<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">You have not provided enough information for us to know whether this is<br>a problem or testing mistake.<br><br>What is this unstated "minimal change" you made that made caching<br>suddenly stop working? </blockquote><div> The only change i have made is adding NOC ACL and uncommenting the cache_dir ufs.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">What exactly does "visiting the same website over and over again" mean?<br>what exact actions did you do?<br></blockquote><div>I expected when i visit a website for the time it will miss and after retrieving it that squid will cache it internally. if i visit the same website again, squid to read it from the local cache. i was visiting by adding a new tap using chrome or visiting from another browser like MS edge or IE. </div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Please do not do that "allow all".<br><br>For one thing it makes your NOC ACL pointless, *everybody* is allowed to<br>use your proxy for whatever they want to do.<br><br>If you did it to debug a caching problem, be aware that http_access has<br>nothing to do with cache. </blockquote><div>Thank you amos, I have changed to
http_access deny all instead of http_access allow all</div><div> Please ask me anything else i should share with so that you can help me. thank you. </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <br></blockquote><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> - Pressing refresh, Shift+reload, or CTL+refresh in a browser will<br>*force* a MISS - yet comes under the description you gave.<br> - some tools send headers to forbid cached contents being delivered by<br>default. So cannot be used for this kind of test without special options. <br></blockquote><div>So what do you recommend i do in order to check if squid is caching or not?</div><div> </div><div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Aug 3, 2019 at 3:02 PM <<a href="mailto:squid-users-request@lists.squid-cache.org">squid-users-request@lists.squid-cache.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send squid-users mailing list submissions to<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:squid-users-request@lists.squid-cache.org" target="_blank">squid-users-request@lists.squid-cache.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:squid-users-owner@lists.squid-cache.org" target="_blank">squid-users-owner@lists.squid-cache.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of squid-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: sending certificate chain from squid reverse proxy<br>
(Martin Hoffmann)<br>
2. Squid 3.5.27 not caching at all (Mohamed Ali Ahmed)<br>
3. Re: Squid 3.5.27 not caching at all (Amos Jeffries)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 2 Aug 2019 13:08:50 -0500 (CDT)<br>
From: Martin Hoffmann <<a href="mailto:m.hoffmann.bs@googlemail.com" target="_blank">m.hoffmann.bs@googlemail.com</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] sending certificate chain from squid<br>
reverse proxy<br>
Message-ID: <<a href="mailto:1564769330895-0.post@n4.nabble.com" target="_blank">1564769330895-0.post@n4.nabble.com</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Any ETA on this?<br>
<br>
This would really be a nice feature, since on debian/ubuntu squid comes with<br>
GnuTLS support, while OpenSSL Support means recompiling from source. So for<br>
me, it seems, intermediate certificates is the last thing missing to be able<br>
to use squid/GnuTLS instead of squid/OpenSSL.<br>
<br>
<br>
<br>
--<br>
Sent from: <a href="http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html" rel="noreferrer" target="_blank">http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html</a><br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sat, 3 Aug 2019 12:45:14 +0300<br>
From: Mohamed Ali Ahmed <<a href="mailto:mbile20@gmail.com" target="_blank">mbile20@gmail.com</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
Subject: [squid-users] Squid 3.5.27 not caching at all<br>
Message-ID:<br>
<CAK4=zavgzFG=yMv=+SCid3FB5VnNfXE5xYs5361r8PeE-c=<a href="mailto:y3Q@mail.gmail.com" target="_blank">y3Q@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hello everyone,<br>
I have set up Squid 3.5.27 on ubuntu 18.04 from the packages. I have made<br>
the minimal change but when i check the access.log i get tcp_miss 200 most<br>
of the websites even visiting the same website over and over again.<br>
<br>
I have searched online and i did not come across any which solves my<br>
problem.<br>
<br>
this is squid.conf file:<br>
<br>
root@squid:/etc/squid# sed 's/#.*//;s/^\s*$//;/^$/d' /etc/squid/squid.conf<br>
acl NOC src 154.73.26.5<br>
acl SSL_ports port 443<br>
acl Safe_ports port 80<br>
acl Safe_ports port 21<br>
acl Safe_ports port 443<br>
acl Safe_ports port 70<br>
acl Safe_ports port 210<br>
acl Safe_ports port 1025-65535<br>
acl Safe_ports port 280<br>
acl Safe_ports port 488<br>
acl Safe_ports port 591<br>
acl Safe_ports port 777<br>
acl CONNECT method CONNECT<br>
http_access deny !Safe_ports<br>
http_access deny CONNECT !SSL_ports<br>
http_access allow localhost manager<br>
http_access deny manager<br>
http_access allow localhost NOC<br>
http_access allow all<br>
http_port 3128<br>
cache_dir ufs /var/spool/squid 100 16 256<br>
coredump_dir /var/spool/squid<br>
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 3600 90% 43200<br>
refresh_pattern ^ftp: 1440 20% 10080<br>
refresh_pattern ^gopher: 1440 0% 1440<br>
