[squid-users] R: R: delay pools

Amos Jeffries squid3 at treenet.co.nz
Tue Oct 27 20:14:47 UTC 2015


On 28/10/2015 5:15 a.m., De Lazzari Matteo wrote:
> Something like this? http_access allow password internetfull Internetfullthrottle is a "fake" rule because the following http_access allow password internetfull is less restrictive. Is it right?
> 
> http_access allow password internetfull Internetfullthrottle
> http_access allow password internetfull
> 
> external_acl_type internetfullthrottle_grp children=20 ttl=3600
> negative_ttl=3600 %LOGIN /usr/lib64/squid/ext_kerberos_ldap_group_acl -g InternetFullThrottle -D xxx 
> acl internetfullthrottle external  internetfullthrottle_grp
>  
>  delay_pools 1
>  delay_class 1 1
>  delay_parameters 1 1250000/1250000
>  delay_access 1 allow internetfullthrottle
>  delay_access 1 deny all
> 

Yes, but only because you are using class 1 pool in that config.

The class 5 pool you asked about earlier would not work with that helper
or delay_access rules.

Amos



More information about the squid-users mailing list