<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"><head><!--[if gte mso 9]><xml><o:OfficeDocumentSettings><o:AllowPNG/><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings></xml><![endif]--></head><body><div class="ydp68f2e005yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div><span style="color: rgb(38, 40, 42);">On Wednesday, January 10, 2024 at 11:09:48 AM EST, Alex Rousskov <rousskov@measurement-factory.com> wrote:</span><br></div></div><div id="ydp3ea7061eyahoo_quoted_5780404213" class="ydp3ea7061eyahoo_quoted"><div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div><br></div>
<div><br></div>
<div><div dir="ltr">On 2024-01-10 09:21, Arun Kumar wrote:<br clear="none">>> i) Retry seems to fetch one chunk of the response and not the complete.<br clear="none">>> ii) Enabling sslbump and turning ICAP off, not helping.<br clear="none">>> iii) gcc version is 7.3.1 (Red Hat 7.3.1-17)<br clear="none"><br clear="none">>GCC v7 has insufficient C++17 support. I recommend installing GCC v9 or <br clear="none">better and then trying with Squid v6.6 or newer.<br clear="none"><br>Arun: Compiled Squid 6.6 with gcc 11.4 and still seeing the same issue.</div><div dir="ltr"><br clear="none">> FWIW, if the problem persists in Squid v6, sharing debugging logs would <br clear="none">be the next recommended step.<br clear="none"><br clear="none">Arun: <i>debug_options ALL,6 </i>giving too much log. Any particular option we can use to debug this issue?<br><br clear="none">>HTH,<br clear="none"><br clear="none">>Alex.<br clear="none"><br clear="none"><br clear="none">> Also want to point out that, squid connects to another non-squid proxy <br clear="none">> to reach internet.<br clear="none">> /cache_peer <proxy_url> parent <port> 0 no-query default/<br clear="none">> <br clear="none">> On Tuesday, January 9, 2024 at 02:18:14 PM EST, Alex Rousskov wrote:<br clear="none">> <br clear="none">> <br clear="none">> On 2024-01-09 11:51, Zhang, Jinshu wrote:<br clear="none">> <br clear="none">> > Client got below response headers and body. Masked few details.<br clear="none">> <br clear="none">> Thank you.<br clear="none">> <br clear="none">> <br clear="none">> > Retry seems to fetch data remaining.<br clear="none">> <br clear="none">> I would expect a successful retry to fetch the entire response, not just<br clear="none">> the remaining bytes, but perhaps that is what you meant. Thank you for<br clear="none">> sharing this info.<br clear="none">> <br clear="none">> <br clear="none">> > Want to point out that removing sslbump everything is working fine,<br clear="none">> > but we wanted to keep it for ICAP scanning.<br clear="none">> <br clear="none">> What if you keep SslBump enabled but disable any ICAP analysis<br clear="none">> ("icap_enable off")? This test may tell us if the problem is between<br clear="none">> Squid and the origin server or Squid and the ICAP service...<br clear="none">> <br clear="none">> <br clear="none">> > We tried compiling 6.x in Amazon linux, using latest gcc, but facing <br clear="none">> similar error - <br clear="none">> <a shape="rect" href="https://lists.squid-cache.org/pipermail/squid-users/2023-July/026016.html" rel="nofollow" target="_blank">https://lists.squid-cache.org/pipermail/squid-users/2023-July/026016.html</a> <<a shape="rect" href="https://lists.squid-cache.org/pipermail/squid-users/2023-July/026016.html" rel="nofollow" target="_blank" class="enhancr_card_5326275312">[squid-users] compile error in squid v6.1</a>><br clear="none">> <br clear="none">> What is the "latest gcc" version in your environment? I suspect it is<br clear="none">> not the latest GCC version available to folks running Amazon Linux, but<br clear="none">> you may need to install some packages to get a more recent GCC version.<br clear="none">> Unfortunately, I cannot give specific instructions for Amazon Linux<br clear="none">> right now.<br clear="none">> <br clear="none">> <br clear="none">> HTH,<br clear="none">> <br clear="none">> Alex.<br clear="none">> <br clear="none">> <br clear="none">> > HTTP/1.1 200 OK<br clear="none">> > Date: Tue, 09 Jan 2024 15:41:33 GMT<br clear="none">> > Server: Apache/mod_perl/2.0.10 Perl<br clear="none">> > Content-Type: application/download<br clear="none">> > X-Cache: MISS from ip-x-y-z<br clear="none">> > Transfer-Encoding: chunked<br clear="none">> > Via: xxx (ICAP)<br clear="none">> > Connection: keep-alive<br clear="none">> ><br clear="none">> > 1000<br clear="none">> > File-Id: xyz.zip<br clear="none">> > Local-Path: x/y/z.txt<br clear="none">> > Content-Size: 2967<br clear="none">> > < binary content ><br clear="none">> ><br clear="none">> ><br clear="none">> > Access log(1st attempt):<br clear="none">> > 1704814893.695 138 x.y.0.2 NONE_NONE/200 0 CONNECT a.b.com:443 - <br clear="none">> FIRSTUP_PARENT/10.x.y.z -<br clear="none">> > 1704814900.491 6779 172.17.0.2 TCP_MISS/200 138996535 POST <br clear="none">> <a shape="rect" href="https://a.b.com/xyz" rel="nofollow" target="_blank">https://a.b.com/xyz</a> <<a shape="rect" href="https://a.b.com/xyz" rel="nofollow" target="_blank">https://a.b.com/xyz</a>> - FIRSTUP_PARENT/10.x.y.z <br clear="none">> application/download<br clear="none">> ><br clear="none">> > Retry after 5 mins:<br clear="none">> > 1704815201.530 189 x.y.0.2 NONE_NONE/200 0 CONNECT a.b.com:443 - <br clear="none">> FIRSTUP_PARENT/10.x.y.z -<br clear="none">> > 1704815208.438 6896 x.y.0.2 TCP_MISS/200 138967930 POST <br clear="none">> <a shape="rect" href="https://a.b.com/xyz" rel="nofollow" target="_blank">https://a.b.com/xyz</a> <<a shape="rect" href="https://a.b.com/xyz" rel="nofollow" target="_blank">https://a.b.com/xyz</a>> - FIRSTUP_PARENT/10.x.y.z <br clear="none">> application/download<br clear="none">> ><br clear="none">> > Jinshu Zhang<br clear="none">> ><br clear="none">> ><br clear="none">> > Fannie Mae Confidential<br clear="none">> > -----Original Message-----<br clear="none">> > From: squid-users <<a shape="rect" href="mailto:squid-users-bounces@lists.squid-cache.org" rel="nofollow" target="_blank">squid-users-bounces@lists.squid-cache.org</a> <br clear="none">> <mailto:squid-users-bounces@lists.squid-cache.org>> On Behalf Of Alex <br clear="none">> Rousskov<br clear="none">> > Sent: Tuesday, January 9, 2024 9:53 AM<br clear="none">> > To: <a shape="rect" href="mailto:squid-users@lists.squid-cache.org" rel="nofollow" target="_blank">squid-users@lists.squid-cache.org</a> <br clear="none">> <mailto:squid-users@lists.squid-cache.org><br clear="none">> > Subject: [EXTERNAL] Re: [squid-users] chunked transfer over sslbump<br clear="none">> ><br clear="none">> ><br clear="none">> > On 2024-01-09 09:13, Arun Kumar wrote:<br clear="none">> ><br clear="none">> >> I have compiled/installed squid v5.8 in Amazon Linux and configured it<br clear="none">> >> with sslbump option. Squid is used as proxy to get response from https<br clear="none">> >> site. When the https site sends chunked response, it appears that the<br clear="none">> >> first response comes but it get stuck and doesn't receive the full<br clear="none">> >> response. Appreciate any help.<br clear="none">> > There were some recent chunking-related changes in Squid, but none <br clear="none">> of them is likely to be responsible for the problems you are describing <br clear="none">> unless the origin server response is very special/unusual.<br clear="none">> ><br clear="none">> > Does the client in this test get the HTTP response header? Some HTTP <br clear="none">> response body bytes?<br clear="none">> ><br clear="none">> > To triage the problem, I recommend sharing the corresponding <br clear="none">> access.log records (at least). Seeing debugging of the problematic <br clear="none">> transaction may be very useful (but avoid using production security keys <br clear="none">> and other sensitive information in such tests):<br clear="none">> > <br clear="none">> <a shape="rect" href="https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction" rel="nofollow" target="_blank">https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction</a> <<a shape="rect" href="https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction" rel="nofollow" target="_blank" class="enhancr_card_5570947179">Sending Bug Reports to the Squid Team</a>><br clear="none">> ><br clear="none">> > Please note that Squid v5 is not officially supported and has more <br clear="none">> known security vulnerabilities than Squid v6. You should be using Squid v6.<br clear="none">> ><br clear="none">> ><br clear="none">> > HTH,<br clear="none">> ><br clear="none">> > Alex.<br clear="none">> ><br clear="none">> > _______________________________________________<br clear="none">> > squid-users mailing list<br clear="none">> > <a shape="rect" href="mailto:squid-users@lists.squid-cache.org" rel="nofollow" target="_blank">squid-users@lists.squid-cache.org</a> <br clear="none">> <mailto:squid-users@lists.squid-cache.org><br clear="none">> > <a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a> <br clear="none">> <<a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a>><br clear="none">> ><br clear="none">> > _______________________________________________<br clear="none">> > squid-users mailing list<br clear="none">> > <a shape="rect" href="mailto:squid-users@lists.squid-cache.org" rel="nofollow" target="_blank">squid-users@lists.squid-cache.org</a> <br clear="none">> <mailto:squid-users@lists.squid-cache.org><br clear="none">> > <a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a> <br clear="none">> <<a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a>><br clear="none">> <br clear="none">> _______________________________________________<br clear="none">> squid-users mailing list<br clear="none">> <a shape="rect" href="mailto:squid-users@lists.squid-cache.org" rel="nofollow" target="_blank">squid-users@lists.squid-cache.org</a> <mailto:squid-users@lists.squid-cache.org><div class="ydp3ea7061eyqt1636015454" id="ydp3ea7061eyqtfd00668"><br clear="none">> <a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a> <br clear="none">> <<a shape="rect" href="https://lists.squid-cache.org/listinfo/squid-users" rel="nofollow" target="_blank" class="enhancr_card_6006331191">squid-users Info Page</a>><br clear="none"><br clear="none"></div><div><br></div><div id="ydp3836e6f2enhancr_card_6006331191" class="ydp3836e6f2yahoo-link-enhancr-card ydp3836e6f2yahoo-link-enhancr-not-allow-cover ydp3836e6f2ymail-preserve-class ydp3836e6f2ymail-preserve-style" style="max-width:400px;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif" data-url="https://lists.squid-cache.org/listinfo/squid-users" data-type="YENHANCER" data-size="MEDIUM" contenteditable="false"><a href="https://lists.squid-cache.org/listinfo/squid-users" style="text-decoration:none !important;color:#000 !important" class="ydp3836e6f2yahoo-enhancr-cardlink" rel="nofollow" target="_blank"><table border="0" class="ydp3836e6f2card-wrapper ydp3836e6f2yahoo-ignore-table" cellpadding="0" cellspacing="0" style="max-width:400px"><tbody><tr><td width="400"><table border="0" class="ydp3836e6f2card ydp3836e6f2yahoo-ignore-table" cellpadding="0" cellspacing="0" width="100%" style="max-width:400px;border-width:1px;border-style:solid;border-color:rgb(224, 228, 233);border-radius:2px"><tbody><tr><td><table border="0" class="ydp3836e6f2card-info ydp3836e6f2yahoo-ignore-table" cellpadding="0" cellspacing="0" style="background:#fff;position:relative;z-index:2;width:100%;max-width:400px;border-radius:0 0 2px 2px;border-top:1px solid rgb(224, 228, 233)"><tbody><tr><td style="background-color:#ffffff;padding:16px 0 16px 12px;vertical-align:top;border-radius:0 0 0 2px"></td><td style="vertical-align:middle;padding:12px 24px 16px 12px;width:99%;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif;border-radius:0 0 2px 0"><h2 class="ydp3836e6f2card-title" style="font-size: 14px; line-height: 19px; margin: 0px 0px 6px; font-family: YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif; color: rgb(29, 34, 40); max-width: 314px;">squid-users Info Page</h2><p class="ydp3836e6f2card-description" style="font-size: 12px; line-height: 16px; margin: 0px; color: rgb(151, 158, 168);"></p></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></a></div><div><br></div><div><br></div></div><div><br></div><div id="ydp7ac1b2bfenhancr_card_5570947179" class="ydp7ac1b2bfyahoo-link-enhancr-card