RE: [squid-users] RE: Two squid servers to talk to each other before the internet

From: Tóth Tibor Péter <tibor.peter.toth_at_mtv.hu>
Date: Wed, 8 Sep 2010 11:20:08 +0200

Hi Amos!
Here is my config file:
 
http_port 8080
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache

cache_peer ######THE_IP_OF_THE_SIBLING###### sibling 3128 3130
#prefer_direct off

cache_mem 1024 MB
maximum_object_size 4096 KB
minimum_object_size 0 KB

cache_dir ufs /var/spool/squid3 75000 32 256

error_directory /usr/share/squid3/errors/English

logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
access_log /var/log/squid3/access.log squid
cache_store_log none
logfile_rotate 1

debug_options ALL,1
cache_log syslog

ftp_user ftp@

hosts_file /etc/hosts

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

httpd_suppress_version_string on

acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl Safe_ports port 21 # ftp
acl Safe_ports port 80 # http
acl Safe_ports port 880 # http
acl Safe_ports port 443 # https
acl Safe_ports port 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost

acl desktop-clients src 0.0.0.0/0
acl denied-desktop-clients src ####SOME_IP_ADDRESS SOME_OTHER_IP AND_SOME_MORE_IP_ADDRESSES####
acl denied-domains dstdom_regex -i "/etc/squid3/denied-hosts.acl"

http_access deny denied-desktop-clients
http_access deny denied-domains
http_access allow desktop-clients
http_access allow localhost
http_access deny all

http_reply_access allow all

icp_access deny all
htcp_clr_access deny all

htcp_access deny all
miss_access allow all

visible_hostname ####THE_HOSTNAME.DOMAIN_OF_THIS_HOST####
via off
forwarded_for off

cachemgr_passwd ####SOME_PASSWORD#### all
always_direct allow all





-----Original Message-----
From: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Sent: Tuesday, September 07, 2010 1:51 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] RE: Two squid servers to talk to each other before the internet

On 07/09/10 22:49, Tóth Tibor Péter wrote:
>> Is there a way to check if squids are talking to each other?
>
> The access.log of each proxy will contain entries for messages going to
> and from the sibling.
>
> On a basic setup like you have so far, expect to see SIBLING hit/miss
> codes sometimes. UDP_SIBLING_* are the ICP messages flowing between the
> siblings as they check whether the other has an object. TCP_SIBLING_HIT
> are the actual HTTP reply objects being fetched.
>
> Amos
>
> Hi Amos!
>
> I dont see anything inside of the access.log about the SIBLING. Could it be the log level somewhere? Or something is configured wrong?
> In fact I only see logs starting with TCP_(MISS/200, REFRESH_UNMODIFIED, IMS_HIT/304, MEM_HIT/200, TCP_HIT/200, etc...) Nothing with UDP_
>
> What can be wrong?
>
> Tibby

What does your squid.conf look like then?


Amos
--
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.8
   Beta testers wanted for 3.2.0.2
Received on Wed Sep 08 2010 - 09:20:18 MDT

This archive was generated by hypermail 2.2.0 : Wed Sep 08 2010 - 12:00:03 MDT