Re: [squid-users] Invalid Request.Squid2.6S3 accelerate with SSL on Windows

From: fulan Peng <fulanpeng@dont-contact.us>
Date: Wed, 30 Aug 2006 19:21:07 -0400

Sorry, it found to be a type error. Squid -k only check grammar. No
spelling error. Now I can access more than one backends on https port.
This is the conf file.

Now the http won't work. I think I can fix it.

Thank you so much!

Fulan Peng.

http_port 127.0.0.1:80 vhost vport
https_port 443 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem
defaultsite=zyzg.org.ru
https_port 8443 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem
defaultsite=breakevilaxis.org
cache_peer breakevilaxis.org parent 80 0 originserver name=breakevilaxis
cache_peer zyzg.org.ru parent 80 0 originserver name=zyzg
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
access_log c:/squid/var/logs/access.log squid
debug_options ALL,9
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl breakevilaxis.org dstdomain breakevilaxis.org
acl zyzg.org.ru dstdomain zyzg.org.ru
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow zyzg.org.ru
http_access allow breakevilaxis.org
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
http_reply_access allow all
icp_access allow all
cache_peer_access zyzg allow zyzg.org.ru
cache_peer_access breakevilaxis allow breakevilaxis.org
visible_hostname ddint.org
coredump_dir c:/squid/var/cache

On 8/30/06, fulan Peng <fulanpeng@gmail.com> wrote:
> Please help, I can not have more than 2 backends.
> The following is the conf file. I can only have the second one. Squid
> -k parse is OK.
>
> Thanks a lot!
>
>
> http_port 127.0.0.1:80 vhost vport
> https_port 443 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem
> defaultsite=zyzg.org.ru
> https_port 8443 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem
> defaultsite=breakevilaxis.org
> cache_peer breakevilaxis.org parent 80 0 originserver name=breakevilaxis
> cache_peer zgzg.org.ru parent 80 0 originserver name=zyzg
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> cache deny QUERY
> acl apache rep_header Server ^Apache
> broken_vary_encoding allow apache
> access_log c:/squid/var/logs/access.log squid
> debug_options ALL,9
> refresh_pattern ^ftp: 1440 20% 10080
> refresh_pattern ^gopher: 1440 0% 1440
> refresh_pattern . 0 20% 4320
> acl breakevilaxis.org dstdomain breakevilaxis.org
> acl zyzg.org.ru dstdomain zyzg.org.ru
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl to_localhost dst 127.0.0.0/8
> acl SSL_ports port 443 563
> acl Safe_ports port 80
> acl Safe_ports port 21
> acl Safe_ports port 443 563
> acl Safe_ports port 70
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl CONNECT method CONNECT
> http_access allow zyzg.org.ru
> http_access allow breakevilaxis.org
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow all
> http_reply_access allow all
> icp_access allow all
> cache_peer_access zyzg allow zyzg.org.ru
> cache_peer_access breakevilaxis allow breakevilaxis.org
> visible_hostname ddint.org
> coredump_dir c:/squid/var/cache
>
>
> On 8/30/06, Henrik Nordstrom <henrik@henriknordstrom.net> wrote:
> > ons 2006-08-30 klockan 18:05 -0400 skrev fulan Peng:
> > > Yes. It's working now after I added defaultsite=<thebackend server domain name>
> > >
> > > But there is one problem: the https always go to http's backend. If I
> > > comment out the http port and put two in the https section, still
> > > there is only one backend I can access via Squid. It seems that one
> > > instance of Squid can only serve one backend?
> >
> > A single Squid can have as many backends you like, but it needs to be
> > told what to send where by cache_peer_access.
> >
> > Regards
> > Henrik
> >
> >
> >
>
Received on Wed Aug 30 2006 - 17:21:12 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Sep 01 2006 - 12:00:02 MDT