<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#464646" bgcolor="#FFFFFF">
<font face="monospace">Thank you, you've enlightened me; <br>
I had the GlobalWhitelistDSTNet directive declared twice in two
different includes<br>
This meant that an identical Acl declared in two different places
would contradict each other on the same addresses and generate
mass warnings.</font><br>
<br>
<div class="moz-cite-prefix">On 02/10/2023 22:01, Alex Rousskov
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:a9b7800e-653f-4c84-8ce8-7188c389dccc@measurement-factory.com">
<br>
<blockquote type="cite">Since Squid 6.x we have this strange
behavior on acl dst
<br>
Many warnings is generated
<br>
<br>
2023/10/02 20:18:50| WARNING: You should probably remove
'64.34.72.226' from the ACL named 'GlobalWhitelistDSTNet'
<br>
2023/10/02 20:18:50| WARNING: (B) '64.34.72.226' is a subnetwork
of (A) '64.34.72.226'
<br>
2023/10/02 20:18:50| WARNING: because of this '64.34.72.226' is
ignored to keep splay tree searching predictable
<br>
</blockquote>
<br>
<blockquote type="cite">(B) '*64.34.72.226*' is a subnetwork of
(A) '*64.34.72.226*' --> Sure, this is the IP address.
<br>
</blockquote>
<br>
Is it possible that you have two 64.34.72.226 entries in that
GlobalWhitelistDSTNet ACL? Perhaps in another included
configuration file or something like that?
<br>
<br>
<br>
<blockquote type="cite">You should probably remove '64.34.72.226'
from the ACL named 'GlobalWhitelistDSTNet' --> Why this is
only the IP address in the acl ???
<br>
</blockquote>
<br>
Squid thinks that there is more than one copy of 64.34.72.226
address in GlobalWhitelistDSTNet ACL. It could be Squid bug, of
course. Please share a configuration that reproduces the issue or
a pointer to compressed "squid -N -X -d9 ..." output while
reproducing the problem.
<br>
<br>
<br>
<blockquote type="cite">
<blockquote type="cite">2023/10/02 20:20:09| FATAL: assertion
failed: debug.cc:606: "earlyMessages->size() < 1000"
<br>
Aborted
<br>
</blockquote>
</blockquote>
<br>
This assert is a side effect of the above ACL problem/bug - you
probably have many IPs in that ACL and the corresponding WARNINGs
exceed Squid hard-coded message accumulation limit. Now that we
know how a broken(*) configuration can produce so many early
cache.log messages, we should probably modify Squid to quit
without asserting, but let's focus on the root cause of your
problems -- those WARNING messages.
<br>
<br>
(*) I am not implying that _your_ configuration is broken.
<br>
<br>
<br>
Cheers,
<br>
<br>
Alex.
<br>
<br>
<br>
<blockquote type="cite">2023/10/02 20:18:50| WARNING: (B)
'64.34.72.230' is a subnetwork of (A) '64.34.72.230'
<br>
2023/10/02 20:18:50| WARNING: because of this '64.34.72.230' is
ignored to keep splay tree searching predictable
<br>
2023/10/02 20:18:50| WARNING: You should probably remove
'64.34.72.230' from the ACL named 'GlobalWhitelistDSTNet'
<br>
2023/10/02 20:18:50| WARNING: (B) '64.34.72.230' is a subnetwork
of (A) '64.34.72.230'
<br>
2023/10/02 20:18:50| WARNING: because of this '64.34.72.230' is
ignored to keep splay tree searching predictable
<br>
2023/10/02 20:18:50| WARNING: You should probably remove
'64.34.72.230' from the ACL named 'GlobalWhitelistDSTNet'
<br>
2023/10/02 20:18:50| WARNING: (B) '64.34.72.232' is a subnetwork
of (A) '64.34.72.232'
<br>
<br>
According to all warning, Squid won't start with this error
<br>
<br>
*2023/10/02 20:20:09| FATAL: assertion failed: debug.cc:606:
"earlyMessages->size() < 1000"**
<br>
**Aborted*
<br>
<br>
How to avoid this ??
<br>
<br>
-- <br>
David Touzeau - Artica Tech France
<br>
Development team, level 3 support
<br>
----------------------------------
<br>
P: +33 6 58 44 69 46
<br>
www:<a class="moz-txt-link-freetext" href="https://wiki.articatech.com">https://wiki.articatech.com</a>
<br>
www:<a class="moz-txt-link-freetext" href="http://articatech.net">http://articatech.net</a> <br>
<br>
_______________________________________________
<br>
squid-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.squid-cache.org/listinfo/squid-users">https://lists.squid-cache.org/listinfo/squid-users</a>
<br>
</blockquote>
<br>
_______________________________________________
<br>
squid-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.squid-cache.org/listinfo/squid-users">https://lists.squid-cache.org/listinfo/squid-users</a>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
David Touzeau - Artica Tech France
Development team, level 3 support
----------------------------------
P: +33 6 58 44 69 46
www: <a class="moz-txt-link-freetext" href="https://wiki.articatech.com">https://wiki.articatech.com</a>
www: <a class="moz-txt-link-freetext" href="http://articatech.net">http://articatech.net</a> </pre>
</body>
</html>