<tt><font size=2>Hi we are using Squid as a Caching proxy for out patch
deployment.<br>
<br>
Since we moved to version 3.5.28 on windows Server ,we have problems in
our<br>
main spots.<br>
<br>
typical cache.log entry´s are<br>
2019/03/12 14:12:00 kid1| Using Least Load store dir selection<br>
2019/03/12 14:12:00 kid1| Set Current Directory to<br>
C:\smart\Squid\var\cache\squid<br>
2019/03/12 14:12:00 kid1| Finished loading MIME types and icons.<br>
2019/03/12 14:12:00 kid1| HTCP Disabled.<br>
2019/03/12 14:12:00 kid1| Squid plugin modules loaded: 0<br>
2019/03/12 14:12:00 kid1| Adaptation support is off.<br>
2019/03/12 14:12:00 kid1| Accepting HTTP Socket connections at local=[::]:81<br>
remote=[::] FD 12 flags=9<br>
2019/03/12 14:12:00 kid1| Done reading F:\LEMSS-Content swaplog (743<br>
entries)<br>
2019/03/12 14:12:00 kid1| Finished rebuilding storage from disk.<br>
2019/03/12 14:12:00 kid1| 482 Entries scanned<br>
2019/03/12 14:12:00 kid1| 0 Invalid entries.<br>
2019/03/12 14:12:00 kid1| 0 With invalid flags.<br>
2019/03/12 14:12:00 kid1| 223 Objects loaded.<br>
2019/03/12 14:12:00 kid1| 0 Objects expired.<br>
2019/03/12 14:12:00 kid1| 0 Objects cancelled.<br>
2019/03/12 14:12:00 kid1| 119 Duplicate URLs purged.<br>
2019/03/12 14:12:00 kid1| 140 Swapfile clashes avoided.<br>
2019/03/12 14:12:00 kid1| Took 0.14 seconds (1588.31 objects/sec).<br>
2019/03/12 14:12:00 kid1| Beginning Validation Procedure<br>
2019/03/12 14:12:00 kid1| Completed Validation Procedure<br>
2019/03/12 14:12:00 kid1| Validated 223 Entries<br>
2019/03/12 14:12:00 kid1| store_swap_size = 6227808.00 KB<br>
2019/03/12 14:12:01 kid1| storeLateRelease: released 0 objects<br>
2019/03/12 14:12:03 kid1| DiskThreadsDiskFile::openDone: (2) No such file
or<br>
directory<br>
2019/03/12 14:12:03 kid1|
F:\LEMSS-Content/00/00/00000025<br>
2019/03/12 14:12:03 kid1| WARNING: 1 swapin MD5 mismatches<br>
2019/03/12 14:12:03 kid1| DiskThreadsDiskFile::openDone: (2) No such file
or<br>
directory<br>
2019/03/12 14:12:03 kid1|
F:\LEMSS-Content/00/00/00000025<br>
2019/03/12 14:12:03 kid1| WARNING: 1 swapin MD5 mismatches<br>
2019/03/12 14:12:03 kid1| DiskThreadsDiskFile::openDone: (2) No such file
or<br>
directory<br>
2019/03/12 14:12:03 kid1|
F:\LEMSS-Content/00/00/0000002D<br>
2019/03/12 14:12:24 kid1| DiskThreadsDiskFile::openDone: (16) Device or<br>
resource busy<br>
2019/03/12 14:12:24 kid1|
F:\LEMSS-Content/00/00/000000CC<br>
2019/03/12 14:12:24 kid1| DiskThreadsDiskFile::openDone: (2) No such file
or<br>
directory<br>
2019/03/12 14:12:24 kid1|
F:\LEMSS-Content/00/00/00000079<br>
2019/03/12 14:12:31 kid1| DiskThreadsDiskFile::openDone: (2) No such file
or<br>
directory<br>
2019/03/12 14:12:31 kid1|
F:\LEMSS-Content/00/00/00000008<br>
2019/03/12 14:12:59 kid1| DiskThreadsDiskFile::openDone: (13) Permission<br>
denied<br>
<br>
<br>
after that squid service is running but does not keep connections ore<br>
reastablish connections.<br>
Squid service has to be restarted.<br>
<br>
Depending on the location we have 100 Mbit to 10 Gbit.<br>
<br>
our squid.conf at the main branches is like<br>
#Local Settings<br>
acl all src all<br>
acl manager proto cache_object<br>
acl localhost src 127.0.0.1/32<br>
acl to_localhost dst 127.0.0.0/8<br>
<br>
# Example rule allowing access from your local networks.<br>
# Adapt to list your (internal) IP networks from where browsing<br>
# should be allowed<br>
<br>
acl localnet src 10.0.0.0/8