ydp7ac1b2bfyahoo-link-enhancr-not-allow-cover ydp7ac1b2bfymail-preserve-class ydp7ac1b2bfymail-preserve-style" style="max-width:400px;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif" data-url="https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction" data-type="YENHANCER" data-size="MEDIUM" contenteditable="false"><a href="https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction" style="text-decoration:none !important;color:#000 !important" class="ydp7ac1b2bfyahoo-enhancr-cardlink" rel="nofollow" target="_blank"><table border="0" class="ydp7ac1b2bfcard-wrapper ydp7ac1b2bfyahoo-ignore-table" cellpadding="0" cellspacing="0" style="max-width:400px"><tbody><tr><td width="400"><table border="0" class="ydp7ac1b2bfcard ydp7ac1b2bfyahoo-ignore-table" cellpadding="0" cellspacing="0" width="100%" style="max-width:400px;border-width:1px;border-style:solid;border-color:rgb(224, 228, 233);border-radius:2px"><tbody><tr><td><table border="0" class="ydp7ac1b2bfcard-info ydp7ac1b2bfyahoo-ignore-table" cellpadding="0" cellspacing="0" style="background:#fff;position:relative;z-index:2;width:100%;max-width:400px;border-radius:0 0 2px 2px;border-top:1px solid rgb(224, 228, 233)"><tbody><tr><td style="background-color:#ffffff;padding:16px 0 16px 12px;vertical-align:top;border-radius:0 0 0 2px"></td><td style="vertical-align:middle;padding:12px 24px 16px 12px;width:99%;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif;border-radius:0 0 2px 0"><h2 class="ydp7ac1b2bfcard-title" style="font-size: 14px; line-height: 19px; margin: 0px 0px 6px; font-family: YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif; color: rgb(29, 34, 40); max-width: 314px;">Sending Bug Reports to the Squid Team</h2><p class="ydp7ac1b2bfcard-description" style="font-size: 12px; line-height: 16px; margin: 0px; color: rgb(151, 158, 168);">Squid Web Cache documentation</p></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></a></div><div><br></div><div><br></div><div><br></div><div id="ydp7b1ed8c8enhancr_card_5326275312" class="ydp7b1ed8c8yahoo-link-enhancr-card ydp7b1ed8c8yahoo-link-enhancr-not-allow-cover ydp7b1ed8c8ymail-preserve-class ydp7b1ed8c8ymail-preserve-style" style="max-width:400px;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif" data-url="https://lists.squid-cache.org/pipermail/squid-users/2023-July/026016.html" data-type="YENHANCER" data-size="MEDIUM" contenteditable="false"><a href="https://lists.squid-cache.org/pipermail/squid-users/2023-July/026016.html" style="text-decoration:none !important;color:#000 !important" class="ydp7b1ed8c8yahoo-enhancr-cardlink" rel="nofollow" target="_blank"><table border="0" class="ydp7b1ed8c8card-wrapper ydp7b1ed8c8yahoo-ignore-table" cellpadding="0" cellspacing="0" style="max-width:400px"><tbody><tr><td width="400"><table border="0" class="ydp7b1ed8c8card ydp7b1ed8c8yahoo-ignore-table" cellpadding="0" cellspacing="0" width="100%" style="max-width:400px;border-width:1px;border-style:solid;border-color:rgb(224, 228, 233);border-radius:2px"><tbody><tr><td><table border="0" class="ydp7b1ed8c8card-info ydp7b1ed8c8yahoo-ignore-table" cellpadding="0" cellspacing="0" style="background:#fff;position:relative;z-index:2;width:100%;max-width:400px;border-radius:0 0 2px 2px;border-top:1px solid rgb(224, 228, 233)"><tbody><tr><td style="background-color:#ffffff;padding:16px 0 16px 12px;vertical-align:top;border-radius:0 0 0 2px"></td><td style="vertical-align:middle;padding:12px 24px 16px 12px;width:99%;font-family:YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif;border-radius:0 0 2px 0"><h2 class="ydp7b1ed8c8card-title" style="font-size: 14px; line-height: 19px; margin: 0px 0px 6px; font-family: YahooSans VF, YahooSans, Helvetica Neue, Segoe UI, Helvetica, Arial, sans-serif; color: rgb(29, 34, 40); max-width: 314px;">[squid-users] compile error in squid v6.1</h2><p class="ydp7b1ed8c8card-description" style="font-size: 12px; line-height: 16px; margin: 0px; color: rgb(151, 158, 168);"></p></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></a></div><div><br></div><div><br></div></div>
</div>
</div></body></html>