<div dir="ltr">Thanks, I'll look into using haproxy.</div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 17, 2015 at 12:31 PM, Brendan Kearney <span dir="ltr"><<a href="mailto:bpk678@gmail.com" target="_blank">bpk678@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Wed, 2015-03-18 at 00:08 +0600, Yuri Voinov wrote:<br>
> Brendan reads my thoughts. :)<br>
><br>
> You can, of course, use two or more squid instances and Cisco with<br>
> configured WCCP protocol before it. WCCP can plays with several cache<br>
> instances in load balancing role. Running squid at this moment sends<br>
> "here I am" messages to WCCP-enabled router, which will redirect<br>
> traffic on alive cache. The same time you can reconfigure second squid<br>
> instance a visa versa.<br>
><br>
> 18.03.15 0:00, Brendan Kearney пишет:<br>
> > On Tue, 2015-03-17 at 11:59 -0600, Samuel Anderson wrote:<br>
> >> Unfortunately thats not really an option for me. I've already<br>
> >> built everything just using squid. It works great and does<br>
> >> everything I need it to do with the exception of refreshing the<br>
> >> ACL lists. I just need to find a way to refresh those single<br>
> >> lists without disrupting Internet traffic to the users. If anyone<br>
> >> knows how to do this I would greatly appreciate it.<br>
> >><br>
> >> On Tue, Mar 17, 2015 at 11:39 AM, Yuri Voinov<br>
> >> <<a href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a>> wrote:<br>
> > Did you hear about rewriters and filters? I.e., squidGuard, or<br>
> > Dansguardian? Or, of course<br>
> > <a href="https://www.urlfilterdb.com/products/ufdbguard.html" target="_blank">https://www.urlfilterdb.com/products/ufdbguard.html</a> ? It has<br>
> > separate server process which can be restart VERY quickly<br>
> > independently of squid.<br>
> ><br>
> > 17.03.15 23:35, Samuel Anderson пишет:<br>
> >> Hello all,<br>
> ><br>
> >> Does anyone know of a way to reload a single ACL list? I<br>
> > have a<br>
> >> very complicated and large config file that takes around 30<br>
> > seconds<br>
> >> to reload when I run the (squid3 -k reconfigure) command. I<br>
> > have<br>
> >> several ACL lists that need to be updated throughout the day<br>
> > and it<br>
> >> would be nice if I could only reload those ACL lists and not<br>
> > the<br>
> >> entire config. Its problematic because while its reloading,<br>
> > the<br>
> >> server is effectively down and disrupts Internet access for<br>
> > the<br>
> >> rest of the users. Below is a small sample of the lists that<br>
> > will<br>
> >> be updated. If I could add a TTL to the lists so squid would<br>
> > reload<br>
> >> them periodically without a full reconfigure would be ideal.<br>
> ><br>
> ><br>
> ><br>
> >> acl GLOBAL-WHITELIST dstdomain<br>
> >> "/etc/squid3/whitelists/GLOBAL-WHITELIST" acl<br>
> >> UNRESTRICTED-WHITELIST dstdomain<br>
> >> "/etc/squid3/whitelists/UNRESTRICTED-WHITELIST" acl<br>
> > DEV-WHITELIST<br>
> >> dstdomain "/etc/squid3/whitelists/DEV-WHITELIST" acl<br>
> >> SALES-WHITELIST dstdomain<br>
> > "/etc/squid3/whitelists/SALES-WHITELIST"<br>
> ><br>
> ><br>
> >> Thanks<br>
> ><br>
> ><br>
> ><br>
> ><br>
> >> _______________________________________________ squid-users<br>
> > mailing<br>
> >> list <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> >> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> ><br>
> >> _______________________________________________ squid-users<br>
> >> mailing list <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> >> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> >><br>
> >><br>
> >><br>
> >><br>
> >> -- Samuel Anderson | Information Technology Administrator |<br>
> >> International Document Services<br>
> >><br>
> >><br>
> >> IDS | 11629 South 700 East, Suite 200 | Draper, UT<br>
> >> 84020-4607<br>
> >><br>
> >><br>
> >><br>
> >> CONFIDENTIALITY NOTICE: This e-mail and any attachments are<br>
> >> confidential. If you are not an intended recipient, please<br>
> >> contact the sender to report the error and delete all copies of<br>
> >> this message from your system. Any unauthorized review, use,<br>
> >> disclosure or distribution is prohibited.<br>
> >> _______________________________________________ squid-users<br>
> >> mailing list <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> >> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> ><br>
> > do you have the luxury of multiple squid instances behind a load<br>
> > balancer? mark one offline at the LB, reconfigure, mark online at<br>
> > the LB. Lather, rinse, repeat.<br>
> ><br>
> > _______________________________________________ squid-users mailing<br>
> > list <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> > <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> ><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
</div></div>i use haproxy to load balance 2 squid instances. using this:<br>
<br>
<a href="http://serverfault.com/questions/249316/how-can-i-remove-balanced-node-from-haproxy-via-command-line" target="_blank">http://serverfault.com/questions/249316/how-can-i-remove-balanced-node-from-haproxy-via-command-line</a><br>
<br>
you should be able to setup a process to mark you boxes offline, at<br>
will, thereby allowing you to reconfigure your instances.<br>
<div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><font face="arial, helvetica, sans-serif">Samuel Anderson | Information Technology Administrator | International Document Services</font><div><font face="arial, helvetica, sans-serif"><br></font></div><div><font face="arial, helvetica, sans-serif">IDS | 11629 South 700 East, Suite 200 | Draper, UT 84020-4607</font></div><div style="text-align:right"><img src="http://nationalmortgageprofessional.com/sites/default/files/images/IDS_Logo_03_12.topstoryimage.jpg" width="96" height="88"><br></div></div></div>
</div>
<br>
<div style="font-family:Arial,Helvetica,sans-serif"><font face="Arial, Helvetica, sans-serif" size="4">CONFIDENTIALITY NOTICE:</font></div><div style="font-family:Arial,Helvetica,sans-serif"><font size="4"><font face="Arial, Helvetica, sans-serif" style="font-family:Arial,Helvetica,sans-serif">This e-mail and any attachments are confidential. If you are not an intended recipient, please contact the sender to report the error and delete all copies of this message from your system. </font><font face="Arial, Helvetica, sans-serif">Any unauthorized review, use, disclosure or distribution is prohibited</font><font face="Arial, Helvetica, sans-serif">.</font></font></div>