[squid-users] tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD flags=1: read/write failure: (104) Connection reset ny peer

[Alex Rousskov]

On 10/18/21 5:04 AM, Sándor Szabolcs [Budapest Környéki Törvényszék] wrote:

> My squid cache log has a lot of error:
> 
> tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD
> flags=1: read/write failure: (104) Connection reset ny peer

> ... my squid working perfectly.

Assuming the above message is logged with debugging level 2 or higher:

You should not be worried about it. That debugging information is meant
for developers. To be more precise, one should either not look at
developer-only debugging information or, if they do look at it, they
should know whether they should worry about ECONNRESET errors :-).

If this is a production Squid, consider limiting debugging sessions to
active problem investigations -- one should not be running Squid with
debugging level 2 or higher without a good reason because it obscures
important messages, slows Squid down, increases attack surfaces, etc.


HTH,

Alex.




  

> workers 4
> 
> cpu_affinity_map process_numbers=1,2,3,4 cores=3,4,5,6
> 
> acl localnet src 10.0.0.0/8             # RFC 1918 local private network
> (LAN)
> 
> acl SSL_ports port 443
> 
> acl Safe_ports port 80          # http
> 
> acl Safe_ports port 21          # ftp
> 
> acl Safe_ports port 443         # https
> 
> acl Safe_ports port 70          # gopher
> 
> acl Safe_ports port 210         # wais
> 
> acl Safe_ports port 1025-65535  # unregistered ports
> 
> acl Safe_ports port 280         # http-mgmt
> 
> acl Safe_ports port 488         # gss-http
> 
> acl Safe_ports port 591         # filemaker
> 
> acl Safe_ports port 777         # multiling http
> 
> acl CONNECT method CONNECT
> 
> http_access deny !Safe_ports
> 
> http_access deny CONNECT !SSL_ports
> 
> http_access allow localhost manager
> 
> http_access deny manager
> 
> include /etc/squid/conf.d/*
> 
> http_access allow localhost
> 
> http_access deny all
> 
> http_port 3128
> 
> cache_peer 10.0.249.120 parent 3128 0 no-query default
> 
> cache_mem 1024 MB
> 
> maximum_object_size_in_memory 1024 KB
> 
> memory_cache_shared on
> 
> memory_cache_mode always
> 
> memory_replacement_policy lru
> 
> debug_options ALL,2
> 
> coredump_dir /var/spool/squid
> 
> refresh_pattern ^ftp:           1440    20%     10080
> 
> refresh_pattern ^gopher:        1440    0%      1440
> 
> refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
> 
> refresh_pattern .               0       20%     4320
> 
> dns_v4_first on
> 
>  
> 
> In include /etc/squid/conf.d/*
> 
> acl business_hours time MTWHF 8:00-16:00
> 
> acl VIP src "/etc/squid/conf.d/bkt/vip.acl"
> 
> acl Restricted_Workstations src
> "/etc/squid/conf.d/bkt/restricted_workstations.acl"
> 
> acl RestrictedURL dstdom_regex 
> "/etc/squid/conf.d/bkt/regex_restricted_url.acl"
> 
> acl RestrictedSites dstdomain "/etc/squid/conf.d/bkt/restricted_sites.acl"
> 
> acl AllowedSites dstdomain "/etc/squid/conf.d/bkt/allowed_sites.acl"
> 
> acl StreamingRequest req_mime_type -i
> "/etc/squid/conf.d/bkt/StreamingRequest.acl"
> 
> acl local-servers dstdomain "/etc/squid/conf.d/bkt/local-servers.acl"
> 
> acl no-access-log dstdom_regex "/etc/squid/conf.d/bkt/no-access-log.acl"
> 
> acl no-log any-of local-servers no-access-log
> 
> acl hasRequest has request
> 
> acl logMe note important_transaction
> 
> always_direct allow local-servers
> 
> http_access allow AllowedSites Restricted_Workstations
> 
> http_access deny Restricted_Workstations
> 
> http_access allow VIP RestrictedSites
> 
> http_access allow VIP RestrictedURL
> 
> http_access allow VIP StreamingRequest
> 
> http_access deny localnet StreamingRequest business_hours
> 
> http_access deny localnet RestrictedSites business_hours
> 
> http_access deny localnet RestrictedURL business_hours
> 
> http_access allow localnet AllowedSites
> 
> http_access allow localnet
> 
> http_access allow localhost
> 
> http_access deny all
> 
> access_log daemon:/var/log/squid/access.log logformat=squid hasRequest
> logMe no-log
> 
> never_direct allow all
> 
>  
> 
>  
> 
> Although my squid working perfectly.
> 
>  
> 
> Should I do anything against these errors messages.
> 
>  
> 
>  
> 
> Szabolcs Sandor
> 
>  
> 
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>