session db helper would be able to confirm that for you. FWIW, some of the code involved in your test is not a part of o

Re: [squid-users] Understanding maximum outgoing HTTP CONNECT requests?

2023-02-17 Thread Amos Jeffries
On 18/02/2023 12:14 am, divan.whelk.0u wrote: Hi there! I’m trying to understand what would the “theoretical” maximum amount of outgoing connections with squid setup as a HTTP CONNECT forward proxy would be (hardware permitting)? As you likely know, each TCP/IP connection uses a 4-tuple iden

Re: [squid-users] Log 407-transactions when username is known

2023-02-17 Thread Amos Jeffries
On 18/02/2023 7:29 am, Amos Jeffries wrote: On 17/02/2023 7:29 pm, Andrey K wrote: Hello, I would like to disable logging of 407-errors, except when the username is known. Is it possible to configure? Assuming that you have the wrapper script from your previous request about always logging