Re: IPCop-devel Digest, Vol 88, Issue 5
Josh Nijenhuis <[email protected]> Sun, 16 Feb 2014 19:16:23 -0500
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Message-ID | <[email protected]> |
I cleared my cache and since then squid hasn't been on the top of top! On 02/16/14 19:10, ipcop-devel-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org wrote: > Send IPCop-devel mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/ipcop-devel > or, via email, send a message with subject or body 'help' to > ipcop-devel-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org > > You can reach the person managing the list at > ipcop-devel-owner-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of IPCop-devel digest..." > > > Today's Topics: > > 1. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (Olaf Westrik) > 2. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (Olaf Westrik) > 3. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (Eric Oberlander) > 4. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (Michael Rasmussen) > 5. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (Michael Rasmussen) > 6. Re: [IPCop-user] bug in relase 2.1.0 or 2.1.1: causes squid > high cpu usage (David W Studeman) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 16 Feb 2014 19:58:53 +0100 > From: Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> > Subject: Re: [IPCop-devel] [IPCop-user] bug in relase 2.1.0 or 2.1.1: > causes squid high cpu usage > To: [email protected] > Message-ID: <53010A6D.9040609-Yz37vSk3/[email protected]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 2014-02-16 16:07, Olaf Westrik wrote: > >> Probably because the syntax of squid.conf was changed and we did not >> rewrite it after the upgrade. > This is incorrect, the 2.1.1 upgrade did modify squid.conf. > > We'll need to repeat calling makesquidconf.pl via upgrade.sh in 2.1.2/setup > After fixing makesquidconf.pl of course. > > > Olaf > > > > ------------------------------ > > Message: 2 > Date: Sun, 16 Feb 2014 21:41:57 +0100 > From: Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> > Subject: Re: [IPCop-devel] [IPCop-user] bug in relase 2.1.0 or 2.1.1: > causes squid high cpu usage > To: [email protected] > Message-ID: <53012295.7010207-Yz37vSk3/[email protected]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 2014-02-16 18:10, Eric Oberlander wrote: >> It may be part of the problem, but it's not the full story. After I >> changed 'transparent' to 'intercept' I still get errors in the >> sytem>proxy logs, and this warning when I run squid -k parse >> WARNING: HTTP requires the use of Via >> and still no actual hits on the cache... > that's only a warning. > > For the errors I may have found a solution. Looks like we need 2 > entries, one for transparent and one for 'normal' proxying. > > http_port 192.168.1.1:<transparent> intercept > http_port 192.168.1.1:<webproxy> > > This also seems to solve a problem when you have mixed clients (with / > without proxy config). In my case squid went up to 100% CPU when a > browser with proxy config tried to access the internet. > > > Will need to think about that, takes some modifications in firewalling too. > > > Olaf > > > > ------------------------------ > > Message: 3 > Date: Sun, 16 Feb 2014 21:38:39 +0000 > From: Eric Oberlander <[email protected]> > Subject: Re: [IPCop-devel] [IPCop-user] bug in relase 2.1.0 or 2.1.1: > causes squid high cpu usage > To: Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> > Cc: IPCop devel <[email protected]> > Message-ID: > <CAPkz44FvuqQXdQ42m4rj4K8VpYkMLZn34YkcvYnCyoz7-XtfyQ-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> > Content-Type: text/plain; charset="iso-8859-1" > > Do the <transparent> and <webproxy> ports have to be different? > Is the order in squid.conf significant? > > > On 16 February 2014 20:41, Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> wrote: > >> On 2014-02-16 18:10, Eric Oberlander wrote: >>> It may be part of the problem, but it's not the full story. After I >>> changed 'transparent' to 'intercept' I still get errors in the >>> sytem>proxy logs, and this warning when I run squid -k parse >>> WARNING: HTTP requires the use of Via >>> and still no actual hits on the cache... >> that's only a warning. >> >> For the errors I may have found a solution. Looks like we need 2 >> entries, one for transparent and one for 'normal' proxying. >> >> http_port 192.168.1.1:<transparent> intercept >> http_port 192.168.1.1:<webproxy> >> >> This also seems to solve a problem when you have mixed clients (with / >> without proxy