Re: Need to know ACL format

-----BEGIN PGP SIGNED MESSAGE-----

On Sat, 7 Dec 1996, Ed Knowles wrote:

> acl usls.edu src 202.47.133.0/24
> http_access allow usls.edu
>
> acl all src 0.0.0.0/0.0.0.0
> icp_access deny all
> http_access deny all
>
> (you'll need to add rules for any caches that use you as a sibling/parent)
>
> If the cloest hop to you is cit.lasaltech.com just parent to that.
> cit.lasaltech.com should parent to proxy.mozcom.com, not you. If
> dagupan.mozcom.com is using proxy.mozcom.com as a parent, then anything they
> request will be in the parent cache, so there is no need for you to neighbout
> them, UNLESS the RTT is much lower.

thanks! this is really of great help! what are the rules/standard
procedures for choosing a sibling? i would also like to be not too much
dependent on the parent upstream proxy/cache.

to illustrate further, here's the diagram of the whole setup:

                                                         internet MCI
                                                              |
  1.1.0 1.0.17 | 512K
+--------+ 64K +-----------+ 128K +--------+ 256K +------+
| my LAN |---------| local ISP |--------| switch |---------| CERN |
+--------+ +-----------+ +--------+ +------+
                                                              |
                                        +---------+ |
                                        | dagupan |-----------+
                                        +---------+

traceroute to cit.lasaltech.com
===============================
 1 usls-2511.usls.edu (202.47.133.34) 2.492 ms 2.346 ms 2.356 ms
 2 206.151.136.241 (206.151.136.241) 20.188 ms 20.254 ms 20.225 ms
 3 pc01-bacd.mozcom.com (206.151.138.83) 21.154 ms 20.915 ms 20.941 ms

traceroute to proxy.mozcom.com
===============================
 1 usls-2511.usls.edu (202.47.133.34) 2.386 ms 2.342 ms 2.289 ms
 2 206.151.136.241 (206.151.136.241) 20.239 ms 20.213 ms 20.213 ms
 3 bcd-2511.mozcom.com (206.151.138.65) 20.373 ms 20.454 ms 20.323 ms
 4 206.151.136.85 (206.151.136.85) 76.093 ms 38.286 ms 38.303 ms
 5 206.151.136.249 (206.151.136.249) 55.155 ms 51.266 ms 68.066 ms
 6 dns3.mozcom.com (202.47.132.4) 54.514 ms * 273.815 ms

traceroute to dagupan.mozcom.com
================================
 1 usls-2511.usls.edu (202.47.133.34) 2.441 ms 2.34 ms 2.43 ms
 2 206.151.136.241 (206.151.136.241) 21.392 ms 24.314 ms 20.206 ms
 3 bcd-2511.mozcom.com (206.151.138.65) 22.871 ms 58.361 ms 20.181 ms
 4 206.151.136.85 (206.151.136.85) 51.936 ms 38.195 ms 38.183 ms
 5 206.151.136.249 (206.151.136.249) 96.455 ms 51.131 ms 52.458 ms
 6 CS-MAKATI-S1.mozcom.com (202.47.132.250) 150.616 ms 84.555 ms 55.215 ms
 7 206.151.136.154 (206.151.136.154) 73.732 ms 71.802 ms 70.954 ms
 8 bitstop.dagupan.mozcom.com (206.101.69.1) 76.429 ms 143.586 ms 88.69 ms

*traceroute was taken on peak network usage

... [ francis vidal ] systems administrator, @usls, univ. of st. la salle
    ---------------------------------------------------------------------
    0973.220416 (cell) / +034.435.2324 mailto:francisv@mozcom.com
    http://www.lasaltech.com/~francis mailto:francis@usls.edu
    ---------------------------------------------------------------------
    P G P key available at ftp://ftp.usls.edu/pub/pgpkey/francis.pgp

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: Requires PGP version 2.6 or later.

iQCVAwUBMqkhVJ5a0kw2CHVdAQFV0wP/V5yCTXgMIcZf9eFq8RRWiHe5G29Ji+6u
bA1tK5ljJMjLbZnSREu1Om/nhydkx596kbxm/3uss2TNJ/vqDFSsR1pwJZ+pZjlS
Zdi0oM25YeQMnJ7OUgFeptt8DzKc6q8GQbF+e/zjMAa4yzKuDB19ISBhwbn3pQbM
Yf8fj1PfSUQ=
=bmiH
-----END PGP SIGNATURE-----
Received on Fri Dec 06 1996 - 23:57:57 MST