<div dir="auto">Ohh, thanks!!!! libdbd-mysql-perl was not installed.<div dir="auto">Work like a charm!!!</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El sáb., 4 de mar. de 2023 7:43 a.m., <<a href="mailto:squid-users-request@lists.squid-cache.org">squid-users-request@lists.squid-cache.org</a>> escribió:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send squid-users mailing list submissions to<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:squid-users-request@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users-request@lists.squid-cache.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:squid-users-owner@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users-owner@lists.squid-cache.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of squid-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Missing translation directories und 'errors' in squid 5.8<br>
(Amos Jeffries)<br>
2. Re: Missing translation directories und 'errors' in squid 5.8<br>
(Amos Jeffries)<br>
3. Re: Can't store log in mysql 8.0 database (Amos Jeffries)<br>
4. Re: Missing translation directories und 'errors' in squid 5.8<br>
(Matthias Fischer)<br>
5. Re: Understanding maximum outgoing HTTP CONNECT requests?<br>
(<a href="mailto:divan.whelk.0u@icloud.com" target="_blank" rel="noreferrer">divan.whelk.0u@icloud.com</a>)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 5 Mar 2023 01:15:48 +1300<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank" rel="noreferrer">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Missing translation directories und<br>
'errors' in squid 5.8<br>
Message-ID: <<a href="mailto:c84158f3-159d-6fe8-d947-9aea9f63ebd8@treenet.co.nz" target="_blank" rel="noreferrer">c84158f3-159d-6fe8-d947-9aea9f63ebd8@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
<br>
FYI, The missing files from 5.8 can be downloaded from here as a <br>
stand-alone package:<br>
? <<a href="http://www.squid-cache.org/Versions/langpack/" rel="noreferrer noreferrer" target="_blank">http://www.squid-cache.org/Versions/langpack/</a>><br>
<br>
Cheers<br>
Amos<br>
<br>
On 3/03/2023 7:22 pm, Avram-Teodor Berindeie wrote:<br>
> A solution if the error messages in English are OK is to set this <br>
> directive in squid.conf:<br>
> error_directory /<path to>/squid/share/errors/templates<br>
> For error messages in other languages, information in this link <br>
> <<a href="https://wiki.squid-cache.org/Translations" rel="noreferrer noreferrer" target="_blank">https://wiki.squid-cache.org/Translations</a>>.<br>
> This configuration options can also be used:<br>
> *--enable*/disable*-translation*<br>
> By default, Squid tries to present error and manual pages in a local <br>
> language. If we don't want this to happen, then we can use this option.<br>
> *--enable*/disable*-auto-locale*<br>
> Based on a client's request headers, Squid tries to automatically <br>
> provide localized error pages. We can use this option to disable <br>
> automatic localization. The error_directory tag in the Squid <br>
> configuration file must be configured if we use this option.<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sun, 5 Mar 2023 01:16:08 +1300<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank" rel="noreferrer">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Missing translation directories und<br>
'errors' in squid 5.8<br>
Message-ID: <<a href="mailto:3e134177-1ed1-431e-bfc0-fe2ba1d8b52d@treenet.co.nz" target="_blank" rel="noreferrer">3e134177-1ed1-431e-bfc0-fe2ba1d8b52d@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
Ouch, sorry about that.<br>
<br>
<br>
FYI, The missing files from 5.8 can be downloaded from here as a <br>
stand-alone package:<br>
? <<a href="http://www.squid-cache.org/Versions/langpack/" rel="noreferrer noreferrer" target="_blank">http://www.squid-cache.org/Versions/langpack/</a>><br>
<br>
Cheers<br>
Amos<br>
<br>
<br>
On 3/03/2023 6:40 am, Matthias Fischer wrote:<br>
> Hello,<br>
><br>
> I'm a bit puzzled - sorry if I just overlooked something, but...:<br>
><br>
> Since 'squid 5.8' there are no "translation directories" in the source<br>
> code anymore, only 'templates' and the usual scripts.<br>
><br>
> No 'errors/af', 'errors/ar', 'errors/az' containing<br>
> '\squid-5.8\errors\af\ERR_ACCESS_DENIED' (e.g.).<br>
><br>
