<div dir="ltr"><div>OK, so...we have prepared to make some deeper debug on this issue but now it disappeared (for now).</div><div>We are almost sure that the problem is on the upstream side (DNS or SF Cloud Provider) - not Squid side. <br></div><div><br></div><div>So thank you for your help.</div><div><br></div><div>Cheers,</div><div>Maciek Leks<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">pt., 17 lut 2023 o 19:55 Alex Rousskov <<a href="mailto:rousskov@measurement-factory.com">rousskov@measurement-factory.com</a>> napisał(a):<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 2/17/23 13:24, Maciej Leks wrote:<br>
> I understand your last question but it's hard me to answer clearly -<br>
> yes/no.<br>
<br>
Yes, it is a difficult question to answer. Logging DNS traffic with <br>
tcpdump might help, but it does require some non-trivial work to <br>
correlate everything. For now, without that or similar additional <br>
information, it is easy for us to assume that you are just seeing the <br>
effects of DNS responses without IP addresses.<br>
<br>
There is another way to confirm or reject a bug claim. Share a <br>
compressed ALL,9 cache.log while reproducing the problem with as few <br>
transactions as possible (privately if needed).<br>
<a href="https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction" rel="noreferrer" target="_blank">https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction</a><br>
<br>
<br>
> Instead of this let me show you this log:<br>
<br>
> I suppose the A/AAAA records should already be in the DNS, but the<br>
> last resort squid gave up.<br>
<br>
Why do you think that the IP addresses should already be (or appear) in <br>
the parent Squid IP cache during these logged transactions?<br>
<br>
<br>
Cheers,<br>
<br>
Alex.<br>
<br>
<br>
> 17/Feb/2023:17:16:21 +0100 1676650581.827 103 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:22 +0100 1676650582.297 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:22 +0100 1676650582.893 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:23 +0100 1676650583.625 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:23 +0100 1676650583.711 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:25 +0100 1676650585.073 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:25 +0100 1676650585.799 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:25 +0100 1676650585.882 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:26 +0100 1676650586.258 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:26 +0100 1676650586.995 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:28 +0100 1676650588.468 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:29 +0100 1676650589.159 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:29 +0100 1676650589.560 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> 17/Feb/2023:17:16:30 +0100 1676650590.319 0 100.121.11.70<br>
> 100.121.11.70 NONE_NONE/500 0 CONNECT<br>
> <a href="http://scala-module-5515.scratch.lightning.force.com:443" rel="noreferrer" target="_blank">scala-module-5515.scratch.lightning.force.com:443</a> - HIER_NONE/- -<br>
> <br>
> This is the last resort parent squid and the 100.121.11.70 is our<br>
> downstream squid (child). I understand it as follows, thanks to<br>
> connect_retries set to 10 (here we have more than 10 tries) try to<br>
> connect.<br>
<br>
<br>
<br>
> pt., 17 lut 2023 o 17:46 Alex Rousskov<br>
> <<a href="mailto:rousskov@measurement-factory.com" target="_blank">rousskov@measurement-factory.com</a>> napisał(a):<br>
>><br>
>> On 2/17/23 09:31, Maciej Leks wrote:<br>
>><br>
>>> We have being facing the 500 error codes in our squids (v5.7) when it<br>
>>> comes to communicate with Salesforce DNS for ephemeral hosts<br>
>><br>
>>> A <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>. 30s 85.222.154.211<br>
>>> A <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>. 30s 160.8.252.83<br>
>>> A <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>. 30s 85.222.152.83<br>
>><br>
>> 30s TTLs will naturally limit the time Squid can cache these IPs for.<br>
>><br>
>><br>
>>> From time to time DNS answers only sending SOA record (no A,AAAA records)<br>
>><br>
>> Squid will fail to forward traffic if Squid does not have the<br>
>> destination IP address cached and its new DNS lookup returns no IPv4 or<br>
>> IPv6 records. Moreover, I am not 100% sure -- needs checking/testing --<br>
>> but Squid might cache that "negative" no-IPs result (see<br>
>> negative_dns_ttl that defaults to 60 seconds).<br>
>><br>
>> Do all 500 error cases correspond to DNS answers without IPs? In other<br>
>> words, is there a 500 error case after a DNS answer with IPs (within 29<br>
>> seconds from each other)?<br>
>><br>
>> HTH,<br>
>><br>
>> Alex.<br>
>> P.S. Sorry for not answering your questions below directly. I do not<br>
>> have the time to document what Squid debugging logs mean, and I<br>
>> recommend sharing them without analysis (by non-developers).<br>
>><br>
>><br>
>>> dig:<br>
>>> IP address of <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a> is<br>
>>> <a href="http://cs128.salesforce.com" rel="noreferrer" target="_blank">cs128.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>.<br>
>>> 160.8.255.83<br>
>>> 160.8.249.83<br>
>>> 85.222.154.211<br>
>>> Failed to resolve <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a><br>
>>> Failed to resolve <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a><br>
>>> Failed to resolve <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a><br>
>>> Failed to resolve <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a><br>
>>> IP address of <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a> is<br>
>>> <a href="http://cs128.salesforce.com" rel="noreferrer" target="_blank">cs128.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>.<br>
>>> 85.222.154.211<br>
>>> 160.8.255.83<br>
>>> 160.8.249.83<br>
>>> IP address of <a href="http://sagittarius-oatmilk-722.scratch.my.salesforce.com" rel="noreferrer" target="_blank">sagittarius-oatmilk-722.scratch.my.salesforce.com</a> is<br>
>>> <a href="http://cs128.salesforce.com" rel="noreferrer" target="_blank">cs128.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.salesforce.com</a>.<br>
>>> <a href="http://cs128-fra.fra.r.salesforce.com" rel="noreferrer" target="_blank">cs128-fra.fra.r.salesforce.com</a>.<br>
>>> 160.8.253.83<br>
>>><br>
>>> Squid outputs then:<br>
>>> 16/Feb/2023:13:45:54 +0100 1676551554.420 107 100.113.24.84<br>
>>> 100.113.24.84 NONE_NONE/500 0 CONNECT<br>
>>> <a href="http://canal-trailblazer-1066.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">canal-trailblazer-1066.scratch.my.salesforce.com:443</a> - HIER_NONE/- - -<br>
>>> - "/CN=<a href="http://gitlab-executor-stg.navio-services.opl-gcp.int" rel="noreferrer" target="_blank">gitlab-executor-stg.navio-services.opl-gcp.int</a>"<br>
>>> 16/Feb/2023:13:51:55 +0100 1676551915.973 82 100.113.25.178<br>
>>> 100.113.25.178 NONE_NONE/500 0 CONNECT<br>
>>> <a href="http://pumpkinspice-pisces-6588.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">pumpkinspice-pisces-6588.scratch.my.salesforce.com:443</a> - HIER_NONE/- -<br>
>>> - - "/CN=<a href="http://gitlab-executor-stg.navio-services.opl-gcp.int" rel="noreferrer" target="_blank">gitlab-executor-stg.navio-services.opl-gcp.int</a>"<br>
>>> 16/Feb/2023:13:52:44 +0100 1676551964.285 95 100.113.24.84<br>
>>> 100.113.24.84 NONE_NONE/500 0 CONNECT<br>
>>> <a href="http://trailblazer-builder-1043.scratch.file.force.com:443" rel="noreferrer" target="_blank">trailblazer-builder-1043.scratch.file.force.com:443</a> - HIER_NONE/- - -<br>
>>> Mozilla/5.0%20(X11;%20Linux%20x86_64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20HeadlessChrome/109.0.5414.74%20Safari/537.36<br>
>>> "/CN=<a href="http://gitlab-executor-stg.navio-services.opl-gcp.int" rel="noreferrer" target="_blank">gitlab-executor-stg.navio-services.opl-gcp.int</a>"<br>
>>> 16/Feb/2023:13:56:11 +0100 1676552171.392 43 100.121.10.183<br>
>>> 100.121.10.183 NONE_NONE/500 0 CONNECT<br>
>>> <a href="http://pistachio-vente-806.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">pistachio-vente-806.scratch.my.salesforce.com:443</a> - HIER_NONE/- - - -<br>
>>> "/CN=<a href="http://gitlab-executor-stg.navio-services.opl-gcp.int" rel="noreferrer" target="_blank">gitlab-executor-stg.navio-services.opl-gcp.int</a>"<br>
>>><br>
>>><br>
>>> Child squids get then (the same situation but different case):<br>
>>> 17/Feb/2023:13:18:49 +0000 1676639929.989 88 100.121.10.104<br>
>>> TCP_TUNNEL/500 0 CONNECT<br>
>>> <a href="http://beans-goldengate-9524.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">beans-goldengate-9524.scratch.my.salesforce.com:443</a> -<br>
>>> ANY_OLD_PARENT/<a href="http://100.112.36.14" rel="noreferrer" target="_blank">100.112.36.14</a> -<br>
>>><br>
>>> Such a situation but not the same case from squid internals point of<br>
>>> view I list below:<br>
>>> 74,5| RequestParser.cc(377) doParse: request-line: retval 1:<br>
>>> line={266, data='CONNECT<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a> HTTP/1.1<br>
>>> Host: <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.223 kid1| 74,5| RequestParser.cc(379) doParse:<br>
>>> request-line: url: <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.223 kid1| 74,5| Parser.cc(192) grabMimeBlock: mime<br>
>>> header (0-196) {Host:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> CONNECT <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a> HTTP/1.1<br>
>>> Host: <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> Host: <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.223 kid1| 23,3| Uri.cc(441) parse: Split URL<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a>' into proto='',<br>
>>> host='<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>', port='443',<br>
>>> path=''<br>
>>> 2023/02/15 15:44:24.223 kid1| 14,3| Address.cc(389) lookupHostIP:<br>
>>> Given Non-IP '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>': Name<br>
>>> or service not known<br>
>>> 2023/02/15 15:44:24.223 kid1| 33,5| Http1Server.cc(193)<br>
>>> buildHttpRequest: normalize 1 Host header using<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.224 kid1| 85,3| client_side_request.cc(637)<br>
>>> hostHeaderVerify: validate<br>
>>> host=<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>, port=443,<br>
>>> portStr=443<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,3| ipcache.cc(722)<br>
>>> ipcache_gethostbyname: ipcache_gethostbyname:<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>', flags=1<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,3| ipcache.cc(310) ipcacheRelease:<br>
>>> ipcacheRelease: Releasing entry for<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,3| Address.cc(389) lookupHostIP:<br>
>>> Given Non-IP '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>': Name<br>
>>> or service not known<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,4| ipcache.cc(600)<br>
>>> ipcache_nbgethostbyname:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.224 kid1| 14,3| Address.cc(389) lookupHostIP:<br>
>>> Given Non-IP '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>': Name<br>
>>> or service not known<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,5| ipcache.cc(660)<br>
>>> ipcache_nbgethostbyname_: ipcache_nbgethostbyname: MISS for<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.224 kid1| 78,3| dns_internal.cc(1788) idnsALookup:<br>
>>> idnsALookup: buf is 65 bytes for<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>, id = 0x9c4<br>
>>> 2023/02/15 15:44:24.224 kid1| 78,3| dns_internal.cc(1724)<br>
>>> idnsSendSlaveAAAAQuery: buf is 65 bytes for<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>, id = 0x5b5e<br>
>>> 2023/02/15 15:44:24.224 kid1| 28,3| DestinationIp.cc(78) match: can't<br>
>>> yet compare 'to_localhost' ACL for<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.224 kid1| 14,4| ipcache.cc(600)<br>
>>> ipcache_nbgethostbyname:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.224 kid1| 14,3| Address.cc(389) lookupHostIP:<br>
>>> Given Non-IP '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>': Name<br>
>>> or service not known<br>
>>> 2023/02/15 15:44:24.224 kid1| 14,5| ipcache.cc(660)<br>
>>> ipcache_nbgethostbyname_: ipcache_nbgethostbyname: MISS for<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.247 kid1| 14,3| ipcache.cc(456) latestError: DNS<br>
>>> error while resolving <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>:<br>
>>> No DNS records<br>
>>> 2023/02/15 15:44:24.248 kid1| 14,3| ipcache.cc(456) latestError: DNS<br>
>>> error while resolving <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>:<br>
>>> No DNS records<br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(477) ipcacheParse: 3<br>
>>> answers for <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(576)<br>
>>> ipcacheHandleReply: done with<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>: [no cached IPs]<br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(477) ipcacheParse: 3<br>
>>> answers for <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(576)<br>
>>> ipcacheHandleReply: done with<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>: [no cached IPs]<br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(310) ipcacheRelease:<br>
>>> ipcacheRelease: Releasing entry for<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.282 kid1| 14,3| ipcache.cc(722)<br>
>>> ipcache_gethostbyname: ipcache_gethostbyname:<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>', flags=1<br>
>>> 2023/02/15 15:44:24.282 kid1| 28,3| DomainData.cc(110) match:<br>
>>> aclMatchDomainList: checking<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.282 kid1| 28,3| DomainData.cc(115) match:<br>
>>> aclMatchDomainList: '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> NOT found<br>
>>> 2023/02/15 15:44:24.283 kid1| 28,3| DomainData.cc(110) match:<br>
>>> aclMatchDomainList: checking<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.283 kid1| 28,3| DomainData.cc(115) match:<br>
>>> aclMatchDomainList: '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> found<br>
>>> 2023/02/15 15:44:24.283 kid1| 85,2| client_side_request.cc(745)<br>
>>> clientAccessCheckDone: The request CONNECT<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a> is ALLOWED; last<br>
>>> ACL checked: gitlab-executor-stg-dst<br>
>>> 2023/02/15 15:44:24.284 kid1| 85,2| client_side_request.cc(745)<br>
>>> clientAccessCheckDone: The request CONNECT<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a> is ALLOWED; last<br>
>>> ACL checked: gitlab-executor-stg-dst<br>
>>> 2023/02/15 15:44:24.284 kid1| 85,4| client_side_request.cc(1514)<br>
>>> processRequest: CONNECT<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 26,3| tunnel.cc(1140) tunnelStart:<br>
>>> CONNECT <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a> HTTP/1.1<br>
>>> 2023/02/15 15:44:24.284 kid1| 44,3| peer_select.cc(612) selectMore:<br>
>>> CONNECT <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 44,3| peer_select.cc(1098) addSelection:<br>
>>> adding HIER_DIRECT#<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 44,2| peer_select.cc(460)<br>
>>> resolveSelected: Find IP destination for:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a>' via<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 14,4| ipcache.cc(607) nbgethostbyname:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 14,3| Address.cc(389) lookupHostIP:<br>
>>> Given Non-IP '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>': Name<br>
>>> or service not known<br>
>>> 2023/02/15 15:44:24.284 kid1| 14,4| ipcache.cc(647)<br>
>>> ipcache_nbgethostbyname_: ipcache_nbgethostbyname: HIT for<br>
>>> '<a href="http://baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com</a>'<br>
>>> 2023/02/15 15:44:24.284 kid1| 44,2| peer_select.cc(479)<br>
>>> resolveSelected: PeerSelector4664913 found all 0 destinations for<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.284 kid1| 4,3| errorpage.cc(1249)<br>
>>> compileLegacyCode: %U --><br>
>>> '<a href="https://baybridge-module-8155.scratch.my.salesforce.com/*" rel="noreferrer" target="_blank">https://baybridge-module-8155.scratch.my.salesforce.com/*</a>'<br>
>>> 2023/02/15 15:44:24.284 kid1| 4,3| errorpage.cc(1249)<br>
>>> compileLegacyCode: %U --><br>
>>> '<a href="https://baybridge-module-8155.scratch.my.salesforce.com/*" rel="noreferrer" target="_blank">https://baybridge-module-8155.scratch.my.salesforce.com/*</a>'<br>
>>> 2023/02/15 15:44:24.284 kid1| 4,3| errorpage.cc(1249)<br>
>>> compileLegacyCode: %W --><br>
>>> '?subject=CacheErrorInfo%20-%20ERR_CANNOT_FORWARD&body=CacheHost%3A%20opl-egress-proxy-vm-31vr%0D%0AErrPage%3A%20ERR_CANNOT_FORWARD%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Wed,%2015%20Feb%202023%2014%3A44%3A24%20GMT%0D%0A%0D%0AClientIP%3A%20100.121.10.148%0D%0A%0D%0AHTTP%20Request%3A%0D%0ACONNECT%20%20HTTP%2F1.1%0AVia%3A%201.1%20gitlab-proxy-6d445dbd8d-mxtqv%20(squid%2F5.7)%0D%0AX-Forwarded-For%3A%20100.113.24.224%0D%0ACache-Control%3A%20max-age%3D259200%0D%0AConnection%3A%20close%0D%0AHost%3A%<a href="http://20baybridge-module-8155.scratch.my.salesforce.com" rel="noreferrer" target="_blank">20baybridge-module-8155.scratch.my.salesforce.com</a>%3A443%0D%0A%0D%0A%0D%0A'<br>
>>> 2023/02/15 15:44:24.286 kid1| 33,3| client_side_request.cc(272)<br>
>>> ~ClientHttpRequest: httpRequestFree:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>> 2023/02/15 15:44:24.286 kid1| 33,5| client_side.cc(385) logRequest:<br>
>>> logging half-baked transaction:<br>
>>> <a href="http://baybridge-module-8155.scratch.my.salesforce.com:443" rel="noreferrer" target="_blank">baybridge-module-8155.scratch.my.salesforce.com:443</a><br>
>>><br>
>>> Our parent proxy settings for DNS:<br>
>>> negative_dns_ttl 3 seconds #if we set 1s it behaves the same<br>
>>> dns_nameservers 8.8.8.8 1.1.1.1<br>
>>><br>
>>> The question is:<br>
>>> If you carefully look at the debug log you see:<br>
>>> a. I(Squid) can't find IP for the name<br>
>>> b. I've got 3 IPs from DNS<br>
>>> c. OK, so I've got IP<br>
>>> d. ...Oh, I cannot find any IP<br>
>>> e. I can't find any destinations (what's that?)<br>
>>> f. I'm outputing an error<br>
>>><br>
>>> So, do you think it's ok or there is a bug?<br>
>>><br>
>>> Rgds,<br>
>>> Maciej Leks<br>
>>> _______________________________________________<br>
>>> squid-users mailing list<br>
>>> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
>>> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
>> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div>