<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6">
</HEAD>
<BODY>
On Fri, 2015-08-21 at 05:26 -0600, James Lay wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
On Fri, 2015-08-21 at 19:28 +1200, Amos Jeffries wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
Hi all,
Christos has managed (we think) to resolve a fairly major design issue
that has been plaguing the 3.5 series peek-and-splice feature so far.
(<<A HREF="http://wiki.squid-cache.org/Features/SslPeekAndSplice">http://wiki.squid-cache.org/Features/SslPeekAndSplice</A>>)
The problem was that Squid was not actually following the intended and
documented logic of skipping the impossible bumping actions. The patch
for that will be in 3.5 snaphots labelled r13895 or later (still waiting
on mirror updates as I write this 1-2hrs more maybe).
(<<A HREF="http://www.squid-cache.org/Versions/v3/3.5/">http://www.squid-cache.org/Versions/v3/3.5/</A>>)
Since it is affecting the visible behaviour of squid.conf settings I
would like some volunteers to help test it out. Find what problems
remain, and let me know what to alert others to in the next formal release.
We need testing both from those having issues currently, and those who
managed to get a trial-and-error config going with older 3.5.
Hopefully, if you are using the at_step workarounds there should not be
any visible difference. But some of the at_step tests may be needless now.
Thank you in advance for any assistance.
Amos
_______________________________________________
squid-users mailing list
<A HREF="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</A>
<A HREF="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</A>
</PRE>
</BLOCKQUOTE>
<BR>
Count me in....I'll let you know my results...my config is in this list...it hasn't changed.<BR>
<BR>
James
<PRE>
_______________________________________________
squid-users mailing list
<A HREF="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</A>
<A HREF="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</A>
</PRE>
</BLOCKQUOTE>
<BR>
Appears to work fine here:<BR>
<BR>
<TT>Squid Cache: Version 3.5.7-20150821-r13895</TT><BR>
<TT>Service Name: squid</TT><BR>
<TT>configure options: '--prefix=/opt' '--with-openssl' '--enable-ssl' '--enable-ssl-crtd' '--enable-linux-netfilter' '--enable-follow-x-forwarded-for' '--with-large-files' '--sysconfdir=/opt/etc/squid' '--enable-external-acl-helpers=none'</TT><BR>
<BR>
<BR>
<TT>Aug 21 06:21:11 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:11 -0600] "CONNECT 69.192.193.247:443 HTTP/1.1" configuration.apple.com - 200 9 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:29 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:29 -0600] "CONNECT 17.173.66.95:443 HTTP/1.1" pd-st.itunes.apple.com - 200 532 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:30 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:30 -0600] "CONNECT 69.192.207.154:443 HTTP/1.1" init.itunes.apple.com - 200 31123 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:30 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:30 -0600] "CONNECT 17.173.66.135:443 HTTP/1.1" xp.apple.com - 200 657 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:30 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:30 -0600] "CONNECT 17.173.66.95:443 HTTP/1.1" pd-st.itunes.apple.com - 200 2059 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:31 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:31 -0600] "CONNECT 17.173.66.73:443 HTTP/1.1" partiality.itunes.apple.com - 200 679 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:32 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:32 -0600] "CONNECT 69.192.193.29:443 HTTP/1.1" iadsdk.apple.com - 200 409 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<TT>Aug 21 06:21:32 gateway (squid-1): 192.168.1.100 - - [21/Aug/2015:06:21:32 -0600] "CONNECT 69.192.193.29:443 HTTP/1.1" iadsdk.apple.com - 200 409 TCP_TUNNEL:ORIGINAL_DST peek</TT><BR>
<BR>
I still see only peek instead of the final splice/bump in the logs...hoping that gets resolved soon. Thanks Alex.<BR>
<BR>
James
</BODY>
</HTML>