> The TRANSLATORS are still listed but none of their files...<br>
><br>
> Did I miss something?<br>
><br>
> Regards,<br>
><br>
> Matthias<br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Sun, 5 Mar 2023 01:23:54 +1300<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank" rel="noreferrer">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Can't store log in mysql 8.0 database<br>
Message-ID: <<a href="mailto:3a1726b6-4ca7-bf33-bedc-fe32e3a9420e@treenet.co.nz" target="_blank" rel="noreferrer">3a1726b6-4ca7-bf33-bedc-fe32e3a9420e@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
On 4/03/2023 8:22 am, Francisco wrote:<br>
> Hi, I\m trying to store logs in a mysql server 8.0 database from squid <br>
> 5.7 in Debian 11.<br>
><br>
> My idea is store all logs in /var/log/squid/ dir, and logs from <br>
> specifics urls, domains and sites store in mysql database <br>
> ('access_log_internet' table) to restrict those users that overcuote <br>
> an specific amount of MB.<br>
><br>
><br>
> *The config:*<br>
> /access_log /var/log/squid/nav_basica-access.log squid dominios/<br>
> /access_log /var/log/squid/nav_basica-access.log squid dominios_parciales<br>
> /<br>
> /access_log /var/log/squid/nav_basica-access.log squid sitios<br>
> /<br>
> /access_log /var/log/squid/nav_basica-access.log squid dominio_cu/<br>
> /access_log /var/log/squid/internet-access.log squid !dominios <br>
> !dominios_parciales !sitios !dominio_cu/<br>
><br>
> /logfile_daemon /usr/lib/squid/log_db_daemon/<br>
> /access_log <br>
> daemon:/<a href="http://192.168.56.2:3306/squidmgr/access_log_internet/squidmgr/squidmgrsquid" rel="noreferrer noreferrer" target="_blank">192.168.56.2:3306/squidmgr/access_log_internet/squidmgr/squidmgrsquid</a> <br>
> <<a href="http://192.168.56.2:3306/squidmgr/access_log_internet/squidmgr/squidmgrsquid" rel="noreferrer noreferrer" target="_blank">http://192.168.56.2:3306/squidmgr/access_log_internet/squidmgr/squidmgrsquid</a>> <br>
> !dominios !dominios_parciales !sitios !dominio_cu/<br>
><br>
> when try start squid, it's fail:<br>
><br>
> /Dec 31 19:00:00 1969Use of uninitialized value $DBI::errstr in <br>
> concatenation (.) or string at /usr/lib/squid/log_db_daemon line 403.<br>
> Dec 31 19:00:00 1969Cannot connect to database: ?at <br>
> /usr/lib/squid/log_db_daemon line 403.<br>
> /<br>
<br>
What version of Perl do you have on this machine?<br>
<br>
Do you have both libdbd-mysql-perl and libdbi-perl packages installed?<br>
<br>
<br>
Cheers<br>
Amos<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Sat, 4 Mar 2023 13:34:23 +0100<br>
From: Matthias Fischer <<a href="mailto:matthias.fischer@ipfire.org" target="_blank" rel="noreferrer">matthias.fischer@ipfire.org</a>><br>
To: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank" rel="noreferrer">squid3@treenet.co.nz</a>>,<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Missing translation directories und<br>
'errors' in squid 5.8<br>
Message-ID: <<a href="mailto:e903ea55-88eb-ee66-70d1-9220d9d90bac@ipfire.org" target="_blank" rel="noreferrer">e903ea55-88eb-ee66-70d1-9220d9d90bac@ipfire.org</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
Hello,<br>
<br>
On 04.03.2023 13:15, Amos Jeffries wrote:<br>
> FYI, The missing files from 5.8 can be downloaded from here as a <br>
> stand-alone package:<br>
> ? <<a href="http://www.squid-cache.org/Versions/langpack/" rel="noreferrer noreferrer" target="_blank">http://www.squid-cache.org/Versions/langpack/</a>><br>
<br>
Yep. In the meantime ( ;-) ) I've found them. I was just a bit puzzled,<br>
in 5.7 these files were still included in the source code.<br>
<br>
> Cheers<br>
> Amos<br>
<br>
Many thanks!<br>
<br>
Best,<br>
Matthias<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Sat, 4 Mar 2023 12:42:53 +0000<br>
From: <a href="mailto:divan.whelk.0u@icloud.com" target="_blank" rel="noreferrer">divan.whelk.0u@icloud.com</a><br>
To: <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Understanding maximum outgoing HTTP CONNECT<br>
requests?<br>
Message-ID: <<a href="mailto:9C815592-A998-4908-842A-A98412D6613F@kontos-home.com" target="_blank" rel="noreferrer">9C815592-A998-4908-842A-A98412D6613F@kontos-home.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
<br>
Thank you for the prompt reply!<br>
<br>
> - Squid can be configured to receive on up to 64 ports.<br>
> Thus dst-port on **inbound** is 2^6.<br>
