[squid-users] wccp2_service_info fails on more than one port number

[Guy Helmer]

Thanks Yuri -- I have thoroughly read Cisco IOS configuration manuals pertaining to WCCP2. From what I have read, there is no strict requirement for separate configurations for standard web-cache port 80 and dynamic service for non-port 80 — wccp2 dynamic services allow redirection of any ports (up to a total of 8), including port 80. As I’ve stated before, this was a working configuration in squid 3.3 at multiple sites. If there is a rationale for distinct wccp2 service configurations for port 80 vs other ports, I sure could use a reference that explains it.

As I’ve pointed out, there is a bug in Squid 3.4 that prevents specifying multiple TCP ports in the wccp2_service_info line. I’ve corrected that now in my sources. After fixing that bug, squid 3.4.12 is functioning with WCCP2 interception for port 80, 443, and others as it did in version 3.3.x.

Regards,
Guy

> On Mar 3, 2015, at 11:29 AM, Yuri Voinov <yvoinov at gmail.com> wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Please, read Cisco iOS WCCPv2 manual first.
> 
> This one:
> 
> http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf018.html <http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf018.html>
> 
> and this one:
> 
> http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf018.html#wp1000955 <http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf018.html#wp1000955>
> 
> wccp web-cache uses port 80 by default. Other http ports is less than
> percentile on web-traffic.
> 
> https requires another dynamic wccp service.
> 
> Also, take a look on config example again.
> 
> This is working configuration.
> 
> 03.03.15 23:21, Guy Helmer пишет:
>> It has worked in the past with WCCP2 dynamic services at multiple
>> sites.
>> 
>> I’ve uncovered the wccp2_service_info ports parsing error:
>> 
>> --- src/wccp2.cc.ORIG	2015-03-03 11:08:18.000000000 -0600 +++
>> src/wccp2.cc	2015-03-03 11:10:37.000000000 -0600 @@ -2264,7
>> +2264,10 @@ if (i >= WCCP2_NUMPORTS) { 
>> fatalf("parse_wccp2_service_ports: too many ports (maximum: 8) in
>> list '%s'\n", options); } -        int p = xatoi(tmp); +
>> char copy[len + 1]; +        memcpy(copy, tmp, len); +
>> copy[len] = '\0'; +        int p = xatoi(copy);
>> 
>> if (p < 1 || p > 65535) { fatalf("parse_wccp2_service_ports: port
>> value '%s' isn't valid (1..65535)\n", tmp);
>> 
>> 
>>> On Mar 3, 2015, at 11:06 AM, Yuri Voinov <yvoinov at gmail.com>
>>> wrote:
>>> 
>> You cannot combine HTTP and HTTPS in one WCCP service.
>> 
>> http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2 <http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2>
>> 
>> 
>> 
>> 03.03.15 23:04, Guy Helmer пишет:
>>>>> This used to work in 3.3.x:
>>>>> 
>>>>> wccp2_service_info 94 protocol=tcp
>>>>> flags=dst_ip_hash,ports_source priority=240
>>>>> ports=80,81,83,591,8008,8080,443
>>>>> 
>>>>> squid 3.4.12 fails: 2015/03/03 11:02:33.109|
>>>>> cache_cf.cc(556) parseOneConfigFile: Processing:
>>>>> wccp2_service_info 94 protocol=tcp 
>>>>> flags=dst_ip_hash,ports_source priority=240 
>>>>> ports=80,81,83,591,8008,8080,443 2015/03/03 11:02:33.109| 
>>>>> wccp2.cc <http://wccp2.cc/>(2298) parse_wccp2_service_info:
>>>>> parse_wccp2_service_info: called 2015/03/03 11:02:33.109|
>>>>> ERROR: Invalid value: '80,81,83,591,8008,8080,443' is
>>>>> supposed to be a number.
>>>>> 
>>>>> Any help?
>>>>> 
>>>>> Thanks, Guy _______________________________________________ 
>>>>> squid-users mailing list squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org> 
>>>>> http://lists.squid-cache.org/listinfo/squid-users <http://lists.squid-cache.org/listinfo/squid-users>
>>>>> 
>>> _______________________________________________ squid-users
>>> mailing list squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org> 
>>> http://lists.squid-cache.org/listinfo/squid-users <http://lists.squid-cache.org/listinfo/squid-users>
>> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
> 
> iQEcBAEBAgAGBQJU9e+SAAoJENNXIZxhPexGgN8H/iu2SiLdNehFyrVlK/1X2J4X
> qa0cZMoJBYcmQYY2VhjaIGVSdO1RfHt1RP5RSEFgkAkdSH10zCSK6KrzK4eh6jrU
> Fuze0mvACuQsi0CfwEQ2KO9gREeOpP7+QcqZ304zEdw2fFDT4YEDRBKhiYXtAYtK
> zR4oiNAlut5TWhwjHkmbvTADLWjp64gP0FggVEYIPvIBGYQqSKjE+JVRruiCSTtW
> TrbXjcwGNX7SA2gN3pl7pO+QcCwLdErzXnzc3E3ExCKW9uTB3VLKkK4BbK7uRBQX
> iKUsB/G9Ps8nAt08xK/puKL0fXJ1t//N8BXSrSkztTODQ/ckTBn772Dr2LJNv7Q=
> =j/dZ
> -----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150303/12c48679/attachment-0001.html>