[squid-users] After upgrade from squid6.6 to 6.8 we have a lot of ICAP_ERR_OTHER and ICAP_ERR_GONE messages in icap logfiles

Dieter Bloms squid.org at bloms.de
Mon Mar 11 15:31:42 UTC 2024


Hello,

after an upgrade from squid6.6 to squid6.8 on a debian bookworm we have a lot
of messages from type:

ICAP_ERR_GONE/000
ICAP_ERR_OTHER/200
ICAP_ERR_OTHER/408
ICAP_ERR_OTHER/204

and some of our users claim about bad performance and some get "empty
pages". 
Unfortunately it is not deterministic, the page will appear the next
time it is called up. I can't see anything conspicuous in the cache.log.

There was no change to the virus scanner nor any change to the squid
config during the upgrade.

Here the icap spefific config lines from squid:

--snip--
acl CONNECT method CONNECT
acl withoutvirusscanner.dstnames dstdomain "/etc/squid/withoutvirusscanner.dstnames"
acl audio rep_mime_type ^audio/
acl audio rep_mime_type ^video/

icap_enable on
icap_preview_enable on
icap_preview_size 128
icap_persistent_connections on
icap_send_client_ip on
icap_send_client_username on
icap_service_failure_limit -1
icap_service_revival_delay 30
logformat icap_debug %ts.%03tu %6icap::tr %>a %icap::to/%03icap::Hs %icap::<st %icap::rm %ru %icap::<A -
icap_log daemon:/var/log/squid/icap.log icap_debug
icap_service service_reqmod reqmod_precache bypass=0 max-conn=4096 icap://xx.xx.xx.xx:1344/service_scanner
icap_service service_respmod respmod_precache bypass=0 max-conn=4096 icap://xx.xx.xx.xx:1344/service_scanner
adaptation_service_chain icap_request_scanners service_reqmod
adaptation_service_chain icap_respond_scanners service_respmod
adaptation_access icap_request_scanners allow all !to_localhost !manager !CONNECT !withoutvirusscanner.dstnames
adaptation_access icap_respond_scanners allow all !to_localhost !manager !CONNECT !audio !withoutvirusscanner.dstnames
--snip--

I don't see any changes in the ICAP server area between 6.6 and 6.8


-- 
Regards

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.


More information about the squid-users mailing list