[squid-users] squid only partially working WHY ?

Ian A Taylor iat at st-andrews.ac.uk
Mon May 30 09:58:07 UTC 2022


Good day

I have install ubuntu 22.04 server on 4 machines

The machines are

spark

compute-0-[0,1,2]

spark has an internet connect plus a connection to a restricted 
(10.1.1.0/24) network

compute-0-[0,1,2] are on the restricted network

2 of the three compute-0-[0,1,2] machines install with snap ok

but the third fails

I cannot see why

compute-0-1 - which works has


systemctl show snapd | grep proxy
     Environment=http_proxy=http://10.1.1.1:3128/ 
https_proxy=http://10.1.1.1:3128/
DropInPaths=/etc/systemd/system/snapd.service.d/http-proxy.conf 
/etc/systemd/system/snapd.service.d/https-proxy.conf

snap install test-snapd-tools
     test-snapd-tools 1.0 from Test snaps (test-snaps-canonical) installed

On spark in /var/log/squid/access.log I see

spark:/var/log/squid/access.log
1653903438.774   5093 10.1.1.253 TCP_TUNNEL/200 4899 CONNECT 
api.snapcraft.io:443 - HIER_DIRECT/185.125.188.58 -
1653903442.705   5107 10.1.1.253 TCP_TUNNEL/200 4909 CONNECT 
api.snapcraft.io:443 - HIER_DIRECT/185.125.188.58 -
1653903442.872   9738 10.1.1.253 TCP_TUNNEL/200 25383 CONNECT 
api.snapcraft.io:443 - HIER_DIRECT/185.125.188.58 -

However on compute-0-2

systemctl show snapd | grep proxy
     Environment=http_proxy=http://10.1.1.1:3128/ 
https_proxy=http://10.1.1.1:3128/
DropInPaths=/etc/systemd/system/snapd.service.d/http-proxy.conf 
/etc/systemd/system/snapd.service.d/https-proxy.conf


snap install test-snapd-tools

    generates

     error: cannot install "test-snapd-tools": cannot query the store 
for updates: got unexpected HTTP
            status code 500 via POST to 
"http://snaps.spark.internal/v2/snaps/refresh"


spark:/var/log/squid/access.log
1653903468.117      1 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html
1653903468.617      0 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html
1653903469.867      0 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html
1653903472.991      0 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html
1653903480.804      0 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html
1653903485.009  51235 10.1.1.253 TCP_TUNNEL/200 117316495 CONNECT 
canonical-lgw01.cdn.snapcraftcontent.com:443 - HIER_DIRECT/185.125.190.27 -
1653903487.747  50040 10.1.1.253 TCP_TUNNEL/200 12970 CONNECT 
canonical-lgw01.cdn.snapcraftcontent.com:443 - HIER_DIRECT/185.125.190.27 -
1653903500.336      0 10.1.1.252 TCP_MISS/500 5394 POST 
http://snaps.spark.internal/v2/snaps/refresh - HIER_NONE/- text/html


spark:/etc/squid/squid.conf
acl localnet src 10.1.1.254/32
acl localnet src 10.1.1.253/32
acl localnet src 10.1.1.252/32

If someone could indicate why this is happening I would be sincerely 
appreciative

On compute-0-2 an apt-get install appears to work ok, the problem is 
only on snaps

curl -v api.snapcraft.io
     *   Trying 185.125.188.54:80...
     * Connected to api.snapcraft.io (185.125.188.54) port 80 (#0)
     > GET / HTTP/1.1
     > Host: api.snapcraft.io
     > User-Agent: curl/7.81.0
     > Accept: */*
     >
     * Mark bundle as not supporting multiuse
     < HTTP/1.1 200 OK
     < server: gunicorn/20.0.4
     < date: Mon, 30 May 2022 09:46:00 GMT
     < content-type: text/html; charset=utf-8
     < content-length: 64
     < snap-store-version: 49
     < x-view-name: snapdevicegw.webapi.root
     < x-vcs-revision: 9abffbb1
     < x-request-id: 8AFB0DA87C990A8325F000506294925814E73D9D
     <
     snapcraft.io store API service - Copyright 2018-2021 Canonical.
     * Connection #0 to host api.snapcraft.io left intact


snap known serial

type: serial
authority-id: generic
brand-id: generic
model: generic-classic
serial: a0f0dea6-d87a-44b1-bb5c-daa40e1787a0
device-key:
AcbBTQRWhcGAARAAlEwUeRrlL215Ouf4CrZKrkGA3YyzqG2G7zVbkYQVeXLyos87OdD21UJVmri4 

