[squid-users] squid+apache+php-fpm How squid could mark DEAD a peer where Apache is alive and php-fpm dead?

Hi, Thank you all for the great work on Squid. I got last week a bad "issue" where a squid Version 4.0.23 set to send requests to 4 VMs didn't detect a dead peer. On each VM are running Apache as the frontal, and php-fpm as php script

[squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

Hi, I have googled for days and can't find the right settings to distribut outgoing requests over part on local IPs of my server. This is my conf I built according to what I found on docs and forums: Squid Cache: Version 4.0.17 blablabla blablabla blablabla ac

Re: [squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

Hi Alex, Ivan, I finally found time to change/test the squid config to load balance on outgoing IPs, and thanks you very much it works very good. All traffic is not output according to the rules to the right IPs. Other question I will open a new thread. Many many thanks. Patrick Le 23/02/

[squid-users] Redirect input http to https

Hi all, A lot a very goog people here could help in this: I have a squid 3.5.20 in front of some backends to balance traffic according to where the website is. I have set up certificates on squid for all sites, and backend are actually accepting traffic both http and https. On some website

[squid-users] Multiple SSL certificates on same IP

Hi all, Thanks for the great work you do/provide with squid. I am using squid for years, I like it very much, and I am now installing a SSL load-balancing unit for about 80 domains/sub-domains. My OS release is Fedora release 29 (Twen

[squid-users] domains with accented international characters fail with Invalid URL

Hi, In the past I asked few questions here and got very efficient help, so I try again. I have a french domain using accented letters in the domain name itself  like "aaaébbbéooo.com" knowned as xn--xxx-xxx.fr in DNS and Apache configurat

Re: [squid-users] domains with accented international characters fail with Invalid URL

Sorry for this, it seems it is not linked to accented characters. Other not accented domains don't work too. I am checking my configuration. Patrick Le 12/05/2020 à 14:40, Patrick Chemla a écrit :

Re: [squid-users] Trusted CA Certificate with ssl_bump

Hi, I have same problem, and I need to use trusted CA certificates, so what is the solution? I have a squid 3.5.20 used for multiple domains, multiple backends, using both HTTP and HTTPS. Actually, the HTTP configuration is OK, the backends are OK with HTTPS, trusted certificates, verified

Re: [squid-users] Trusted CA Certificate with ssl_bump

Jeffries a écrit : On 16/11/2016 9:11 p.m., Patrick Chemla wrote: Hi, I have same problem, and I need to use trusted CA certificates, so what is the solution? Not to do illegal bad things that violate your contract with the CA. Any CA which lets you intercept traffic by generating sub-certifi

Re: [squid-users] Trusted CA Certificate with ssl_bump

Many Thanks Alex. I will try in the next hours and let you if I am successful. Patrick Le 16/11/2016 à 20:04, Alex Crow a écrit : On 16/11/16 17:33, Patrick Chemla wrote: Thanks for your answers, I am not doing anything illegal, I am trying to build a performant platform. I have a big

Re: [squid-users] Trusted CA Certificate with ssl_bump

ist: ACLFilledChecklist destroyed 0x78737acd2520 2016/11/17 18:36:15.609 kid1| 28,4| Checklist.cc(197) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x78737acd2520 Thanks for help Patrick Le 16/11/2016 à 20:16, Patrick Chemla a écrit : Many Thanks Alex. I will try in the next hours a

Re: [squid-users] Trusted CA Certificate with ssl_bump

Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thanks for valuable help. Patrick Le 17/11/2016 à 19:48, Patrick Chemla a écrit

Re: [squid-users] Trusted CA Certificate with ssl_bump

t all others? Thanks Patrick Le 17/11/2016 à 20:11, Patrick Chemla a écrit : Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thank

[squid-users] Groups of peers load-balancing

Hi, I am using Squid Cache: Version 3.5.20 on 2 Fedora 24 server. I have to set a load-balancer for multiple sites, each using different peers, on both servers + cloud instances. Squid is the entry point for all websites. According to the domain, I will have 2 to 5 peers to handle the load.

Re: [squid-users] Groups of peers load-balancing

Load Balancer is one of the roles Squid is designed for. When you need to converge the LB, routing, and caching tasks Squid is the product for the job. On Oct 6, 2016, at 12:16 AM, Patrick Chemla wrote: Hi, I am using Squid Cache: Version 3.5.20 on 2 Fedora 24 server. I have to set a load

[squid-users] affinity session load balancing

Hi, I am using squid for years, maybe with basic features, and I have a problem today with an app where I need to manage multiple backends, be sure that a user is always sent to the same one because the app writes on local disk, and I have 80% users coming from same IP. So I need to load bal

Re: [squid-users] affinity session load balancing

at 10:35:39, Patrick Chemla wrote: Hi, I am using squid for years, maybe with basic features, and I have a problem today with an app where I need to manage multiple backends, be sure that a user is always sent to the same one because the app writes on local disk, and I have 80% users coming from

Re: [squid-users] affinity session load balancing

wrote: On Monday 16 November 2015 at 11:32:31, Patrick Chemla wrote: I am doing load balancing as sourcehash, so on IP source. The problem is that about 80% of clients come from the same IP, so I have a highly loaded backend, while other are sleeping. So whatever you call it, on haproxy they call