[squid-users] Refresh ACL list only

[Brendan Kearney]

On Tue, 2015-03-17 at 11:59 -0600, Samuel Anderson wrote:
> Unfortunately thats not really an option for me. I've already built
> everything just using squid. It works great and does everything I need
> it to do with the exception of refreshing the ACL lists. I just need
> to find a way to refresh those single lists without disrupting
> Internet traffic to the users. If anyone knows how to do this I would
> greatly appreciate it.
> 
> On Tue, Mar 17, 2015 at 11:39 AM, Yuri Voinov <yvoinov at gmail.com>
> wrote:
>         -----BEGIN PGP SIGNED MESSAGE-----
>         Hash: SHA1
>         
>         Did you hear about rewriters and filters? I.e., squidGuard, or
>         Dansguardian? Or, of course
>         https://www.urlfilterdb.com/products/ufdbguard.html
>         ?
>         It has separate server process which can be restart VERY
>         quickly
>         independently of squid.
>         
>         17.03.15 23:35, Samuel Anderson пишет:
>         > Hello all,
>         >
>         > Does anyone know of a way to reload a single ACL list? I
>         have a
>         > very complicated and large config file that takes around 30
>         seconds
>         > to reload when I run the (squid3 -k reconfigure) command. I
>         have
>         > several ACL lists that need to be updated throughout the day
>         and it
>         > would be nice if I could only reload those ACL lists and not
>         the
>         > entire config. Its problematic because while its reloading,
>         the
>         > server is effectively down and disrupts Internet access for
>         the
>         > rest of the users. Below is a small sample of the lists that
>         will
>         > be updated. If I could add a TTL to the lists so squid would
>         reload
>         > them periodically without a full reconfigure would be ideal.
>         >
>         >
>         >
>         > acl GLOBAL-WHITELIST dstdomain
>         > "/etc/squid3/whitelists/GLOBAL-WHITELIST" acl
>         > UNRESTRICTED-WHITELIST dstdomain
>         > "/etc/squid3/whitelists/UNRESTRICTED-WHITELIST" acl
>         DEV-WHITELIST
>         > dstdomain "/etc/squid3/whitelists/DEV-WHITELIST" acl
>         > SALES-WHITELIST dstdomain
>         "/etc/squid3/whitelists/SALES-WHITELIST"
>         >
>         >
>         > Thanks
>         >
>         >
>         >
>         >
>         > _______________________________________________ squid-users
>         mailing
>         > list squid-users at lists.squid-cache.org
>         > http://lists.squid-cache.org/listinfo/squid-users
>         >
>         -----BEGIN PGP SIGNATURE-----
>         Version: GnuPG v2
>         
>         iQEcBAEBAgAGBQJVCGblAAoJENNXIZxhPexGRqwIAIS3iw5wIt9FPi85aH
>         +vWmA8
>         QJYyo8ChpnTGsKnAgpAMoSRFobo6AZjL9ABrRx7kGz2NC/VAla93NNR7SKr
>         +mDdr
>         Z9jz9DRVRSAm4D1rC3+xvdQowoN2UraxYDj9fCQKczfU0whc4Qwool
>         +n36gocPZH
>         I0nSbv40MhSTCO/Zybo1eonW/VQ4i9LopGFVI5q
>         +dYwRRleu8Rh4Pg1qRBRzmKa4
>         5O
>         +yCglKumIzMe4Pqa2JFQ6oq9VAimEslin7hoXS1VXRH8lE9Hbg0kKpuaWEiyFG
>         ySmdKoFu1O70Ffug48vXi1EQXAkE5C6xmtBHlCBxtiOf8kFoUHkyslJtEniA8Yw=
>         =+8IA
>         -----END PGP SIGNATURE-----
>         _______________________________________________
>         squid-users mailing list
>         squid-users at lists.squid-cache.org
>         http://lists.squid-cache.org/listinfo/squid-users
> 
> 
> 
> 
> -- 
> Samuel Anderson  |  Information Technology Administrator  |
>  International Document Services
> 
> 
> IDS  |  11629 South 700 East, Suite 200  |  Draper, UT 84020-4607
> 
> 
> 
> CONFIDENTIALITY NOTICE:
> This e-mail and any attachments are confidential. If you are not an
> intended recipient, please contact the sender to report the error and
> delete all copies of this message from your system.  Any unauthorized
> review, use, disclosure or distribution is prohibited.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

do you have the luxury of multiple squid instances behind a load
balancer?  mark one offline at the LB, reconfigure, mark online at the
LB.  Lather, rinse, repeat.