[squid-users] flickr.com redirect error

Fri Jun 24 16:02:49 UTC 2016

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Be careful, guys. Via is reauired to HTTP by RFC.

24.06.2016 21:40, Ozgur Batur пишет:
> Hi Rafael, Yuri,
>
> Thank you very much, "via off" did the trick. It is probably a server
specific issue as you said.
>
> Best Regards,
>
> On Fri, Jun 24, 2016 at 6:29 PM, Rafael Akchurin
<rafael.akchurin at diladele.com <mailto:rafael.akchurin at diladele.com>> wrote:
>
>     Hello Ozgur, Yuri,
>
>     
>
>     I also see this error. Actually it is even present on
videos.yahoo.com <http://videos.yahoo.com> if I am not mistaken.
>
>     The reason for this is unclear for me (incorrect handling of “Via”
header by some of back office servers of Yahoo???)
>
>     
>
>     I was able to fix it by setting “via off” in squid.conf. I am not
sure if this is the recommended way ( I presume not) and how to disable
Via only for yahoo servers. Hopefully Amos has better answers.
>
>     
>
>     Via looks like:
>
>     
>
>     Via:"http/1.1 fts110.flickr.bf1.yahoo.com
<http://fts110.flickr.bf1.yahoo.com> (ApacheTrafficServer [cMs f ]),
http/1.1 r02.ycpi.ams.yahoo.net <http://r02.ycpi.ams.yahoo.net>
(ApacheTrafficServer [cMsSf ]), 1.1 qlproxy (squid/3.3.8)"
>
>     
>
>     Best regards,
>
>     Rafael Akchurin
>
>     Diladele B.V.
>
>     
>
>     *From:*squid-users
[mailto:squid-users-bounces at lists.squid-cache.org
<mailto:squid-users-bounces at lists.squid-cache.org>] *On Behalf Of *Ozgur
Batur
>     *Sent:* Friday, June 24, 2016 4:23 PM
>     *To:* Yuri <yvoinov at gmail.com <mailto:yvoinov at gmail.com>>
>     *Cc:* squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>     *Subject:* Re: [squid-users] flickr.com <http://flickr.com>
redirect error
>
>     
>
>     Hi Yuri,
>
>     
>
>     Thank you. I put the #301 loop directives and restarted squid
unfortunately result is the same. Here is the access logs:
>
>     
>
>     1466777191.791    235 ::1 TCP_MISS/301 987 GET
https://www.flickr.com/ - HIER_DIRECT/188.125.93.100
<http://188.125.93.100> text/html
>
>     1466777192.031    237 ::1 TCP_MISS/301 987 GET
https://www.flickr.com/ - HIER_DIRECT/188.125.93.100
<http://188.125.93.100> text/html
>
>     1466777192.386    352 ::1 TCP_MISS/301 987 GET
https://www.flickr.com/ - HIER_DIRECT/188.125.93.100
<http://188.125.93.100> text/html
>
>     1466777192.612    223 ::1 TCP_MISS/301 987 GET
https://www.flickr.com/ - HIER_DIRECT/188.125.93.100
<http://188.125.93.100> text/html
>
>     ...
>
>     
>
>     As I understand all responses are from origin server, there is no
cache hit with or without store_miss and send_hit. Confusing part is
when directly connected to server without proxy, flickr server does not
send 301 response. When squid sends the same request somehow flickr
server returns 301 with same URL.
>
>     
>
>     Ozgur
>
>     
>
>     
>
>     On Fri, Jun 24, 2016 at 3:50 PM, Yuri <yvoinov at gmail.com
<mailto:yvoinov at gmail.com>> wrote:
>
>         Try to do something like:
>
>         
>
>         # 301 loop
>         acl text_mime rep_mime_type text/html text/plain
>
>         acl http301 http_status 301
>
>         store_miss deny text_mime http301
>         send_hit deny text_mime http301
>
>         
>
>         24.06.2016 18:14, Ozgur Batur пишет:
>
>             I receive too many redirects(301 responses with same page
URL) error on browser when opening https://www.flickr.com via Squid 3.5
proxy with SSL interception. If I connect to flickr website directly
without Squid error does not happen.
>
>             
>
>             I tested it on two different systems one is Centos other
is Ubuntu. There is no acl, redirect or any other configuration in
squid.conf except enabling SSL interception.
>
>             
>
>             I opened http://bugs.squid-cache.org/show_bug.cgi?id=4537
for this issue but later thought it is better to ask if you also
experience the same issue.
>
>             
>
>             
>
>             Ozgur
>
>             
>
>             _______________________________________________
>
>             squid-users mailing list
>
>             squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>
>             http://lists.squid-cache.org/listinfo/squid-users
>
>         
>
>
>         _______________________________________________
>         squid-users mailing list
>         squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>         http://lists.squid-cache.org/listinfo/squid-users
>
>     
>
>
>
>
> --
> H Özgür Batur

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXbVmoAAoJENNXIZxhPexGPFgH/ib6RKjQ/JhhnvTtBQnM6euV
+F6e/rrf6B295OpsrUgqFdogmCshJZGivdSBd8266KPOlvxE3I0F01SNBtAt96wC
1pL3Sam+TmFwbOGa5vYStQ+ZAkn5ReiSHppKVdeR1lXxBlMuhcDJovIxDtXvVV5G
SZcmJWT1q+LS8vcS+mGybXOt0H7J32sSUyor+qJ0CZEfG5HEPb1XKjave1mJNxUj
JEwsL0/B5zVw8LtL2yOzZY7E3ERY0r2ieGqQ4GpzYUVoDwoc5q8xwKaU08j5qyrP
iS2fW8wbAZ2RoZmvJRxnFpFKel0NgzwrAOUeSAs8hPONUUpWaklFTL55lezNY+A=
=t07f
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160624/a81be37d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160624/a81be37d/attachment.key>