<div dir="ltr"><div>Hi Amos, </div><div><br></div><div>I ran squid with those debug options you indicated and here is the output for requesting <a href="https://www.facebook.com">https://www.facebook.com</a> and <a href="https://www.facebook.com/PeapodDelivers/">https://www.facebook.com/PeapodDelivers/</a></div><div><br></div><div>access.log</div><div><div>1446160994.160 471 10.1.99.147 TCP_MISS/200 3628 CONNECT <a href="http://api.ip2info.org:443">api.ip2info.org:443</a> pblair HIER_DIRECT/<a href="http://178.63.49.5">178.63.49.5</a> -</div><div>1446160998.706 76 10.1.99.147 TCP_MISS/200 3197 CONNECT <a href="http://static.xx.fbcdn.net:443">static.xx.fbcdn.net:443</a> - HIER_DIRECT/<a href="http://31.13.74.7">31.13.74.7</a> -</div><div>1446160998.713 57 10.1.99.147 TCP_MISS/200 3198 CONNECT <a href="http://static.xx.fbcdn.net:443">static.xx.fbcdn.net:443</a> - HIER_DIRECT/<a href="http://31.13.74.7">31.13.74.7</a> -</div><div>1446160998.795 48 10.1.99.147 TCP_MISS/200 3198 CONNECT <a href="http://scontent.xx.fbcdn.net:443">scontent.xx.fbcdn.net:443</a> - HIER_DIRECT/<a href="http://31.13.74.7">31.13.74.7</a> -</div><div>1446160998.863 25 10.1.99.147 TCP_MISS/200 2074 POST <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a> - HIER_DIRECT/<a href="http://96.17.10.89">96.17.10.89</a> application/ocsp-response</div><div>1446160999.000 61 10.1.99.147 TCP_MISS/200 3198 CONNECT <a href="http://static.xx.fbcdn.net:443">static.xx.fbcdn.net:443</a> - HIER_DIRECT/<a href="http://31.13.74.7">31.13.74.7</a> -</div><div>1446161028.891 30142 10.1.99.147 TCP_MISS/200 8547 CONNECT <a href="http://fbcdn-dragon-a.akamaihd.net:443">fbcdn-dragon-a.akamaihd.net:443</a> - HIER_DIRECT/<a href="http://96.17.10.18">96.17.10.18</a> -</div><div>1446161033.696 59489 10.1.99.147 TCP_MISS/200 4953 CONNECT <a href="http://play.google.com:443">play.google.com:443</a> - HIER_DIRECT/<a href="http://74.125.196.100">74.125.196.100</a> -</div><div>1446161042.680 64997 10.1.99.147 TCP_MISS/200 23601 CONNECT <a href="http://mail.google.com:443">mail.google.com:443</a> - HIER_DIRECT/<a href="http://74.125.21.17">74.125.21.17</a> -</div><div>1446161049.265 519 10.1.99.147 TCP_MISS/200 688 CONNECT <a href="http://api.ip2info.org:443">api.ip2info.org:443</a> pblair HIER_DIRECT/<a href="http://178.63.49.5">178.63.49.5</a> -</div><div>1446161082.351 48 10.1.99.147 TCP_MISS/200 3198 CONNECT <a href="http://static.xx.fbcdn.net:443">static.xx.fbcdn.net:443</a> - HIER_DIRECT/<a href="http://31.13.74.7">31.13.74.7</a> -</div><div>1446161091.418 58753 10.1.99.147 TCP_MISS/200 5520 CONNECT <a href="http://plus.google.com:443">plus.google.com:443</a> - HIER_DIRECT/<a href="http://74.125.21.139">74.125.21.139</a> -</div><div>1446161109.247 502 10.1.99.147 TCP_MISS/200 3628 CONNECT <a href="http://api.ip2info.org:443">api.ip2info.org:443</a></div></div><div><br></div><div>cache.log</div><div><div>2015/10/29 18:22:49 kid1| Starting Squid Cache version 3.3.8 for x86_64-redhat-linux-gnu...</div><div>2015/10/29 18:23:13 kid1| Starting new basicauthenticator helpers...</div><div>2015/10/29 18:23:18.853 kid1| forward.cc(317) Start: '<a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a>'</div><div>2015/10/29 18:23:18.853 kid1| forward.cc(121) FwdState: Forwarding client request local=<a href="http://10.46.128.68:10000">10.46.128.68:10000</a> remote=<a href="http://10.1.99.147:61616">10.1.99.147:61616</a> FD 22 flags=1, url=<a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a></div><div>2015/10/29 18:23:18.853 kid1| forward.cc(368) startConnectionOrFail: <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a></div><div>2015/10/29 18:23:18.853 kid1| forward.cc(936) connectStart: fwdConnectStart: <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a></div><div>2015/10/29 18:23:18.853 kid1| forward.cc(1058) connectStart: fwdConnectStart: got outgoing addr 0.0.0.0, tos 0, netfilter mark 0</div><div>2015/10/29 18:23:18.854 kid1| AsyncCall.cc(18) AsyncCall: The AsyncCall fwdConnectDoneWrapper constructed, this=0x7f053becf100 [call619]</div><div>2015/10/29 18:23:18.857 kid1| AsyncCall.cc(85) ScheduleCall: ConnOpener.cc(132) will call fwdConnectDoneWrapper(local=<a href="http://10.46.128.68:41365">10.46.128.68:41365</a> remote=<a href="http://96.17.10.89:80">96.17.10.89:80</a> FD 23 flags=1, data=0x7f053becef68) [call619]</div><div>2015/10/29 18:23:18.857 kid1| AsyncCallQueue.cc(51) fireNext: entering fwdConnectDoneWrapper(local=<a href="http://10.46.128.68:41365">10.46.128.68:41365</a> remote=<a href="http://96.17.10.89:80">96.17.10.89:80</a> FD 23 flags=1, data=0x7f053becef68)</div><div>2015/10/29 18:23:18.857 kid1| AsyncCall.cc(30) make: make call fwdConnectDoneWrapper [call619]</div><div>2015/10/29 18:23:18.857 kid1| forward.cc(883) connectDone: local=<a href="http://10.46.128.68:41365">10.46.128.68:41365</a> remote=<a href="http://96.17.10.89:80">96.17.10.89:80</a> FD 23 flags=1: '<a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a>'</div><div>2015/10/29 18:23:18.857 kid1| forward.cc(1074) dispatch: local=<a href="http://10.46.128.68:10000">10.46.128.68:10000</a> remote=<a href="http://10.1.99.147:61616">10.1.99.147:61616</a> FD 22 flags=1: Fetching 'POST <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a>'</div><div>2015/10/29 18:23:18.857 kid1| AsyncCallQueue.cc(53) fireNext: leaving fwdConnectDoneWrapper(local=<a href="http://10.46.128.68:41365">10.46.128.68:41365</a> remote=<a href="http://96.17.10.89:80">96.17.10.89:80</a> FD 23 flags=1, data=0x7f053becef68)</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(426) unregister: <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a></div><div>2015/10/29 18:23:18.863 kid1| forward.cc(451) complete: <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a></div><div> status 200</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(1212) reforward: <a href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/</a>?</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(1215) reforward: No, ENTRY_FWD_HDR_WAIT isn't set</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(475) complete: server (FD closed) not re-forwarding status 200</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(248) ~FwdState: FwdState destructor starting</div><div>2015/10/29 18:23:18.863 kid1| AsyncCall.cc(48) cancel: will not call fwdConnectDoneWrapper [call619] because FwdState destructed</div><div>2015/10/29 18:23:18.863 kid1| forward.cc(278) ~FwdState: FwdState destructor done</div></div><div><br></div><div>It doesn't look like it's showing anything for the facebook request, just the ocsp one.</div><div><br></div><div>I forgot to mention as well in my earlier reply, we have the proxy listening over port 10000 if that makes a difference.</div><div><br></div><div>For your question:</div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Is it breaking only when Squid is in the "other" datacenter from the<br>client(s) ?</blockquote></div><div>Not sure if I answered that completely. Clients that are "local" to that datacenter and not local to it have the same response, however I have been making my tests from the same location.</div><div><br></div><div>Thanks again for your response, please let me know if I can provide any further information.</div><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Pat Blair<br>Sr. Unix Administrator<br>Peapod, LLC<br><a href="mailto:pblair@peapod.com" style="color:rgb(17,85,204)" target="_blank">pblair@peapod.com</a><br></div><div><br></div></div></div></div></div></div>
</div>
<br>
<div>This email and any attachments may contain information that is proprietary,</div><div>confidential and/or privileged and for the sole use of the intended recipients(s)</div><div>only.</div><div>If you are not the intended recipient, please notify the sender by return</div><div>email and delete all copies of this email and any attachments. Ahold and/or its</div><div>subsidiaries shall neither be liable for the inaccurate or incomplete transmission</div><div>of the information contained in this email or any attachments, nor for any delay</div><div>in its receipt. To the extent this email is intended to create any legal obligation,</div><div>the obligation shall bind only the contracting entity and not any other entity within</div><div>the Ahold Group.</div>
<br>
<div>This email and any attachments may contain information that is proprietary,</div><div>confidential and/or privileged and for the sole use of the intended recipients(s)</div><div>only.</div><div>If you are not the intended recipient, please notify the sender by return</div><div>email and delete all copies of this email and any attachments. Ahold and/or its</div><div>subsidiaries shall neither be liable for the inaccurate or incomplete transmission</div><div>of the information contained in this email or any attachments, nor for any delay</div><div>in its receipt. To the extent this email is intended to create any legal obligation,</div><div>the obligation shall bind only the contracting entity and not any other entity within</div><div>the Ahold Group.</div>