<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
The latest tests shows that Squid for unknown reasons do outgoing
connection using IPv6 only. <br>
<br>
Which leads to "Network unreacheble" with my ISP - it does not
support IPv6.<br>
<br>
Full wireshark dumps for single outgoing transaction attached to bug
already.<br>
<br>
<div class="moz-cite-prefix">20.04.16 17:14, Eliezer Croitoru пишет:<br>
</div>
<blockquote cite="mid:5717648A.6090907@ngtech.co.il" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<style type="text/css">body p { margin-bottom: 0cm; margin-top: 0pt; } </style>
Hey Yuri,<br>
<br>
I think that the bug solution or identification is requiring a
full tcpdump trace for a single request as was mentioned on the
bug report:<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://bugs.squid-cache.org/show_bug.cgi?id=4497#c39">http://bugs.squid-cache.org/show_bug.cgi?id=4497#c39</a><br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://bugs.squid-cache.org/show_bug.cgi?id=4497#c40">http://bugs.squid-cache.org/show_bug.cgi?id=4497#c40</a><br>
<br>
I have opened the port to my proxy, so you would be able to run
couple requests to verify that your curl and wget and other
clients doesn't have this "handshake" issue when accessing <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://cloudflare.com"><a class="moz-txt-link-freetext" href="https://cloudflare.com">https://cloudflare.com</a></a> using
my local testing proxy.<br>
Send me privately your origin IP address so I would add an
exception in my proxy for it.<br>
<br>
Eliezer<br>
<br>
<div class="moz-cite-prefix">On 12/04/2016 14:55, Yuri Voinov
wrote:<br>
</div>
<blockquote cite="mid:570CE246.40008@gmail.com" type="cite">Does
anybody faces this problem with 4.0.8: <br>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://i1.someimage.com/3lD2cvV.png">https://i1.someimage.com/3lD2cvV.png</a>
<br>
<br>
? <br>
<br>
It accomplished this error in cache.log: <br>
<br>
2016/04/12 17:39:38 kid1| Error negotiating SSL on FD 54:
error:00000000:lib(0):func(0):reason(0) (5/0/0) <br>
<br>
and "NONE/503" in access.log. <br>
<br>
Without proxy works like sharm. 3.5.16 with the similar
squid.conf works like sharm. <br>
<br>
NB: Cloudflare support said, that they key feature for SSL is
SNI and ECDSA now. AFAIK, 4.0.8 is fully supports this features.
<br>
<br>
Any advice will be helpful. <br>
<br>
Yes, I know this looks like DDoS protection on Cloudflare. But
WTF? Any workaround required. Half-Internet is hosted on
Cloudflare. <br>
<br>
WBR, Yuri <br>
_______________________________________________ <br>
squid-users mailing list <br>
<a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
<br>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</body>
</html>