<br>
> outbound = N * 2^6 * 2^128 * 2^16 = N * 2^150<br>
<br>
Would that be 2^6 dst-port on outbound, rather than inbound (ignoring Alt-Svc)? Or am misunderstand the theoretical limit formulae after?<br>
<br>
> Thus total theoretical limit of simultaneous connections Squid can be juggling is N * 2^151.<br>
<br>
So, for example a single box HTTP CONNECT proxy might be listening on one IPv4 address and one IPv6 address, which would be making the outbound connections (and opening the TCP tunnel) and only able to make outbound connections to either port 80 or 443 (2^16 for each respective port, ignoring Alt-Svc). <br>
<br>
Whereas for incoming, listening on dst-port (3128) (2^16 incoming), with a theoretical limit of 2^32 IPv4 addresses or 2^128 IPv6 addresses (or do you use 2^128 including IPv4)?<br>
<br>
> Reality can be significantly different for any given installation, but is imposed by configuration choices and thus can be altered as needed.<br>
<br>
Understood, thanks! I think I?ve got a good idea now, with the clarifications.<br>
<br>
Alex<br>
<br>
> On 17 Feb 2023, at 20:18, Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank" rel="noreferrer">squid3@treenet.co.nz</a>> wrote:<br>
> <br>
> On 18/02/2023 12:14 am, divan.whelk.0u wrote:<br>
>> Hi there!<br>
>> <br>
>> I?m trying to understand what would the ?theoretical? maximum amount of outgoing connections with squid setup as a HTTP CONNECT forward proxy would be (hardware permitting)?<br>
> <br>
> As you likely know, each TCP/IP connection uses a 4-tuple identifier {src-IP, src-port, dst-IP, dst-port}.<br>
> <br>
> So at face value there is a protocol imposed cap of (2^128 * 2^16 * 2^128 * 2^16) = 2^288 connections.<br>
> <br>
> Being theoretical we have:<br>
> * ignored reserved IP ranges,<br>
> * ignored OS-specific ephemeral port reservations,<br>
> * assumed IPv6 availability, and<br>
> * assumed no access restrictions in Squid, network routing, nor firewall.<br>
> <br>
> The factors to consider are:<br>
> <br>
> - Squid machine can be assigned multiple IP's.<br>
> Thus src-IP on outbound and dst-IP on inbound are that N.<br>
> <br>
> - Squid can be configured to receive on up to 64 ports.<br>
> Thus dst-port on inbound is 2^6.<br>
> <br>
> - DNS can provide any number of IPs for any given server name.<br>
> Thus outbound dst-IP can be any 2^128 value.<br>
> <br>
> - modern websites use use Alt-Svc to spread across ports.<br>
> Thus outbound dst-port can be any 2^16 value.<br>
> <br>
> So for theoretical limit the math is:<br>
> <br>
> inbound = 2^128 * 2^16 * N * 2^16 = N * 2^160<br>
> <br>
> outbound = N * 2^6 * 2^128 * 2^16 = N * 2^150<br>
> <br>
> Inbound and outbound are normally independent, but CONNECT is a special case where they are pinned 1:1.<br>
> <br>
> Thus total theoretical limit of simultaneous connections Squid can be juggling is N * 2^151.<br>
> <br>
> Reality can be significantly different for any given installation, but is imposed by configuration choices and thus can be altered as needed.<br>
> <br>
> <br>
>> From the [squid-users] About bottlenecks (Max number of connections, etc.) thread, I saw mention of the following:<br>
>> <br>
>>> * The limit on number of connections any Squid can have attached is only limited by your configured FD limits and available server RAM. Squid uses ~64 KB per network socket for traffic state - which equates to around 2 GB of RAM just for I/O buffers at 20,000 concurrent client connections.<br>
>> I assume the same would not apply on outgoing connections, and that there would be a limit of 65,536 connections to a single IP, port pair? For example, if we had 1 million users making requests via HTTP CONNECT, only 65K of them would be able to access the same website at any one time?<br>
> <br>
> IIRC that quoted thread was discussing a Squid with more normal multiple-destination case hitting FD limits. The 64K port limitation you refer to is a special case contingent on the "single destination with single IP:port" criteria - which itself is rarely true for a popular website. It assumes configuration restriction imposing that criteria somehow.<br>
> <br>
> <br>
> Cheers<br>
> Amos<br>
> <br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of squid-users Digest, Vol 103, Issue 6<br>
*******************************************<br>
</blockquote></div>