config). In my case squid went up to 100% CPU when a >> browser with proxy config tried to access the internet. >> >> >> Will need to think about that, takes some modifications in firewalling too. >> >> >> Olaf >> >> >> ------------------------------------------------------------------------------ >> Android apps run on BlackBerry 10 >> Introducing the new BlackBerry 10.2.1 Runtime for Android apps. >> Now with support for Jelly Bean, Bluetooth, Mapview and more. >> Get your Android app in front of a whole new audience. Start now. >> >> http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk >> _______________________________________________ >> IPCop-devel mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/ipcop-devel >> > -------------- next part -------------- > An HTML attachment was scrubbed... > > ------------------------------ > > Message: 4 > Date: Sun, 16 Feb 2014 22:50:11 +0100 > From: Michael Rasmussen <[email protected]> > Subject: Re: [IPCop-devel] [IPCop-user] bug in relase 2.1.0 or 2.1.1: > causes squid high cpu usage > To: Eric Oberlander <[email protected]> > Cc: Olaf Westrik <weizen_42-Yz37vSk3/[email protected]>, list > <[email protected]> > Message-ID: > <mailman.18829.1392595803.2171.ipcop-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org> > Content-Type: text/plain; charset=utf-8 > > The ordet is not important but the ports must be differant since intercept applies security constrains if I have understand it correct. > > On Feb 16, 2014 10:38 PM, Eric Oberlander <[email protected]> wrote: >> Do the <transparent> and <webproxy> ports have to be different?? >> Is the order in squid.conf significant? >> >> >> On 16 February 2014 20:41, Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> wrote: >>> On 2014-02-16 18:10, Eric Oberlander wrote: >>>> It may be part of the problem, but it's not the full story. After I >>>> changed 'transparent' to 'intercept' I still get errors in the >>>> sytem>proxy logs, and this warning when I run squid -k parse >>>> WARNING: HTTP requires the use of Via >>>> and still no actual hits on the cache... >>> that's only a warning. >>> >>> For the errors I may have found a solution. Looks like we need 2 >>> entries, one for transparent and one for 'normal' proxying. >>> >>> http_port 192.168.1.1:<transparent> intercept >>> http_port 192.168.1.1:<webproxy> >>> >>> This also seems to solve a problem when you have mixed clients (with / >>> without proxy config). In my case squid went up to 100% CPU when a >>> browser with proxy config tried to access the internet. >>> >>> >>> Will need to think about that, takes some modifications in firewalling too. >>> >>> >>> Olaf >>> >>> ------------------------------------------------------------------------------ >>> Android apps run on BlackBerry 10 >>> Introducing the new BlackBerry 10.2.1 Runtime for Android apps. >>> Now with support for Jelly Bean, Bluetooth, Mapview and more. >>> Get your Android app in front of a whole new audience. ?Start now. >>> http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk >>> _______________________________________________ >>> IPCop-devel mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/ipcop-devel >> >> !DSPAM:5301302e298149224913990! > ------------------------------ > > Message: 5 > Date: Sun, 16 Feb 2014 23:51:06 +0100 > From: Michael Rasmussen <[email protected]> > Subject: Re: [IPCop-devel] [IPCop-user] bug in relase 2.1.0 or 2.1.1: > causes squid high cpu usage > To: [email protected] > Message-ID: <20140216235106.0b997af1-3WGKNT+zPH5L7yahMWQ9bOTW4wlIGRCZ@public.gmane.org> > Content-Type: text/plain; charset="us-ascii" > > Hi Olaf, > > On Sun, 16 Feb 2014 21:41:57 +0100 > Olaf Westrik <weizen_42-Yz37vSk3/[email protected]> wrote: > >> For the errors I may have found a solution. Looks like we need 2 >> entries, one for transparent and one for 'normal' proxying. >> >> http_port 192.168.1.1:<transparent> intercept >> http_port 192.168.1.1:<webproxy> >> >> This also seems to solve a problem when you have mixed clients (with / >> without proxy config). In my case squid went up to 100% CPU when a >> browser with proxy config tried to access the internet. >> >> >> Will need to think about that, takes some modifications in firewalling too. >> > It seems no matter what I do the cache is never populated with any > objects what so ever. Hitting reload on a page containing only static > objects nothing is stored in the cache since every new reload on logs > TCP_MISS/200 in the access.log file. > > Why is this? > -- Josh Nijenhuis ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk