[squid-users] After upgrade from squid6.6 to 6.8 we have a lot of ICAP_ERR_OTHER and ICAP_ERR_GONE messages in icap logfiles

[Alex Rousskov]

On 2024-03-11 11:31, Dieter Bloms wrote:
> Hello,
> 
> after an upgrade from squid6.6 to squid6.8 on a debian bookworm we have a lot
> of messages from type:
> 
> ICAP_ERR_GONE/000
> ICAP_ERR_OTHER/200
> ICAP_ERR_OTHER/408
> ICAP_ERR_OTHER/204
> 
> and some of our users claim about bad performance and some get "empty
> pages".

Please see Squid Bug 5352 for a work-in-progress fix that needs testing:
https://bugs.squid-cache.org/show_bug.cgi?id=5352

Thank you,

Alex.


> Unfortunately it is not deterministic, the page will appear the next
> time it is called up. I can't see anything conspicuous in the cache.log.
> 
> There was no change to the virus scanner nor any change to the squid
> config during the upgrade.
> 
> Here the icap spefific config lines from squid:
> 
> --snip--
> acl CONNECT method CONNECT
> acl withoutvirusscanner.dstnames dstdomain "/etc/squid/withoutvirusscanner.dstnames"
> acl audio rep_mime_type ^audio/
> acl audio rep_mime_type ^video/
> 
> icap_enable on
> icap_preview_enable on
> icap_preview_size 128
> icap_persistent_connections on
> icap_send_client_ip on
> icap_send_client_username on
> icap_service_failure_limit -1
> icap_service_revival_delay 30
> logformat icap_debug %ts.%03tu %6icap::tr %>a %icap::to/%03icap::Hs %icap::<st %icap::rm %ru %icap::<A -
> icap_log daemon:/var/log/squid/icap.log icap_debug
> icap_service service_reqmod reqmod_precache bypass=0 max-conn=4096 icap://xx.xx.xx.xx:1344/service_scanner
> icap_service service_respmod respmod_precache bypass=0 max-conn=4096 icap://xx.xx.xx.xx:1344/service_scanner
> adaptation_service_chain icap_request_scanners service_reqmod
> adaptation_service_chain icap_respond_scanners service_respmod
> adaptation_access icap_request_scanners allow all !to_localhost !manager !CONNECT !withoutvirusscanner.dstnames
> adaptation_access icap_respond_scanners allow all !to_localhost !manager !CONNECT !audio !withoutvirusscanner.dstnames
> --snip--
> 
> I don't see any changes in the ICAP server area between 6.6 and 6.8
> 
>