hpeqX4lkrjcDS7gCxyOcmUekoM6bNILdlEt8ag1j8if5ZuomhS4xlX1reWkdAjNvMRK9vMpOWDnv 

dFQwfLtvR5K/WHCAXT57U5WXTuDJIGpyf9d3waulpsj1Fr1O5VcJyVXRPOQzizd2U3FAQPk35eKh 

NF68JqHFb6z7CIWIlTxl77D3Z0VMGUx5XYUS3xljC6EMeGeN0d1nen+NWXLw+x56MAbL1gyzRN3f 

pqvWY0vB7zdDNXm72DJ1WDrGwujQJ81OzQ33Ao3N9sSscvrEnjdkN3jfIejJ6TIk8xN679afavTU 

Y6fXEYM8S3LQbix1OELeu8UKWoUxhoNRW2e1rMirIUpeOwt+oPdEcEQGTqfcKQ4tO+AmMSOFS5Lv 

6Je3chdNiao13AYVJXcU7bUeP6IsHLLa3pi+4N00BiqNv3dqjpDQUBAkqaCOVkp8BmEpDdX+pper 

y//VfUyHBAS31+H9cWOSxLfhXdMsBxmtW4tftpm21eylKhFC0q+4IBxqj4P2TWsTmgOHW+1G0F4o 

qPVIGstYV12AO0f3m/8Ql5H7hW+qG2WaQe0P16B55Xb35qtTX0r0nh4a1sdG5qtdZqSRx6yJ4FJ/ 

     dtmrSB3rXGK9LFkAEQEAAQ==
device-key-sha3-384: 
NyBU-b-3_f_Odfthy6vD3cq1hGGzMaulU-AUM8abFgmypUQVkPsJQz_1fmE4dUYW
timestamp: 2022-05-09T10:00:01.908678Z
sign-key-sha3-384: 
wrfougkz3Huq2T_KklfnufCC0HzG7bJ9wP99GV0FF-D3QH3eJtuSRlQc2JhrAoh1

AcLBUgQAAQoABgUCYnjmIQAAKpkQABSLcE/cMlISdOYBmV/te7EqNcIIJfPTAXYfe0/o9Pif9p+u 

Hsl6UDKfe7RS+QQARstsaJhTznSEJwJMvKaCrPKlmTUL1vldRuu70Rz3q3Hf2cdXVXJZutQNNNHa 

sAwzpAkVSXQ5Fjx99xYXjDURriA9+jt6ZXDcCD538M9m7+vNI21ynMlZVz/FmUMYz5z+8XP76faq 

vnvKXqS3uGXF7O6QMo42XIQqUmPiJGrhUl56e66BOhjShsEynpBkQNDbf0SKN1ELFPl7evYT52E4 

aFYs6rGx8Ip6E9xmWfrR4wNgjM/Zimdjs37+591vYyY/k2E7igT8bd3+xhqlkJlghfch2m7IkhWM 

kArg4oXA+I7H9NbGY4wGcgfPLPOujMzbXEgLnh8u1qp0QVxyMNRUCCPrv80uaRkA9tWrtxsOC5gI 

whQ1FOkaavX/ZW9z7XWhBRBPRuxgp6AFgpoQgbN+6DJDDk11/hc1GbGBPdDIFhMAd2/kwfvEQ+nR 

TnnM9JApjdXb/MNmooJVDu3BQvszUuOa6emKP79jvVVP60R0/wNrzjfssseqkyfRizZkdQvJ4IR2 

MTwPlmXIBhAhJsLif6ql8Ht/7X7RFT8ybXHRfB/SDsI1IZGyddV6hjCDMOGj3BfOfOJWhk1r5/WR 

lg589GakIn3XoH43jdqlxknqAKhc

snap list
Name   Version  Rev    Tracking       Publisher   Notes
snapd  2.55.3   15534  latest/stable  canonical✓  snapd


Thanking you

Regards




-- 
Ian Taylor
University of St.Andrews,
School of Physics & Astronomy,
North Haugh,
St.Andrews,
Fife  KY16 9SS,
Scotland.

e-Mail :- iat at st-and.ac.uk
Tel    :- (0)1334-463141
Fax    :- (0)1334-463104

The University of St Andrews
is a charity registered in
Scotland : No SC013532.



More information about the squid-users mailing list