<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Hey David,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have just verified that the next guide works as expected:<o:p></o:p></p><p class=MsoNormal><a href="https://www.serverlab.ca/tutorials/linux/administration-linux/how-to-set-the-proxy-for-apt-for-ubuntu-18-04/">https://www.serverlab.ca/tutorials/linux/administration-linux/how-to-set-the-proxy-for-apt-for-ubuntu-18-04/</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>on Ubuntu 20.04 you can create the file:<o:p></o:p></p><p class=MsoNormal>/etc/apt/apt.conf<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And then add to it the next lines: (replace the domain and port to an ip and port or another domain and port if required)<o:p></o:p></p><p class=MsoNormal>Acquire::http::proxy "http://prox.srv.world:3128/";<br>Acquire::https::proxy "http://prox.srv.world:3128/";<o:p></o:p></p><p class=MsoNormal>##<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The above works as expected.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If for any reason what so ever you experience some issues you can try to add into the proxy hosts file a static record of:<o:p></o:p></p><p class=MsoNormal>202.158.214.106 mirror.aarnet.edu.au<o:p></o:p></p><p class=MsoNormal># verify the right host ipv4 address using host/dig/nslookup<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And then restart the squid proxy.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Try again and see if it works as expected.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>All The Bests,<o:p></o:p></p><p class=MsoNormal>Eliezer<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> squid-users <squid-users-bounces@lists.squid-cache.org> <b>On Behalf Of </b>David Mills<br><b>Sent:</b> Wednesday, July 7, 2021 2:26 AM<br><b>To:</b> squid-users@lists.squid-cache.org<br><b>Subject:</b> [squid-users] Ubuntu 20.04 "apt update" issues behind a VPN and Squid proxy<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>Hi,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We've got a collection of Ubuntu 18.04 boxes out in the field. They connect to an AWS OpenVPN VPN and use a Squid 3.5 AWS hosted Proxy. They work fine.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We have tried upgrading one to 20.04. Same setup. From the command line curl or wget can happily download an Ubuntu package from the Ubuntu Mirror site we use. But "apt update" gets lots of "IGN:" timeouts and errors.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The package we test curl with is <code><span style='font-size:10.0pt;color:#172B4D;background:#F4F5F7'><a href="https://mirror.aarnet.edu.au/ubuntu/pool/main/c/curl/curl_7.68.0-1ubuntu2.5_amd64.deb">https://mirror.aarnet.edu.au/ubuntu/pool/main/c/curl/curl_7.68.0-1ubuntu2.5_amd64.deb</a></span></code><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The Squid log shows a line the doesn't occur for the successful 18.04 "apt updates":<o:p></o:p></p></div><div><p class=MsoNormal><code><span style='font-size:10.0pt;color:#172B4D;background:#F4F5F7'>1625190959.233 81 10.0.11.191 TAG_NONE/200 0 CONNECT <a href="http://mirror.aarnet.edu.au:443">mirror.aarnet.edu.au:443</a> - HIER_DIRECT/2001:388:30bc:cafe::beef -</span></code><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The full output of an attempt to update is:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><p class=MsoNormal>Ign:1 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal InRelease <br>Ign:2 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-updates InRelease <br>Ign:3 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-backports InRelease <br>Ign:4 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-security InRelease <br>Err:5 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal Release <br> Could not wait for server fd - select (11: Resource temporarily unavailable) [IP: 10.0.11.82 3128]<br>Err:6 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-updates Release <br> Could not wait for server fd - select (11: Resource temporarily unavailable) [IP: 10.0.11.82 3128]<br>Err:7 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-backports Release <br> Could not wait for server fd - select (11: Resource temporarily unavailable) [IP: 10.0.11.82 3128]<br>Err:8 <a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-security Release <br> Could not wait for server fd - select (11: Resource temporarily unavailable) [IP: 10.0.1.26 3128]<br>Reading package lists... Done <br>N: Ignoring file 'microsoft-prod.list-keep' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension<br>E: The repository '<a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal Release' does not have a Release file.<br>N: Updating from such a repository can't be done securely, and is therefore disabled by default.<br>N: See apt-secure(8) manpage for repository creation and user configuration details.<br>E: The repository '<a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-updates Release' does not have a Release file.<br>N: Updating from such a repository can't be done securely, and is therefore disabled by default.<br>N: See apt-secure(8) manpage for repository creation and user configuration details.<br>E: The repository '<a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-backports Release' does not have a Release file.<br>N: Updating from such a repository can't be done securely, and is therefore disabled by default.<br>N: See apt-secure(8) manpage for repository creation and user configuration details.<br>E: The repository '<a href="https://mirror.aarnet.edu.au/ubuntu">https://mirror.aarnet.edu.au/ubuntu</a> focal-security Release' does not have a Release file.<br>N: Updating from such a repository can't be done securely, and is therefore disabled by default.<br>N: See apt-secure(8) manpage for repository creation and user configuration details.<o:p></o:p></p></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>While running, the line<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><p class=MsoNormal>0% [Connecting to HTTP proxy (<a href="http://vpn-proxy-d68aca8a8f7f81d6.elb.ap-southeast-2.amazonaws.com:3128">http://vpn-proxy-d68aca8a8f7f81d6.elb.ap-southeast-2.amazonaws.com:3128</a>)]<o:p></o:p></p></div></blockquote><div><p class=MsoNormal>appears often and hang for a while.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I've tried upping the squid logging and allowing all, but they didn't offer any additional information about the issue.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Any advice would be greatly appreciated.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><div><div><div><p class=MsoNormal>Regards,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td valign=top style='border:solid white 1.0pt;border-right:solid #4A86E8 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt;overflow:hidden'><p style='margin:0in'><span style='font-family:"Arial",sans-serif;color:black;border:none windowtext 1.0pt;padding:0in'><img border=0 width=167 height=130 style='width:1.7395in;height:1.3541in' id="_x0000_i1025" src="https://lh4.googleusercontent.com/PjzOtuo8wRwonOYtyjVEsTHphPFdwgM8H79UkQ5H--uLWS_Wje0pIvRFGgiiaYF8CohhfacA5LpIBIck7fEou91YR_e95GyEd53ubLzjKbgTVaqvhdESRKKiWZqDxUYAmOApJr47"></span><o:p></o:p></p></td><td valign=top style='border:solid white 1.0pt;border-left:none;padding:5.0pt 5.0pt 5.0pt 5.0pt;overflow:hidden'><p style='margin:0in'><b><span style='font-size:11.5pt;font-family:"Arial",sans-serif;color:#2E80B5'>David Mills</span></b><o:p></o:p></p><p style='margin:0in'><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:black'>Senior DevOps Engineer</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p style='mso-margin-top-alt:0in;margin-right:5.0pt;margin-bottom:5.0pt;margin-left:0in'><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#3388CC'> </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:black'>E: </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#2E80B5'><a href="mailto:david.mills@acusensus.com" target="_blank">david.mills@acusensus.com</a></span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:5.0pt;margin-bottom:5.0pt;margin-left:0in'><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#3388CC'> </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:black'>M:</span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#3388CC'> </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#2E80B5'>+61 411 513 404</span><o:p></o:p></p><p style='margin:0in'><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:black'> W:</span><a href="http://acusensus.com/" target="_blank"><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:black'> </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#1155CC'>acusensus.com</span></a><o:p></o:p></p></td></tr></table><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div></div></div></div></div></div><p class=MsoNormal><br><span style='font-size:10.0pt'>DISCLAIMER: Acusensus puts the privacy and security of its clients, its data and information at the core of everything we do. The information contained in this email (including attachments) is intended only for the use of the person(s) to whom it is addressed to, as it may be confidential and contain legally privileged information. If you have received this email in error, please delete all copies and notify the sender immediately. Any views or opinions presented are solely those of the author and do not necessarily represent the views of Acusensus Pty Ltd. Please consider the environment before printing this email.</span><o:p></o:p></p></div></body></html>