Re: [squid-users] Weird issue with some https pages

Hi Amos,
 
Thanks for your quick answer. In our squid.conf we have configured:
 
hosts_file /etc/hosts

In that file we have:

213.229.135.77 rbcdexia-is.es

Is this an easy way to resolve the domain?

Thanks,

Jaime.

>>> El día 07/03/2012 a las 13:20, en el mensaje
<4F575280.6030309_at_treenet.co.nz>, Amos Jeffries
<squid3_at_treenet.co.nz> escribió:

On 8/03/2012 1:00 a.m., Jaime Gomez wrote:
> Hi all,
>
> First of all I want to apologyse if this question has been solved
before but I haven't found anything related with this.
>
> We have a very weird issue with some https web pages. Some of them
are very, very slow. After doing some debugging we have this in our
cache.log
>
> 2012/03/07 11:10:41.072| httpParseInit: Request buffer is CONNECT
ebanking.rbcdexia-is.es:443 HTTP/1.1
> Host: ebanking.rbcdexia-is.es
> 2012/03/07 11:10:41.072| HttpMsg.cc(445) parseRequestFirstLine:
parsing possible request: CONNECT ebanking.rbcdexia-is.es:443 HTTP/1.1
> Host: ebanking.rbcdexia-is.es
> 2012/03/07 11:10:41.072| urlParse: Split URL
'ebanking.rbcdexia-is.es:443' into proto='',
host='ebanking.rbcdexia-is.es', port='443', path=''
> Host: ebanking.rbcdexia-is.es
> 2012/03/07 11:10:41.073| aclMatchDomainList: checking
'ebanking.rbcdexia-is.es'
> 2012/03/07 11:10:41.073| aclMatchDomainList:
'ebanking.rbcdexia-is.es' found
> 2012/03/07 11:10:41.073| The request CONNECT
ebanking.rbcdexia-is.es:443 is ALLOWED, because it matched
'allowBancos'
> 2012/03/07 11:10:41.073| The request CONNECT
ebanking.rbcdexia-is.es:443 is ALLOWED, because it matched
'allowBancos'
> 2012/03/07 11:10:41.073| clientProcessRequest: CONNECT
'ebanking.rbcdexia-is.es:443'
> 2012/03/07 11:10:41.074| tunnelStart: 'CONNECT
ebanking.rbcdexia-is.es:443'
> 2012/03/07 11:10:41.074| fd_open() FD 20 ebanking.rbcdexia-is.es:443
> 2012/03/07 11:10:41.074| peerSelectFoo: 'CONNECT
ebanking.rbcdexia-is.es'
> 2012/03/07 11:10:41.075| commConnectStart: FD 20, data 0x5b5fd60,
ebanking.rbcdexia-is.es:443
> 2012/03/07 11:10:41.075| commConnectStart: FD 20, cb 0x5ac9200*1,
ebanking.rbcdexia-is.es:443
> 2012/03/07 11:10:41.075| ipcache_nbgethostbyname: Name
'ebanking.rbcdexia-is.es'.
> 2012/03/07 11:10:41.075| ipcacheRelease: Releasing entry for
'ebanking.rbcdexia-is.es'
> 2012/03/07 11:10:41.075| ipcache_nbgethostbyname: MISS for
'ebanking.rbcdexia-is.es'
> 2012/03/07 11:10:41.075| idnsALookup: buf is 41 bytes for
ebanking.rbcdexia-is.es, id = 0x5535

The DNS entries TTL period has expired. Squid is looking up new ones
when the timeout happens.

Can your resolve that domain easily yourself? If not, that is the
problem.

If you can resolve it easily please add debug section 78,5 and make a
new trace.

Amos
Received on Wed Mar 07 2012 - 13:09:18 MST