# RFC1918 possible internal network<br>
acl localnet src 172.16.0.0/12
# RFC1918 possible internal network<br>
acl localnet src 192.168.0.0/16
# RFC1918 possible internal network<br>
acl localnet src fc00::/7 # RFC 4193 local private
network range<br>
acl localnet src fe80::/10 # RFC 4291 link-local (directly
plugged)<br>
machines<br>
acl Windowsupdate dstdomain lemss.m287.local<br>
<br>
acl SSL_ports port 443<br>
acl Safe_ports port 80
# http<br>
acl Safe_ports port 21
# ftp<br>
acl Safe_ports port 443
# https<br>
acl Safe_ports port 70
# gopher<br>
acl Safe_ports port 210
# wais<br>
acl Safe_ports port 1025-65535
# unregistered ports<br>
acl Safe_ports port 280
# http-mgmt<br>
acl Safe_ports port 488
# gss-http<br>
acl Safe_ports port 591
# filemaker<br>
acl Safe_ports port 777
# multiling http<br>
acl CONNECT method CONNECT<br>
<br>
#<br>
# Recommended minimum Access Permission configuration:<br>
#<br>
<br>
# Only allow cachemgr access from localhost<br>
http_access allow localhost manager<br>
# http_access allow windowsudpate localhost<br>
http_access deny manager<br>
<br>
# Deny requests to certain unsafe ports<br>
http_access deny !Safe_ports<br>
<br>
# Deny CONNECT to other than secure SSL ports<br>
http_access deny CONNECT !SSL_ports<br>
<br>
# We strongly recommend the following be uncommented to protect innocent<br>
# web applications running on the proxy server who think the only<br>
# one who can access services on "localhost" is a local user<br>
#http_access deny to_localhost<br>
<br>
#<br>
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS<br>
#<br>
<br>
# Example rule allowing access from your local networks.<br>
# Adapt localnet in the ACL section to list your (internal) IP networks<br>
# from where browsing should be allowed<br>
http_access allow localnet<br>
http_access allow localhost<br>
http_access allow Windowsupdate<br>
<br>
# And finally deny all other access to this proxy<br>
http_access deny all<br>
<br>
# Limit number of days to keep logs<br>
# logfile_rotate 2<br>
<br>
# Squid normally listens to port 3128<br>
http_port 81<br>
<br>
# Delay parameters<br>
delay_pools 1<br>
delay_class 1 1<br>
delay_parameters 1 none -1/-1<br>
delay_access 1 allow localnet<br>
<br>
<br>
# Uncomment the line below to enable disk caching - path format is<br>
/cygdrive/<full path to cache folder>, i.e.<br>
cache_dir aufs F:\LEMSS-Content 10000 16 256<br>
cache_mem 2048 MB<br>
<br>
# Leave coredumps in the first cache dir<br>
coredump_dir C:\smart\Squid\var\cache\squid<br>
<br>
#debug_options All,1 33,2 28,9<br>
<br>
# Add any of your own refresh_pattern entries above these.<br>
# refresh_pattern -i<br>
lemss.m287.local/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200<br>
80% 129600 reload-into-ims<br>
refresh_pattern -i<br>
lemss.m287.local/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200<br>
80% 129600 reload-into-ims<br>
refresh_pattern ^ftp:
1440
20%
10080<br>
refresh_pattern ^gopher:
1440
0%
1440<br>
refresh_pattern -i (/cgi-bin/|\?) 0
0%
0<br>
refresh_pattern .
0
20%
4320<br>
<br>
dns_v4_first on<br>
<br>
dns_nameservers 10.1.19.203 10.1.19.204<br>
<br>
# pipeline_prefetch 2<br>
<br>
max_filedescriptors 3200<br>
<br>
range_offset_limit 2000 MB windowsupdate<br>
<br>
maximum_object_size 2000 MB<br>
collapsed_forwarding on<br>
<br>
quick_abort_min -1<br>
<br>
thats our squid.conf</font></tt><font size=2 face="sans-serif"><br>
</font>