[squid-users] SQUID PROXY ERRORS - SUPPORT

[Alessio Ballarini (External)]

Hi Squid Support,
we are facing a problem with Squid proxy, configurated on our server named
"amiproxy".

I explain the role of this proxy in the infrastructure as follow:

- There are two SAP application server that need to use a Proxy to reach a
remote server out of our local network.
- The Proxy is configured on "amiproxy" by using Squid (I attach the
squid.conf)
- The TCP connections work inconsistently: sometimes they work (200) and
sometimes they do not (503).

Specifically in the access.log of the Squid we registered these 503 erros:

1680672739.134 59768 172.29.7.148 NONE/503 0 CONNECT 195.75.144.10:22 -
HIER_NONE/- -
1680681044.960 60450 172.29.7.148 NONE/503 0 CONNECT
appbpe.pellegrinicard.it:443 - HIER_NONE/- -

We tried to debug the log of the squid, and we found that this error is a
"generic" application error that could depend on several factors.

I hope you can support us, because we are pretty sure that the cause
depends on Squid, since we tried to bypass it using a direct TCP flow to
the remote server from the SAP application server and we did not detect any
errors.

Thank you
Kind regards

Alessio

-- 

_________________________________________
[image: Noovle S.p.A.] <https://noovle.com/it>
*Alessio Ballarini (External)*
DC.O.APS

*Noovle S.p.A.*
Via Gaetano Negri 1 - 20123 Milano (MI)
+393488654039
*Twitter* <https://twitter.com/Noovle_SpA> - *Linkedin*
<https://www.linkedin.com/company/noovle/>
*www.noovle.com* <https://www.noovle.com/it/>

-- 
_INFORMATIVA SULLA PRIVACY E SULLA CONFIDENZIALITA': Ai sensi del Reg. UE 
n.2016/679 sulla tutela della privacy, Vi informiamo che il presente 
messaggio e-mail potrebbe contenere informazioni riservate e/o fondate su 
privilegio legale, oltre a dati personali. Vi informiamo che deteniamo e 
trattiamo i dati contenuti nella presente per i soli scopi di adempiere ad 
obblighi di legge e/o contrattuali e/o per la tutela di nostri legittimi 
interessi. La conoscenza di questi dati è riservata ai soli destinatari di 
questa e-mail. Al di fuori degli scopi sopra descritti, tali dati non 
saranno da noi rivelati in alcun modo a terzi, senza il previo consenso 
scritto degli interessati coinvolti, ove prescritto e/o necessario ai sensi 
della legge applicabile. _Qualora Voi non siate gli effettivi destinatari 
della presente e-mail, Vi informiamo che ne sono severamente proibite la 
diffusione, la copia e/o la distribuzione. _Nel caso aveste ricevuto il 
presente messaggio per errore Vi preghiamo, pertanto, di informarci 
immediatamente e di eliminarlo dal vostro computer. Grazie.___
_
_
_PRIVACY 
AND CONFIDENTIALITY NOTICE: Pursuant to EU Regulation no.679/2016 on 
privacy protection, we inform You that his e-mail message might contain 
confidential and/or legally privileged information as well as personal 
data. We inform You that we hold and process all data contained therein for 
the sole purposes of meeting legal and/or contractual obligation(s) and/or 
for our legitimate interest. Knowledge of these data is reserved solely to 
the person(s) to whom this e-mail is addressed. Outside the scopes 
described above, these data will not be disclosed by us in any way to third 
parties without the prior written consent of the relevant data subject(s), 
where prescribed and/or deemed necessary by applicable law(s). _If You are 
not the intended recipient, You are hereby notified that any disclosure, 
copying and/or distribution of the contents of this e-mail message is 
strictly prohibited. _If You have received this communication in error, 
therefore, please delete it immediately and contact us to let us know it. 
Thank you._


____
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20230407/8ad82807/attachment.htm>
-------------- next part --------------



acl SSL_ports port 443
acl CONNECT method CONNECT

dns_v4_first on

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access deny manager



http_access allow localnet
http_access allow localhost

http_access deny all

http_port 10.201.214.145:3128


coredump_dir /var/cache/squid

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320


debug_options ALL,3