[squid-users] squid accel peer auth basic, may be X-Forwarded-For prob

Hi,

I've a squid Version 2.6.STABLE16

with the following config accel mode

cache_peer php-01 parent 80 0 no-query originserver round-robin weight=1
login=PASS max-conn=100
#cache_peer php-02 parent 80 0 no-query originserver round-robin
weight=0 login=PASS
cache_peer php-03 parent 80 0 no-query originserver round-robin weight=1
login=PASS
cache_peer php-04 parent 80 0 no-query originserver round-robin weight=1
login=PASS
cache_peer php-05 parent 80 0 no-query originserver round-robin weight=1
login=PASS
cache_peer php-06 parent 80 0 no-query originserver round-robin weight=1
login=PASS
cache_peer php-07 parent 80 0 no-query originserver round-robin weight=3
login=PASS max-conn=100
cache_peer php-08 parent 80 0 no-query originserver round-robin weight=1
login=PASS max-conn=100

1192712203.711 3 12.34.56.78 TCP_REFRESH_HIT/200 2378 GET
http://proxy-03.love.mydomain.com/_admin/style.css - ROUNDROBIN_PAR
ENT/php-07 text/css
1192712204.363 4 12.34.56.78 TCP_REFRESH_MISS/401 851 GET
http://proxy-03.love.mydomain.com/_admin/style.css - ROUNDROBIN_PAR
ENT/php-07 text/html

This page is auth basic protected + ip based protected
http://proxy-03.love.mydomain.com/_admin/style.css

normally is should pass on the ip based auth basic auth scheme

But it fails.
it seems to be an X-Forwarded-For problem, here is the apache peer
access log

proxy-03.mydomain.com - - [18/Oct/2007:15:48:37 +0200] "GET
/_admin/style.css HTTP/1.0" 401 480 "-" "Mozilla/5.0 (Windows; U; W
indows NT 5.1; fr; rv:1.8.1.7) Gecko/20070914 Firefox/2.0.0.7"

and proxy squid access log:
Thu Oct 18 15:48:37 2007 4 12.34.56.78 TCP_REFRESH_MISS/401 855 GET
http://proxy-03.love.mydomain.com/_admin/style.css -
ROUNDROBIN_PARENT/php-04 text/html

we should have IP 12.34.56.78 instead of the proxy hostname

denying cache on the specified url doesn't seems to help.
Sylvain.
Received on Thu Oct 18 2007 - 09:38:19 MDT