[squid-users] Squid "suspending ICAP service for too many failures"

[Amos Jeffries]

On 31/01/21 6:08 am, Andrea Venturoli wrote:
> On 1/29/21 8:38 PM, Alex Rousskov wrote:
> 
> 
>> Packet captures can tell you whether other Squid-ICAP server connections
>> were active at the time, whether from-Squid SYN packets were able to
>> reach the ICAP server, etc.
>>
>> In other words, basic network troubleshooting steps...
> 
> As I said, they live on the same host, so it can't be a network problem.
> 

FYI, that conclusion does not follow. Even on the same host there is a 
full TCP/IP networking stack between Squid and ICAP server doing things 
to the packets. All localhost removes is the potential problems due to 
differences in machine networking stacks.

Network config, firewall rules, packet handling, and/or protocol 
negotiation activities between the software are all still happening that 
may affect the outcome.



Amos