Amos,
Here's a challenge, I can't find the reason why the Header rewrite is
not happening? My configuration has only 1 "web
server"(unified1.abstract.net, IP:192.168.0.10) behind the reverse
proxy server(proxy1.abstract.net, IP: 192.168.0.20)
What I want the reverse proxy server to do is:
a) not cache anything, essentially just stream the web server content
straight to the client
b) *suppose* the Header needs to be rewritten, but I am assuming this
get's done by virtue of using the following lines in squid.conf:
###
cache_peer unified1.abstract.net parent 80 0 no-query originserver
forceddomain=unified1.abstract.net name=myAccel
###
acl FMS dstdomain unified1.abstract.net
http_access allow FMS
cache_peer_access myAccel allow FMS
------------------ Any ideas??????? Below is some logging
---------------------- THNKs
The request GET http://proxy1:80/configMultiSiteConfigRequest is
ALLOWED, because it matched 'PROXY1'
2009/04/07 04:39:04| clientStoreURLRewriteDone:
'http://proxy1.abstract.net/configMultiSiteConfigRequest' result=NULL
2009/04/07 04:39:04| WARNING: Forwarding loop detected for:
Client: 192.168.0.20 http_port: 192.168.0.20:80
GET http://proxy1.abstract.net/configMultiSiteConfigRequest HTTP/1.0
User-Agent: FMS-FCC/1.3 (bd:20081014) Java/1.5.0_11
Host: proxy1.abstract.net
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Via: 1.1 proxy1:80 (squid/2.7.STABLE6), 1.0 proxy1:80 (squid/2.7.STABLE6)
X-Forwarded-For: 192.168.0.20, 192.168.0.20
Cache-Control: max-age=259200
Connection: keep-alive
2009/04/07 04:39:04| clientProcessRequest2: storeGet() MISS
2009/04/07 04:39:04| storeCreateEntry:
'http://proxy1.abstract.net/configMultiSiteConfigRequest'
2009/04/07 04:39:04| new_MemObject: returning 00F818D8
2009/04/07 04:39:04| new_StoreEntry: returning 00F81890
2009/04/07 04:39:04| storeKeyPrivate: GET
http://proxy1.abstract.net/configMultiSiteConfigRequest
2009/04/07 04:39:04| storeHashInsert: Inserting Entry 00F81890 key
'3D8B98FA9C7FBCC0711DCF9AB7173967'
2009/04/07 04:39:04| storeReleaseRequest: '3D8B98FA9C7FBCC0711DCF9AB7173967'
2009/04/07 04:39:04| storeLockObject:
(C:\work\SNT-2.7\src\store_client.c:122): key
'3D8B98FA9C7FBCC0711DCF9AB7173967' count=2
2009/04/07 04:39:04| storeClientCopy:
3D8B98FA9C7FBCC0711DCF9AB7173967, seen 0, want 0, size 4096, cb
0041D44A, cbdata 00F80E80
2009/04/07 04:39:04| cbdataLock: 00F80E80
2009/04/07 04:39:04| cbdataLock: 00F81A78
2009/04/07 04:39:04| storeClientCopy2: 3D8B98FA9C7FBCC0711DCF9AB7173967
2009/04/07 04:39:04| storeClientCopy3: Waiting for more
2009/04/07 04:39:04| cbdataUnlock: 00F81A78
2009/04/07 04:39:04| storeLockObject:
(C:\work\SNT-2.7\src\errorpage.c:316): key
'3D8B98FA9C7FBCC0711DCF9AB7173967' count=3
2009/04/07 04:39:04| errorConvert: %U -->
'http://proxy1.abstract.net/configMultiSiteConfigRequest'
2009/04/07 04:39:04| errorConvert: %U -->
'http://proxy1.abstract.net/configMultiSiteConfigRequest'
2009/04/07 04:39:04| errorConvert: %w --> 'webmaster'
2009/04/07 04:39:04| errorConvert: %w --> 'webmaster'
2009/04/07 04:39:04| errorConvert: %T --> 'Tue, 07 Apr 2009 08:39:04 GMT'
2009/04/07 04:39:04| errorConvert: %h --> 'proxy1'
2009/04/07 04:39:04| errorConvert: %s --> 'squid/2.7.STABLE6'
2009/04/07 04:39:04| errorConvert: %S --> '
<BR clear="all">
<HR noshade size="1px">
<ADDRESS>
Generated Tue, 07 Apr 2009 08:39:04 GMT by proxy1 (squid/2.7.STABLE6)
</ADDRESS>
</BODY></HTML>
'
2009/04/07 04:39:04| storeExpireNow: '3D8B98FA9C7FBCC0711DCF9AB7173967'
2009/04/07 04:39:04| InvokeHandlers: 3D8B98FA9C7FBCC0711DCF9AB7173967
2009/04/07 04:39:04| InvokeHandlers: checking client #0
2009/04/07 04:39:04| cbdataLock: 00F81A78
2009/04/07 04:39:04| storeClientCopy2: 3D8B98FA9C7FBCC0711DCF9AB7173967
