[squid-users] clientside_mark

[Ikari C]

On 22/05/17 02:51, Ikari C wrote:

> Hi, i'm new in maillist and in Squid configuration, I use Squid 3.5
> version and i read about clientside_mark configuration, but i have a doubt,
> wich type of  ACL is compatible with this option. I want to create a MARK
> by dstdomain ACL, and use TC configuration to set QOS, it is posible? or
> only works with SRC ALC type.
>
>
> i want to do this in squid.conf:
>
> acl aclname1 dstdomain url1
> acl aclname2 dstdomain url2
> clientside_mark 0x3 aclname1
> clientside_mark 0x4 aclname2
>
> the configuration on squid.conf is the default.
>
>
Any of the ACLs which work in http_access should work there too.

However, because HTTP contains message pipelines the arrival time of any
given request may be significantly different from the response delivery
time. i.e. there may be earlier requested responses using the connection
between now (when the MARK gets set by the newly arrived request) and the
response you were intending to mark. So it is best to only rely on TCP
level things if you can.

Amos


Thanks. i will keep it in mind

I tested this configuration and squid effectively mark this packages (I saw
with iptables --m mark --mark X -j log) but mark also other domain that i
have visited inmediately after and they aren't in the acl, for example, if
i put "acl ac1 dstdomain .yahoo.com", squid mark this package, but if i go
to google.com squid also mark the google package, but if i go to google
first than yahoo.com squid doesn't mark the package to google, and then i
go to yahoo, squid mark the yahoo package, and if i go to visit again
google, "squid" mark the package google too. I wanted to create a QOS based
by domain whith TC configuration.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170522/e4ed54b3/attachment.html>