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0<br>
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880<br>
refresh_pattern . 0 20% 4320<br>
root@squid:/etc/squid#<br>
<br>
here's access.log file:<br>
<br>
1564825166.134 426 154.73.26.5 TCP_MISS/200 10644 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js</a><br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> application/javascript<br>
1564825166.142 436 154.73.26.5 TCP_MISS/200 8613 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js</a><br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> application/javascript<br>
1564825166.150 440 154.73.26.5 TCP_MISS/200 8771 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js</a><br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> application/javascript<br>
1564825166.156 450 154.73.26.5 TCP_MISS/200 2892 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js</a><br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> application/javascript<br>
1564825166.804 454 154.73.26.5 TCP_MISS/200 7970 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff</a>?<br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> font/woff<br>
1564825166.821 437 154.73.26.5 TCP_MISS/200 2982 GET<br>
<a href="http://somaliren.org/wp-content/plugins/revslider/public/assets/assets/loader.gif" rel="noreferrer" target="_blank">http://somaliren.org/wp-content/plugins/revslider/public/assets/assets/loader.gif</a><br>
- HIER_DIRECT/<a href="http://192.185.31.191" rel="noreferrer" target="_blank">192.185.31.191</a> image/gif<br>
<br>
<br>
Here's cach.log file:<br>
<br>
root@squid:/etc/squid# tail /var/log/squid/cache.log<br>
2019/08/03 12:05:00 kid1| 0 Objects expired.<br>
2019/08/03 12:05:00 kid1| 0 Objects cancelled.<br>
2019/08/03 12:05:00 kid1| 0 Duplicate URLs purged.<br>
2019/08/03 12:05:00 kid1| 0 Swapfile clashes avoided.<br>
2019/08/03 12:05:00 kid1| Took 0.10 seconds ( 0.00 objects/sec).<br>
2019/08/03 12:05:00 kid1| Beginning Validation Procedure<br>
2019/08/03 12:05:00 kid1| Completed Validation Procedure<br>
2019/08/03 12:05:00 kid1| Validated 0 Entries<br>
2019/08/03 12:05:00 kid1| store_swap_size = 0.00 KB<br>
2019/08/03 12:05:01 kid1| storeLateRelease: released 0 objects<br>
<br>
Any help would be appreciated.<br>
<br>
thanks,<br>
Mohamed<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20190803/28c6e860/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.squid-cache.org/pipermail/squid-users/attachments/20190803/28c6e860/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Sat, 3 Aug 2019 22:36:28 +1200<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Squid 3.5.27 not caching at all<br>
Message-ID: <<a href="mailto:1294aefe-7fb1-e096-3adb-511ccdc6f9be@treenet.co.nz" target="_blank">1294aefe-7fb1-e096-3adb-511ccdc6f9be@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
On 3/08/19 9:45 pm, Mohamed Ali Ahmed wrote:<br>
> Hello everyone,<br>
> I have set up Squid 3.5.27 on ubuntu 18.04 from the packages. I have<br>
> made the minimal change but when i check the access.log i get tcp_miss<br>
> 200 most of the websites even visiting the same website over and over again.<br>
> <br>
<br>
You have not provided enough information for us to know whether this is<br>
a problem or testing mistake.<br>
<br>
What is this unstated "minimal change" you made that made caching<br>
suddenly stop working?<br>
<br>
What exactly does "visiting the same website over and over again" mean?<br>
what exact actions did you do?<br>
- Pressing refresh, Shift+reload, or CTL+refresh in a browser will<br>
*force* a MISS - yet comes under the description you gave.<br>
- some tools send headers to forbid cached contents being delivered by<br>
default. So cannot be used for this kind of test without special options.<br>
<br>
<br>
The more specific details you can give, the better anyone help can be.<br>
<br>
<br>
> I have searched online and i did not come across any which solves my<br>
> problem. <br>
> <br>
> this is squid.conf file:<br>
> <br>
> root@squid:/etc/squid# sed 's/#.*//;s/^\s*$//;/^$/d' /etc/squid/squid.conf<br>
> acl NOC src 154.73.26.5<br>
> acl SSL_ports port 443<br>
> acl Safe_ports port 80<br>
> acl Safe_ports port 21<br>
> acl Safe_ports port 443<br>
> acl Safe_ports port 70<br>
> acl Safe_ports port 210<br>
> acl Safe_ports port 1025-65535<br>
> acl Safe_ports port 280<br>
> acl Safe_ports port 488<br>
> acl Safe_ports port 591<br>
> acl Safe_ports port 777<br>
> acl CONNECT method CONNECT<br>
> http_access deny !Safe_ports<br>
> http_access deny CONNECT !SSL_ports<br>
> http_access allow localhost manager<br>
> http_access deny manager<br>
> http_access allow localhost NOC<br>
> http_access allow all<br>
<br>
Please do not do that "allow all".<br>
<br>
For one thing it makes your NOC ACL pointless, *everybody* is allowed to<br>
use your proxy for whatever they want to do.<br>
<br>
If you did it to debug a caching problem, be aware that http_access has<br>
nothing to do with cache.<br>
<br>
<br>
Amos<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of squid-users Digest, Vol 60, Issue 4<br>
******************************************<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><br></div><div><br></div><div>Mohamed Ali Ahmed (Bile)</div><div>Head of Systems<br><div>Somali Research & Education Network (SomaliREN)</div><div>+252 615 567671<div>Skype: bilesuper</div><div>Web: <a href="http://www.somaliren.org/" style="color:rgb(17,85,204)" target="_blank">http://www.somaliren.org</a></div></div></div></div></div></div>