[squid-users] Using access_log directive to filter based on src IP or regex

[Alex Rousskov]

On 5/13/19 5:54 AM, Henning Schroeder wrote:
> I'm hosting two squid servers (Version 4.6) on CentOS in Azure, which
> are placed behing an Azure load balancer. 
> 
> The LB has a health probe which constantly polls the squid servers on
> port 3128.
> 
> In the access.log, I can find a whole lot of entries like:
> 
> 1557738944.935      0 168.63.129.16 NONE/000 0 NONE error:transaction-end-before-headers - HIER_NONE/- -

> I tried to filter these log entries by using the access_log directive

> acl azurelb src 168.63.129.16/32

Please see https://bugs.squid-cache.org/show_bug.cgi?id=4906

If you want to test experimental unofficial v5-based code fixing the
problem, ask for a git branch link there. Otherwise, wait for the
official fix.

You may also be interested in the discussion at
https://bugs.squid-cache.org/show_bug.cgi?id=4944 because it might
contain a usable workaround.


> acl azurelbprobe url_regex ^error:transaction-end-before-headers

This may be the same or a different bug. I recommend asking that
question by adding a comment to bug #4906: If the fix Eduard is
currently working on does _not_ address url_regex matching, then a new
bug report may be warranted.


HTH,

Alex.