Re: [squid-users] http 1.0

From: Matthias Henze <lists@dont-contact.us>
Date: Tue, 31 Jan 2006 23:01:49 +0100

reading this, please keep in mind: an old squid 2.4 works without any problems

Am Montag 30 Januar 2006 15:57 schrieben Sie:
> > ok, thanks
> >
> > then i've to some otehr investiagtions. my core problem is, that i've
> > upgraded from squid 2.4 to 2.5. with 2.4 every thing works as expected.
> > requests are handed over to the upsream proxy (genugate, a comercial
> > firewall) and pages are displayed as expected. with squid 2.5 on many
> > pages there are missing several pictures
>
> - Check squid´s access.log for these missing objects.

redirect problem:

1138692139.709 93 172.27.1.2 TCP_MISS/200 662 GET http://www.sauers.info/
mailadmin DEFAULT_PARENT/10.10.1.1 text/html
1138692141.034 69 172.27.1.2 TCP_MISS/200 684 GET
http://www.sauers.info/favicon.ico mailadmin DEFAULT_PARENT/10.10.1.1
text/html
1138692149.838 576 172.27.1.2 TCP_MISS/302 417 GET
http://sauers.dyndns.org/webmail/ mailadmin DEFAULT_PARENT/10.10.1.1
text/html
1138692151.151 1154 172.27.1.2 TCP_MISS/200 2862 GET
http://sauers.dyndns.org/webmail/src/login.php mailadmin
DEFAULT_PARENT/10.10.1.1 text/html
1138692152.462 91 172.27.1.2 TCP_MISS/200 684 GET
http://www.sauers.info/favicon.ico mailadmin DEFAULT_PARENT/10.10.1.1
text/html
1138692160.522 238 172.27.1.2 TCP_MISS/503 1477 POST
http://sauers.dyndns.org/webmail/src/redirect.php mailadmin NONE/- text/html
1138692161.971 69 172.27.1.2 TCP_MISS/200 684 GET
http://www.sauers.info/favicon.ico mailadmin DEFAULT_PARENT/10.10.1.1
text/html

in the browser i see: (111) connection refused

missing pictures:

