Re: Squid 1.2beta22, ASN's and always_direct

Mark Reynolds writes:

>Greetings.
>
>I have recently quite successfully switched from squid 1.1 to 1.2
>
>I'm now exploring some of the new options available.
>
>Being a member of a local peering point, I've often thought
>about forcing all local web sites to be via non cached, direct
>accesses.
>
>The new dst_as acl's seem to fit the job.
>
>This is what I've tried, with no visible changes that I would have
>expected.
>
>acl local_asn dst_as 7498 7603 4802 4854 7586 7635 7703 9301
>always_direct allow local_asn
>
>Is this configuration allowed?
>Is it the best way to do it?

That should work.

>Has anyone else tried this?
>What are the best options for as_whois_server ?

That I'm not sure about. The server at whois.ra.net provides
AS->network lookups. I'm not sure which other servers do.
whois.ripe.net does not seem to provide it.

>What should I be seeing in the logs to show asn lookups?

Enable debugging for section 53.

        debug_options ALL,1 53,9

I should add some cache manager interface to dump the AS # stuff
in Squid.

Duane W.
Received on Wed Jul 15 1998 - 14:02:18 MDT