[squid-users] Fast acl for ip-based url

Roel van Meer roel at 1afa.com
Tue Mar 10 12:29:36 UTC 2015


Amos Jeffries writes:

> > is there a fast acl to match ip-based urls?
> >
> > I would have thought to use dstdom_regex, but the docs say that a
> > reverse lookup is done if no match is found, which means (I think) that
> > it will become a slow acl for all regular urls.
>
> dtsdom* will only do a lookup if the URL content is a raw-IP that fails
> to match the pattern. "regular URLs" already have a domain named so no
> lookup is needed.
>
> Also, if an asynchronous lookup is required by an ACL when testing in
> the non-blocking (fast) access check the ACL is considered a non-match.
> The inverted (!) result is also a non-match which can confuse.

I understand. Thanks a lot!

Regards,

Roel


More information about the squid-users mailing list