Re: SQUID 2.2-STABLE5 ACL no-cache nitemarish problem.

From: Andre Albsmeier <andre.albsmeier@dont-contact.us>
Date: Sun, 30 Apr 2000 17:23:07 +0200

On Sat, 29-Apr-2000 at 14:59:10 +0200, Henrik Nordstrom wrote:
> Andre Albsmeier wrote:
>
> > > No. no_cache is a "fast" ACL check (unless one of my patches are
> >
> > Hmm, could you please explain briefly what a "fast" ACL check is?
> >
> > > applied), which makes dst a rather unreliable ACL to use.. and since one
> >
> > Is dst always unrealiable? Sorry for asking but I always thought
> > that a dst based acl either matches or not...
>
> "fast" ACL checks cannot wait for lookups to complete. ACL types which
> requires a lookup to be evaluated might return false even if they would
> have evaluated to true if the lookup had completed. Access lines
> (no_cache allow/deny ...) with uncompleted ACL's are ignored.
>
> dst requires a DNS lookup unless the DNS data is already cached in
> Squid.

Hmm, I see. Thanks for explaining. I have now converted the related
no_cache lines now to the dstdomain type although that is not as
simple as using dst.

Thanks again,

        -Andre
Received on Sun Apr 30 2000 - 09:26:06 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:53:07 MST