[squid-users] cache_peer configuration

kutz hdkutz at hdkutz.de
Tue Apr 21 14:25:52 UTC 2020


On Wed, Apr 22, 2020 at 01:30:48AM +1200, Amos Jeffries wrote:
> On 21/04/20 11:06 pm, kutz wrote:
> > Hello List,
> > I'm trying to establish a proxy2proxy configuration with my
> > squid-3.5.28-1.el6.x86_64
> > on
> > Centos 6.10
> > 
> > cache_peer IP_OF_PEER parent 8080 0 no-query originserver name=server_1
> 
> If the upstream is a proxy, do not tell Squid it is an origin server.
> 
> 
> > acl sites_server_1 dstdomain url_1 url_2 url_3 url_4
> > cache_peer_access server_1 allow sites_server_1
> > cache_peer_access server_1 deny all
> > 
> > When trying to access one of the URLs the requests are not answered (or
> > delivered) by the remote proxy - instead local Squid tries to answer.
> > As my squid has no direct access to those URLs I'm getting 503 in my Squid Logs with a timeout in my
> > browers.
> > 
> > What am I missing here?
> > 
> 
> Some detail you are not providing for us either.
> 
> This is why we always ask for as much detail as possible. Logs, full
> config. As much as you can about the failing transaction.
> 
> 
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

Hello Amos,
thanks for your suggestion.
I removed "originserver" from my config.
Still I see the requests answered by my own squid and not relayed over the cache_peer.

I'm limited with providing my squid configuration - I can't provide the config to hole
audience due to security restrictions.
Tell me which squid config details you like to have and I see what i can do.

Logs:
<snip>
Apr 21 16:18:12 2020.850     45 machine_1.domain.intern TCP_TUNNEL/200 1179 1329 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.852     47 machine_1.domain.intern TCP_TUNNEL/200 2222 1329 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.857     52 machine_1.domain.intern TCP_TUNNEL/200 1610 1334 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.862     53 machine_1.domain.intern TCP_TUNNEL/200 7189 1323 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.864     56 machine_1.domain.intern TCP_TUNNEL/200 1383 1321 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.864     57 machine_1.domain.intern TCP_TUNNEL/200 1651 1323 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.911     45 machine_1.domain.intern TCP_TUNNEL/200 1372 1336 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.920     48 machine_1.domain.intern TCP_TUNNEL/200 7762 1324 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.927     54 machine_1.domain.intern TCP_TUNNEL/200 1054 1362 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.929     55 machine_1.domain.intern TCP_TUNNEL/200 1039 1326 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.932     60 machine_1.domain.intern TCP_TUNNEL/200 13666 1313 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.932     55 machine_1.domain.intern TCP_TUNNEL/200 1730 1328 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.974     44 machine_1.domain.intern TCP_TUNNEL/200 2639 1325 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.976     45 machine_1.domain.intern TCP_TUNNEL/200 3061 1320 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:12 2020.999     46 machine_1.domain.intern TCP_TUNNEL/200 1204 1327 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.001     48 machine_1.domain.intern TCP_TUNNEL/200 2988 1330 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.033     81 machine_1.domain.intern TCP_TUNNEL/200 41463 1316 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.043     93 machine_1.domain.intern TCP_TUNNEL/200 1128 1326 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.058     53 machine_1.domain.intern TCP_TUNNEL/200 3689 1334 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.060     54 machine_1.domain.intern TCP_TUNNEL/200 2038 1329 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.064     58 machine_1.domain.intern TCP_TUNNEL/200 3407 1331 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.074     58 machine_1.domain.intern TCP_TUNNEL/200 6434 1329 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.122     45 machine_1.domain.intern TCP_TUNNEL/200 1349 1326 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.123     58 machine_1.domain.intern TCP_TUNNEL/200 2482 1334 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.125     59 machine_1.domain.intern TCP_TUNNEL/200 5282 1328 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.125     48 machine_1.domain.intern TCP_TUNNEL/200 1673 1327 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.126     59 machine_1.domain.intern TCP_TUNNEL/200 1600 1323 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.151     47 machine_1.domain.intern TCP_TUNNEL/200 1535 1321 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.196     53 machine_1.domain.intern TCP_TUNNEL/200 5397 1353 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.201     57 machine_1.domain.intern TCP_TUNNEL/200 1205 1356 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.202     58 machine_1.domain.intern TCP_TUNNEL/200 1312 1353 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.209     64 machine_1.domain.intern TCP_TUNNEL/200 1764 1357 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.237     92 machine_1.domain.intern TCP_TUNNEL/200 37417 1337 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.271     57 machine_1.domain.intern TCP_TUNNEL/200 3478 1337 CONNECT url_1:443 - HIER_DIRECT/url_1 -
Apr 21 16:18:13 2020.272     58 machine_1.domain.intern TCP_TUNNEL/200 6071 1344 CONNECT url_1:443 - HIER_DIRECT/url_1 -
<snip>

-- 
https://www.xing.com/hp/HansDieter_Kutz/
http://www.hdkutz.de
Using the Force, Yoda effortlessly frees the X-Wing from the bog.
Luke Skywalker:
	I don't believe it.
Yoda:
	That is why you fail.


More information about the squid-users mailing list