<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Yet another non-porn site: reddit.com</p>
<p>Let's check.<br>
</p>
<p>root @ cthulhu / # dig reddit.com <br>
<br>
; <<>> DiG 9.6-ESV-R11-P6 <<>> reddit.com<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
21722<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 15, AUTHORITY: 0,
ADDITIONAL: 0<br>
<br>
;; QUESTION SECTION:<br>
;reddit.com. IN A<br>
<br>
;; ANSWER SECTION:<br>
reddit.com. 86398 IN A 198.41.209.143<br>
reddit.com. 86398 IN A 198.41.208.138<br>
reddit.com. 86398 IN A 198.41.209.136<br>
reddit.com. 86398 IN A 198.41.209.139<br>
reddit.com. 86398 IN A 198.41.208.141<br>
reddit.com. 86398 IN A 198.41.208.137<br>
reddit.com. 86398 IN A 198.41.208.139<br>
reddit.com. 86398 IN A 198.41.208.143<br>
reddit.com. 86398 IN A 198.41.208.140<br>
reddit.com. 86398 IN A 198.41.209.137<br>
reddit.com. 86398 IN A 198.41.209.138<br>
reddit.com. 86398 IN A 198.41.209.140<br>
reddit.com. 86398 IN A 198.41.209.141<br>
reddit.com. 86398 IN A 198.41.208.142<br>
reddit.com. 86398 IN A 198.41.209.142<br>
<br>
;; Query time: 0 msec<br>
;; SERVER: 127.0.0.1#53(127.0.0.1)<br>
;; WHEN: Mon Jun 27 20:32:22 ALMT 2016<br>
;; MSG SIZE rcvd: 268<br>
<br>
root @ cthulhu / # ping reddit.com<br>
reddit.com is alive<br>
</p>
<p>Seems all ok, right?</p>
<p>Well, le'ts check TCP connectivity:</p>
<p>Test with telnet:<br>
root @ cthulhu / # telnet reddit.com 443<br>
Trying 198.41.208.142...<br>
Connected to reddit.com.<br>
Escape character is '^]'.<br>
^C^]<br>
telnet> <br>
<br>
I.e., tcp socket opens.<br>
</p>
<p>root @ cthulhu / # wget -S <a class="moz-txt-link-freetext" href="http://reddit.com">http://reddit.com</a><br>
--2016-06-27 20:33:13-- <a class="moz-txt-link-freetext" href="http://reddit.com/">http://reddit.com/</a><br>
Connecting to 127.0.0.1:3128... connected.<br>
Proxy request sent, awaiting response... <br>
HTTP/1.1 301 Moved Permanently<br>
Date: Mon, 27 Jun 2016 14:33:13 GMT<br>
Set-Cookie:
__cfduid=d486371096ba68bc7f5ba663e5d723bf21467037993; expires=Tue,
27-Jun-17 14:33:13 GMT; path=/; domain=.reddit.com; HttpOnly<br>
Location: <a class="moz-txt-link-freetext" href="https://www.reddit.com/">https://www.reddit.com/</a><br>
X-Content-Type-Options: nosniff<br>
Server: cloudflare-nginx<br>
CF-RAY: 2b999ce3a5854f08-DME<br>
Via: ICAP/1.0 cthulhu (C-ICAP/0.4.3 SquidClamav/Antivirus
service )<br>
X-Cache: MISS from cthulhu<br>
X-Cache-Lookup: MISS from cthulhu:3128<br>
Transfer-Encoding: chunked<br>
Connection: keep-alive<br>
Location: <a class="moz-txt-link-freetext" href="https://www.reddit.com/">https://www.reddit.com/</a> [following]<br>
--2016-06-27 20:33:13-- <a class="moz-txt-link-freetext" href="https://www.reddit.com/">https://www.reddit.com/</a><br>
Connecting to 127.0.0.1:3128... connected.<br>
<br>
</p>
.... and long-long time waiting for unknown.......<br>
<br>
<br>
Browser says: <span style="color: rgb(105, 105, 105); font-family:
"Segoe UI", Tahoma, sans-serif; font-size: 12px;
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 24px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: uppercase;
white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important; float:
none; background-color: rgb(247, 247, 247);">ERR_TIMED_OUT<br>
<br>
<br>
</span>
<div class="moz-cite-prefix">How to explain this?<br>
<br>
27.06.2016 20:32, Amos Jeffries пишет:<br>
</div>
<blockquote
cite="mid:17c781aa-8768-f58b-2308-8120ecac7826@treenet.co.nz"
type="cite">
<pre wrap="">[ Please reply to the mailing list I dont do private support except for
paying customers. And you have not arranged for that in advance. ]
On 28/06/2016 2:06 a.m., Adam Wright wrote:
</pre>
<blockquote type="cite">
<pre wrap="">- Ok, ISP will see my http traffic, but will the ISP see which websites I'm
surfing?
</pre>
</blockquote>
<pre wrap="">
If anyone can see HTTP traffic they can see what the traffic is about.
</pre>
<blockquote type="cite">
<pre wrap="">
- Browser is using the proxy. But access.log only shows the websites which
the browser connected successfully. For example I see cisco.com which I
entered minutes ago for Yuri.
1467035091.072 15004 85.107.208.29 TCP_MISS/200 246 CONNECT
supportforums.cisco.com:443 yeni DIRECT/141.101.115.192
</pre>
</blockquote>
<pre wrap="">
The proxy log records every transaction through the proxy, at the time
that transaction completed. Whether it succeeded or not. Anything that
get started is prone to being logged.
In the case above it was a CONNECT tunnel transferring some TLS wrapped
protocol - probably HTTPS, SPDY or WebSockets on port 443. It took
15.004 seconds to do whatever took 246 bytes to transfer.
So nothing in the log indicates either the browser is *not* using the
proxy for those transactions, or they are still ongoing as far as Squid
is concerned.
It could be a case of browser using SPDY, QUICK or WebSockets protocols
instead of HTTP inside a TLS tunnel, or directly without the proxy.
Particularly if Chrome is involved.
The case of ongoing connections is unfortunate. You can tune Squid
timeouts somewhat to make the proxy more sensitive and do its failover
to working destinations faster. But otherwise its a browser specific
problem that can only be fixed by the browser.
It might be that whatever was happening inside that tunnel above got
stuck and timed out. To Squid the tunnel is opaque, so any type of error
in there is strictly between the browser and server.
The tiny size on that log entry makes me suspect its TLS handshake
hanging and a 15sec timeout somewhere closes it down. If so the issue is
not Squid, its whatever in the server or browser is causing the TLS to hang.
</pre>
<blockquote type="cite">
<pre wrap="">
- Right now I'm using maxthon, it also says "Error code 101
(net::ERR_CONNECTION_RESET)" while I try to connect to those xxx websites.
</pre>
</blockquote>
<pre wrap="">
That seems to mean the proxy is closing the connection. But that would
mean the proxy is aware of it ending and record in the log what
transaction finished with aborting the connection.
If there no log record, thats a very strong sign that the browser is not
using the proxy for that request.
Amos
_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</body>
</html>