1138692588.083 61 172.27.1.2 TCP_REFRESH_HIT/304 310 GET
http://www.n-tv.de/ mailadmin DEFAULT_PARENT/10.10.1.1 -
1138692590.189 40 172.27.1.2 TCP_REFRESH_HIT/304 309 GET
http://www.n-tv.de/css/2005/default.css mailadmin DEFAULT_PARENT/10.10.1.1 -
1138692590.432 236 172.27.1.2 TCP_MISS/503 1423 GET http://www.n-tv.de/11?
mailadmin NONE/- text/html
1138692591.272 242 172.27.1.2 TCP_MISS/503 1433 GET
http://www.n-tv.de/17.html? mailadmin NONE/- text/html
1138692591.837 40 172.27.1.2 TCP_REFRESH_HIT/304 310 GET
http://www.n-tv.de/js/ip/global/adman/css/global_adntv.js mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692591.992 197 172.27.1.2 TCP_MISS/503 1477 GET
http://ntv.ivwbox.de/cgi-bin/ivw/CP/ntv/tag/home? mailadmin NONE/- text/html
1138692592.594 39 172.27.1.2 TCP_REFRESH_HIT/304 310 GET
http://www.n-tv.de/js/ip/global/adctrl_ntv.js mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692593.356 48 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/l.gif mailadmin DEFAULT_PARENT/10.10.1.1 -
1138692593.395 84 172.27.1.2 TCP_REFRESH_MISS/200 976 GET
http://www.n-tv.de/now.js mailadmin DEFAULT_PARENT/10.10.1.1
application/x-javascript
1138692593.402 88 172.27.1.2 TCP_REFRESH_HIT/304 309 GET
http://www.n-tv.de/s/2004/navi/head_bg.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.148 42 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/2004/symbole/teaser_newsletter.gif mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692594.158 48 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/594524_src_path.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.179 58 172.27.1.2 TCP_REFRESH_MISS/200 1345 GET
http://www.n-tv.de/img/608135_src_path1.gif mailadmin
DEFAULT_PARENT/10.10.1.1 image/gif
1138692594.212 89 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/608135_src_path2.gif mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692594.237 87 172.27.1.2 TCP_REFRESH_MISS/200 2042 GET
http://www.n-tv.de/img/608135_src_path3.jpg mailadmin
DEFAULT_PARENT/10.10.1.1 image/jpeg
1138692594.241 81 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/567182_src_path.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.244 63 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/594525_src_path.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.278 63 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/leer.gif mailadmin DEFAULT_PARENT/10.10.1.1 -
1138692594.292 53 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/557454_src_path.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.300 58 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/554775_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.310 64 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/symbole/bilder.gif mailadmin DEFAULT_PARENT/10.10.1.1 -
1138692594.420 141 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/435900_src_path.gif? mailadmin NONE/- text/html
1138692594.420 127 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/628589_src_path.jpg? mailadmin NONE/- text/html
1138692594.421 110 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/628510_src_path.jpg? mailadmin NONE/- text/html
1138692594.431 130 172.27.1.2 TCP_REFRESH_MISS/200 11753 GET
http://www.n-tv.de/img/437362_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.534 112 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/628662_src_path.jpg? mailadmin NONE/- text/html
1138692594.535 112 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/628566_src_path.jpg? mailadmin NONE/- text/html
1138692594.557 133 172.27.1.2 TCP_REFRESH_MISS/200 15456 GET
http://www.n-tv.de/img/537328_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.593 160 172.27.1.2 TCP_REFRESH_MISS/200 12167 GET
http://www.n-tv.de/img/312600_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.597 62 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/550259_src_path.gif mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.654 59 172.27.1.2 TCP_REFRESH_MISS/200 4113 GET
http://www.n-tv.de/img/628560_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.663 126 172.27.1.2 TCP_REFRESH_HIT/304 360 GET
http://i.i4o.de/aff/templates/t_v1/Ligatus-Logo.gif mailadmin
DEFAULT_PARENT/10.10.1.1 image/gif
1138692594.704 49 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/symbole/pfeil_weiss.gif mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692594.709 109 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/343022_src_path.jpg? mailadmin NONE/- text/html
1138692594.709 150 172.27.1.2 TCP_MISS/503 1511 GET
http://x.dimaso.net/cgi-bin/ivw/CP/111-7-6-10-1/823-200x1067-245/? mailadmin
NONE/- text/html
1138692594.783 77 172.27.1.2 TCP_REFRESH_MISS/200 4249 GET
http://www.n-tv.de/img/627849_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.807 96 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/625820_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.811 100 172.27.1.2 TCP_REFRESH_MISS/200 3752 GET
http://www.n-tv.de/img/626848_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.855 190 172.27.1.2 TCP_REFRESH_MISS/200 17826 GET
http://www.n-tv.de/img/622905_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.870 62 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/622578_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.891 79 172.27.1.2 TCP_REFRESH_MISS/200 5291 GET
http://www.n-tv.de/img/622824_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.894 109 172.27.1.2 TCP_REFRESH_MISS/200 3865 GET
http://www.n-tv.de/img/626319_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.928 71 172.27.1.2 TCP_REFRESH_MISS/200 2945 GET
http://www.n-tv.de/img/621365_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
image/jpeg
1138692594.938 66 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/620048_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.955 62 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/620043_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.959 63 172.27.1.2 TCP_REFRESH_HIT/304 236 GET
http://www.n-tv.de/img/620042_src_path.jpg mailadmin DEFAULT_PARENT/10.10.1.1
-
1138692594.979 49 172.27.1.2 TCP_REFRESH_HIT/304 308 GET
http://www.n-tv.de/s/symbole/footer_tag.gif mailadmin
DEFAULT_PARENT/10.10.1.1 -
1138692595.133 194 172.27.1.2 TCP_MISS/503 1433 GET
http://www.n-tv.de/17.html? mailadmin NONE/- text/html
1138692596.923 239 172.27.1.2 TCP_MISS/503 1433 GET
http://www.n-tv.de/17.html? mailadmin NONE/- text/html
1138692597.762 211 172.27.1.2 TCP_MISS/503 1629 GET
http://ad.de.doubleclick.net/adj/www.nntv.de/home;theme=home;pack=tag;u=www.nntv.de-ntv/tag/home;sz=468x60;ptile=1;ord=26933?
mailadmin NONE/- text/html
1138692598.633 238 172.27.1.2 TCP_MISS/503 1629 GET
http://ad.de.doubleclick.net/adj/www.nntv.de/home;theme=home;pack=tag;u=www.nntv.de-ntv/tag/home;sz=450x30;ptile=2;ord=26933?
mailadmin NONE/- text/html
1138692598.872 235 172.27.1.2 TCP_MISS/503 1627 GET
http://ad.de.doubleclick.net/adj/www.nntv.de/home;theme=home;pack=tag;u=www.nntv.de-ntv/tag/home;sz=10x10;ptile=3;ord=26933?
mailadmin NONE/- text/html
1138692599.614 278 172.27.1.2 TCP_MISS/503 1651 GET
http://ad.de.doubleclick.net/adj/www.nntv.de/home;theme=home;pack=tag;dcopt=ist;u=www.nntv.de-ntv/tag/home;sz=120x600;ptile=4;ord=26933?
mailadmin NONE/- text/html
1138692611.712 238 172.27.1.2 TCP_MISS/503 1465 GET
http://www.n-tv.de/img/435900_src_path.gif? mailadmin NONE/- text/html

