[squid-users] squid docs, http_access manager : mismatch

[Amos Jeffries]

On 4/12/2015 1:17 a.m., Massimo.Sala at asl.bergamo.it wrote:
> I am reviewing our squid.conf about  http_access manager
> 
> 
> http://www.squid-cache.org/Doc/config/http_access/
> 
>         http_access allow localhost manager
> 
> 
> http://wiki.squid-cache.org/Features/CacheManager
> 
>         Cache manager Access Control in squid.conf
>         http_access allow manager localhost
> 
> 
> 
> Which is the correct syntax ?

Either is fine. The first is better.

The conditions on the line are AND'd together to decide if the action
(allow) is to be enacted. Best Practice is to place the fastest ACL
tests earlier, so if they mis-match its fast and raises overall
performance. There are a few exceptions, but this is not one of those
odd cases.

The manager ACL was changed in Squid-3.2 from a super-fast proto ACL
type to a slow(er) regex type. Old Squid have slightly faster
performance with "manager localhost" and current Squid have faster
performance with "localhost manager". The difference is very marginal
though so it would not be noticed except under extremely heavy load
conditions.

Thank you for spotting this. I'm updating the wiki page now to align
with current recommendations.

Amos