[squid-users] Squid 5.7 + bump ERR_READ_ERROR|WITH_SERVER

[Alex Rousskov]

On 10/12/22 12:45, David Touzeau wrote:
> Hi
> 
> We using squid 5.7 after adding ssl-bump we have sometimes several 502 
> error  with extended error ERR_READ_ERROR|WITH_SERVER
> 
> 1665589818.831     11 192.168.1.13 NONE_NONE/502 192616 OPTIONS 
> https://www2.deepl.com/jsonrpc?method=LMT_split_text - HIER_NONE/-:- 
> text/html mac="68:54:5a:94:e7:56" - exterr="ERR_READ_ERROR|WITH_SERVER"
> 1665589839.288     11 192.168.1.13 NONE_NONE/502 506759 POST 
> https://pollserver.lastpass.com/poll_server.php - HIER_NONE/-:- 
> text/html mac="68:54:5a:94:e7:56" - exterr="ERR_READ_ERROR|WITH_SERVER"
> 1665589719.879     44 192.168.1.13 NONE_NONE/502 506954 GET 
> https://contile.services.mozilla.com/v1/tiles - HIER_NONE/-:- text/html 
> mac="68:54:5a:94:e7:56" - exterr="ERR_READ_ERROR|WITH_SERVER"

> What does it means.

502 with ERR_READ_ERROR|WITH_SERVER may mean several things 
(unfortunately). Given HIER_NONE, I would suspect that Squid could not 
find a valid destination for the request. There is a similar recent 
squid-users thread at 
http://lists.squid-cache.org/pipermail/squid-users/2022-October/025289.html


> how can we fix it ?

The first step is to identify what causes these errors.

Can you reproduce this problem at will? Perhaps by trying going to 
https://dnslabeldoesnotexist.com mentioned at the above thread? If you 
can, consider sharing (a pointer to) a compressed debugging cache.log 
from a test box that does not expose any internal secrets, as detailed 
at 
https://wiki.squid-cache.org/SquidFaq/BugReporting#Debugging_a_single_transaction


HTH,

Alex.