Re: Choosing neighbor cache

Jens-s. Voeckler wrote:

> BTW, what is the difference between "deny endings" and "allow !endings"?

How it interacts with other cache_peer_access entries for the same peer.

ACL lists are searched from top down until a match is found. When a
match is found then allow/deny status of that match is the final answer.

If you only have one ACL for the peer then it's the same.

cache_peer_access your1.neighbour.cache allow endings
cache_peer_access your1.neighbour.cache deny all

vs

cache_peer_access your1.neighbour.cache deny !endings
cache_peer_access your1.neighbour.cache allow all

(the last ACL rule is implicit. Squid negates the allow/deny status of
the last entry if no match is found).

---
Henrik Nordstrom
Spare time Squid hacker