[squid-users] flickr.com redirect error

[Rafael Akchurin]

Hello Ozgur, Yuri,

I also see this error. Actually it is even present on videos.yahoo.com if I am not mistaken.
The reason for this is unclear for me (incorrect handling of “Via” header by some of back office servers of Yahoo???)

I was able to fix it by setting “via off” in squid.conf. I am not sure if this is the recommended way ( I presume not) and how to disable Via only for yahoo servers. Hopefully Amos has better answers.

Via looks like:

Via:"http/1.1 fts110.flickr.bf1.yahoo.com (ApacheTrafficServer [cMs f ]), http/1.1 r02.ycpi.ams.yahoo.net (ApacheTrafficServer [cMsSf ]), 1.1 qlproxy (squid/3.3.8)"

Best regards,
Rafael Akchurin
Diladele B.V.

From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Ozgur Batur
Sent: Friday, June 24, 2016 4:23 PM
To: Yuri <yvoinov at gmail.com>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] flickr.com redirect error

Hi Yuri,

Thank you. I put the #301 loop directives and restarted squid unfortunately result is the same. Here is the access logs:

1466777191.791    235 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100<http://188.125.93.100> text/html
1466777192.031    237 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100<http://188.125.93.100> text/html
1466777192.386    352 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100<http://188.125.93.100> text/html
1466777192.612    223 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100<http://188.125.93.100> text/html
...

As I understand all responses are from origin server, there is no cache hit with or without store_miss and send_hit. Confusing part is when directly connected to server without proxy, flickr server does not send 301 response. When squid sends the same request somehow flickr server returns 301 with same URL.

Ozgur


On Fri, Jun 24, 2016 at 3:50 PM, Yuri <yvoinov at gmail.com<mailto:yvoinov at gmail.com>> wrote:

Try to do something like:



# 301 loop
acl text_mime rep_mime_type text/html text/plain

acl http301 http_status 301

store_miss deny text_mime http301
send_hit deny text_mime http301

24.06.2016 18:14, Ozgur Batur пишет:

I receive too many redirects(301 responses with same page URL) error on browser when opening https://www.flickr.com via Squid 3.5 proxy with SSL interception. If I connect to flickr website directly without Squid error does not happen.



I tested it on two different systems one is Centos other is Ubuntu. There is no acl, redirect or any other configuration in squid.conf except enabling SSL interception.



I opened http://bugs.squid-cache.org/show_bug.cgi?id=4537 for this issue but later thought it is better to ask if you also experience the same issue.


Ozgur


_______________________________________________

squid-users mailing list

squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>
http://lists.squid-cache.org/listinfo/squid-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160624/6b230df6/attachment.html>