Re: How to catch all web requests and other

Bob Stevenson wrote:

> a) The machine that is running squid is a Sun Ultra Enterprise 2
> with 256MB of memory but it seems inadequate to serve the web requests

This machine should be more than enought to handle only 200 users.

Squid version?
Solaris version/patchlevel?
Requests/second? (before it slows down)
Any Solaris TCP/IP tuning set?
What is the process size of Squid?

> b) squid.conf says that enabling httpd_accel_uses_host_header,
> "opens a big security hole". What are these security implications
> and how can they be avoided?

This comment is only relevant when running as a pure accelerator, not
proxy/combined mode. What the comment says is that Squid can be told to
go to any server when _uses_host_header is enabled (as if it was a
proxy). Protection is done with ACL rules if needed.

---
Henrik Nordström