[squid-users] no fallback to ipv4 if ipv6 remote address is non-functional

[Amos Jeffries]

On 12/06/2015 11:48 p.m., Brian J. Murrell wrote:
> On Fri, 2015-06-12 at 10:13 +1200, Amos Jeffries wrote:
>>
>> see <http://readlist.com/lists/squid-cache.org/squid-users/11/58405.html>
> 
> Of course, I did see the rest of the messages in the thread.  I'm not
> sure what I'm supposed to be seeing in that particular message though
> other than 3.4.3 worked for the person reporting that.
> 
> So maybe I have a different problem?

On the side of "probably".

> 
>> - You speak of a squid.conf but dont show any of its contents.
> 
> auth_param negotiate program /usr/local/bin/negotiate_wrapper -d --ntlm /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --kerberos /usr/lib/squid3/negotiate_kerberos_auth
> auth_param negotiate children 20 startup=1 idle=1
> auth_param negotiate keep_alive on
> auth_param basic program /usr/lib/squid3/basic_pam_auth
> auth_param basic children 3 startup=3 idle=1
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours
> auth_param basic casesensitive off
> include /etc/squid3/squid-acls.conf
> include /etc/squid3/squid-http_access.conf
> http_access allow localhost
> http_access deny all
> http_port 3128
> http_port 13128 intercept
> cache_dir aufs /var/spool/squid3 9000 16 256
> maximum_object_size 404800 KB
> cache_store_log stdio:/var/log/squid3/store.log
> strip_query_terms off
> coredump_dir /var/spool/squid3
> url_rewrite_program /usr/bin/squidGuard
> url_rewrite_children 10
> refresh_pattern ^ftp:           1440    20%     10080
> refresh_pattern ^gopher:        1440    0%      1440
> refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
> refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
> refresh_pattern \.rpm$          144000  100%    525600
> refresh_pattern \.deb$          144000  100%    525600
> refresh_pattern .               0       20%     4320
> connect_timeout 10 seconds
> snmp_port 3401
> snmp_access allow snmppublic linux_pc 
> snmp_access deny all
> no_cache deny url_deb 
> 
>> - You speak of 503 but show now trace or evidence from cache.log (or
>> even access.log) that might hint as a reason for it.
> 
> From access.log:
> 
> 1434107701.067   9698 10.75.22.1 TCP_MISS/503 0 CONNECT irc.bcwireless.net:6667 brian HIER_NONE/- -
> 

If I assume it got as far as trying to connect it looks like it took
10sec waiting for some response.

So,
* can all of the DNS servers in your /etc/resolv.conf return results for
irc.bcwireless.net?



> I'm happy to provide some debug trace.  I assume you don't want ALL, but
> if you let me know which debugging sections and levels would be useful
> I'd be happy to provide them.

Probably these:
  debug_options ALL,1 11,2 44,2 5,5 17,5

Amos