2009/04/07 04:39:04| storeClientCopy3: Copying from memory
2009/04/07 04:39:04| cbdataValid: 00F80E80
2009/04/07 04:39:04| clientBuildReplyHeader: Error, don't keep-alive
2009/04/07 04:39:04| clientSendHeaders: 181 bytes of headers
2009/04/07 04:39:04| The reply for GET
http://proxy1.abstract.net/configMultiSiteConfigRequest is ALLOWED,
because it matched 'PROXY1'
2009/04/07 04:39:04| cbdataLock: 00F80E80
2009/04/07 04:39:04| cbdataUnlock: 00F80E80
2009/04/07 04:39:04| cbdataUnlock: 00F81A78
2009/04/07 04:39:04| storeComplete: '3D8B98FA9C7FBCC0711DCF9AB7173967'
2009/04/07 04:39:04| storeEntryValidLength: Checking
'3D8B98FA9C7FBCC0711DCF9AB7173967'
2009/04/07 04:39:04| InvokeHandlers: 3D8B98FA9C7FBCC0711DCF9AB7173967
2009/04/07 04:39:04| InvokeHandlers: checking client #0
2009/04/07 04:39:04| storeUnlockObject:
(C:\work\SNT-2.7\src\errorpage.c:331): key
'3D8B98FA9C7FBCC0711DCF9AB7173967' count=2
On Tue, Apr 7, 2009 at 5:03 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> louis gonzales wrote:
>>
>> Amos,
>> on "defaultsite=X tells Squid to assume the domain X was wanted when
>> broken clients fail to send a Host: header properly."
>>
>> is "domain=FQDN" or just the domain name(viz. not host.domain.com, nor
>> cname.domain.com) - e.g. FQDN=www.domain.com, where as
>> domainname=domain.com without the host/cname prefix.
>>
>> "words" themselves are ambiguous.... I appreciate your insight.
>
> The situation is slightly ambiguous also. It depends on what your DNS
> requirements are.
>
> From the official docs:
>
> "
> defaultsite=domainname
>
> What to use for the Host: header if it is not present
> in a request. Determines what site (not origin server)
> accelerators should consider the default.
> Implies accel.
> "
>
> What the Host: header should contain depends entirely on whether you are
> virtual hosting or not.
>
> All we can say is its a domain. _should_ be a FQDN, but _may_ be anything
> the squid box can resolve.
>
>
> Amos
>
>>
>>
>> On Tue, Apr 7, 2009 at 4:05 AM, Amos Jeffries <squid3_at_treenet.co.nz>
>> wrote:
>>>
>>> louis gonzales wrote:
>>>>
>>>> Amos,
>>>> Yes "did seen these". My specific question, results from the fact
>>>> that the information provided for "defaultsite=mysite.domain.com" (not
>>>> origin server) -> is ambiguous.
>>>>
>>>> When one is configuring a reverse proxy server, it's usually, because
>>>> one wants to have the reverse proxy server "appear as the origin
>>>> server".
>>>
>>> Aha, hopefully my new additions there will reduce that ambiguity a
>>> little.
>>>
>>> Amos
>>>
>>>>
>>>> On Tue, Apr 7, 2009 at 3:30 AM, Amos Jeffries <squid3_at_treenet.co.nz>
>>>> wrote:
>>>>>
>>>>> louis gonzales wrote:
>>>>>>
>>>>>> Dist,
>>>>>> Squid 2.7.Stable6
>>>>>> I'm setting up a reverse proxy, such that the Squid system will be
>>>>>> viewed as the "originserver" to the clients contacting it.
>>>>>>
>>>>>> Does the "defaultsite=" attribute get the name of the "actual web
>>>>>> server" or the proxy server?
>>>>>
>>>>> defaultsite= is the public domain name visitors are expected to visit.
>>>>> It's used to fix broken HTTP Host: headers some clients still send.
>>>>> In a virtual-host site broken clients will be passed to that domain.
>>>>>
>>>>> seen these?
>>>>> http://wiki.squid-cache.org/ConfigExamples
>>>>>
>>> Amos
>>> --
>>> Please be using
>>> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
>>> Current Beta Squid 3.1.0.6
>>>
>>
>>
>>
>
>
> --
> Please be using
> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
> Current Beta Squid 3.1.0.6
>
-- Louis Gonzales BSCS EMU 2003 HP Certified Professional louis.gonzales_at_linuxlouis.netReceived on Tue Apr 07 2009 - 08:56:10 MDT
This archive was generated by hypermail 2.2.0 : Tue Apr 07 2009 - 12:00:02 MDT