the following URL's are the problem:

http://www.n-tv.de/img/435900_src_path.gif?
http://www.n-tv.de/img/628589_src_path.jpg?
http://www.n-tv.de/img/628510_src_path.jpg?

and so on ... 6 at all on this page.

> - Try setting client_persistent_connections to ´off´

did not help :(

>
> > and when there is a http redirect on a pagessquid 2.5 stats:
> > (111) connection refused.
>
> - Check access.log for this request. Identify the attempted-port
> for the http connection.

see logs above

> - Make sure your firewall rules are correct; in all cases.

no filters - and, 2.4 works without any problems. both are configured like
this:

cache_peer 10.10.1.1 parent 8000 0 no-query default

>
> > i've posted this http 1.0 question, as the firewall vendor told me, that
> > this is often a http 1.1 issue ...
> >
> > any suggestions ?
>
> - Which version 2.5 version are you using ?

squid -v
Squid Cache: Version 2.5.STABLE9
configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin
--sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid
--localstatedir=/var/spool/squid --datadir=/usr/share/squid --enable-async-io
--with-pthreads --enable-storeio=ufs,aufs,diskd,null --enable-linux-netfilter
--enable-arp-acl --enable-removal-policies=lru,heap --enable-snmp
--enable-delay-pools --enable-htcp --enable-poll --enable-cache-digests
--enable-underscores --enable-referer-log --enable-useragent-log
--enable-auth=basic,digest,ntlm --enable-carp --with-large-files
i386-debian-linux

>
> M.

-- 
Matthias Henze                matthias@mhcsoftware.de
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH          voice: +49-(0)9533-92006-0
Fichtera 17                  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germany    e-Mail: info@mhcsoftware.de
- - - - - - - - - - - - - - - - - - - - - - - - - - -
Received on Tue Jan 31 2006 - 15:01:26 MST

This archive was generated by hypermail pre-2.1.9 : Wed Feb 01 2006 - 12:00:02 MST