Re: Disable direct accesses

From: Duane Wessels <wessels@dont-contact.us>
Date: Tue, 08 Apr 97 08:26:57 -0700

nico@cineca.it writes:

>You may set the inside_firewall option to none so that all requests are
>resolved through neighbor (siblings and parents) proxies.i... but
>this way your top level proxy would become a single point of failure since
>your second level proxies won't fetch objects directly if its parents are
>down... Without that squid sometimes still fetches objects directly even though
>source_ping is off and parents are weighted with are very high values...
>How come Duane ?

Maybe the ICP reply failed to arrive. If you have no firewall restrictions,
Squid fetches directly when ICP replies do not come back from the neighbors.

Duane W.
Received on Tue Apr 08 1997 - 08:36:37 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:34:57 MST