<div dir="ltr">
<i><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">The second transaction has not yet reached that state despite 81017sec</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">having past.</span>
<br></i><br>Thank you for clarification.<br><br>About squid version<br><br><div><i>squid -v</i></div><div><i>Squid Cache: Version 3.5.27</i></div><div><i>Service Name: squid</i></div><div><i>configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=/include' '--mandir=/share/man' '--infodir=/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=/lib/squid3' '--srcdir=.' '--disable-maintainer-mode' '--disable-dependency-tracking' '--disable-silent-rules' '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' '--enable-inline' '--disable-arch-native' '--enable-async-io=8' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB' '--enable-basic-auth-helpers=squid_radius_auth' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=fake,smb_lm' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,unix_group,wbinfo_group' '--enable-url-rewrite-helpers=fake' '--enable-eui' '--enable-esi' '--enable-http-violations' '--enable-icmp' '--enable-zph-qos' '--disable-translation' '--with-swapdir=/var/spool/squid3' '--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' '--enable-ssl' '--with-open-ssl=/etc/ssl/openssl.cnf' '--enable-linux-netfilter' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 'build_alias=x86_64-linux-gnu'</i><br><br>Regarding the configuration when there is no out data<br></div><div><br>Squid himself listen localhost without https in SNP mode (i checked without SNP with same result)<br><br><div><i>netstat -anp | grep squid</i></div><div><i>tcp 0 0 <a href="http://127.0.0.1:8080">127.0.0.1:8080</a> 0.0.0.0:* LISTEN 835/(squid-coord-3)</i></div><div><i>tcp 0 0 <a href="http://127.0.0.1:8081">127.0.0.1:8081</a> 0.0.0.0:* LISTEN 835/(squid-coord-3)</i><br><br>In front of the SQUID stand nghtttpx as ssl/spdy frontend with backend squid<br><br><br><div><i>frontend=0.0.0.0,3000</i></div><div><i>backend=127.0.0.1,8080</i></div><div><i>backend=127.0.0.1,8081</i></div></div><div><br>In the specified configuration, there are no out data<br></div><div><br></div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2018-06-05 6:25 GMT+03:00 Amos Jeffries <span dir="ltr"><<a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 05/06/18 11:34, Tiraen wrote:<br>
> Good day. I apologize in advance if this has already been discussed, if<br>
> so - just give a link to the discussion<br>
> <br>
> The proxy server has an interface for viewing current active sessions<br>
> <br>
> http://{}:{}/squid-internal-<wbr>mgr/active_requests <br>
> <br>
<br>
</span>Please be aware these are *not* "sessions". These are transactions,<br>
which have one request, one response, and maybe some informational<br>
messages.<br>
<br>
A "session" as far as it relates to HTTP is a application level thing<br>
which includes _multiple_ transactions, and possibly even multiple TCP<br>
connections at the client end.<br>
<span class=""><br>
<br>
> or<br>
> <br>
> cache_object://%s/active_<wbr>requests<br>
> <br>
> There there is some set of parameters which allow to get the data on traffic<br>
> <br>
> If the connection to the proxy goes directly and by http we see like this:<br>
> <br>
</span>> /Connection: 0x8050e0518/<br>
> / FD 29, read 4247, wrote 13479/<br>
> / FD desc: Reading next request/<br>
> / in: buf 0x8045a6fe0, used 0, free 39/<br>
> / remote: ХХХХ:50340/<br>
> / local: ХХХХ:8080/<br>
> / nrequests: 1/<br>
> /uri ХХХ:443/<br>
> /logType TCP_TUNNEL/<br>
> /out.offset 0, out.size 13440/<br>
> /req_sz 235/<br>
> /entry 0x0/N/A/<br>
> /start 1527608373.902584 (73.252258 seconds ago)/<br>
> /username -/<br>
> /delay_pool 0/<br>
<span class="">> <br>
> <br>
> We have both traffic stat<br>
> <br>
</span>> /out.offset 0, out.size 13440/<br>
> /req_sz 235/<br>
> <br>
<br>
The latest transactions request was 235 bytes, its reply was 13440 bytes<br>
(so far).<br>
<span class=""><br>
<br>
> But if there is a frontend in front of the SQUID (nghttpx for example<br>
> and https) <br>
> <br>
> we have this<br>
> <br>
</span>> /Connection: 0x7f66a317ecf8/<br>
> / FD 222, read 9192, wrote 526/<br>
> / FD desc: Reading next request/<br>
> / in: buf 0x7f66a294fb90, used 0, free 39/<br>
> / remote: <a href="http://127.0.0.1:2314" rel="noreferrer" target="_blank">127.0.0.1:2314</a> <<a href="http://127.0.0.1:2314" rel="noreferrer" target="_blank">http://127.0.0.1:2314</a>>/<br>
> / local: <a href="http://127.0.0.1:8081" rel="noreferrer" target="_blank">127.0.0.1:8081</a> <<a href="http://127.0.0.1:8081" rel="noreferrer" target="_blank">http://127.0.0.1:8081</a>>/<br>
> / nrequests: 2/<br>
> /uri <a href="http://nererut.com:443" rel="noreferrer" target="_blank">nererut.com:443</a> <<a href="http://nererut.com:443" rel="noreferrer" target="_blank">http://nererut.com:443</a>>/<br>
> /logType TAG_NONE/<br>
> /out.offset 0, out.size 0/<br>
> /req_sz 334/<br>
> /entry (nil)/N/A/<br>
> /start 1527526715.189831 (81017.831772 seconds ago)/<br>
> /username 8355fcec-94fd-496c-94d1-<wbr>a195a5ca7148/<br>
> /delay_pool 0<br>
> /<br>
> without out traffic<br>
> <br>
> /out.offset 0, out.size 0/<br>
> /req_sz 334/<br>
<br>
This transaction request was 334 bytes, its reply was 0 bytes (so far).<br>
<span class=""><br>
<br>
> <br>
> I certainly did not test why it happens - due to https or proxy, but is<br>
> it possible to clarify this case?<br>
<br>
</span>The first transaction has reached the stage where a reply has started.<br>
<br>
The second transaction has not yet reached that state despite 81017sec<br>
having past.<br>
<br>
That is all we can say without more information about things like for<br>
example, which Squid version you are using, whether you are SSL-Bumping<br>
the HTTPS traffic for either of those transactions, network topology on<br>
the outgoing side of Squid, etc.<br>
<br>
<br>
Amos<br>
______________________________<wbr>_________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.<wbr>org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/<wbr>listinfo/squid-users</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span lang="en"><span>With best</span> <span>regards,</span><br><br><span>Vyacheslav</span> <span>Yakushev</span><span>,</span><br><br><span>Unix</span> <span>system administrator<br></span><span></span><span></span><br><a href="https://t.me/kelewind" target="_blank">https://t.me/kelewind</a><br><span></span></span><span lang="en"><span></span></span></div></div></div></div></div></div></div>
</div>