Re: [squid-users] Carp is resulting in 403s

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 07 Aug 2008 02:13:20 +1200

Adrian Chadd wrote:
> First thing to note - if you're going to use Squid-3.0, at least use
> the most recent Squid-3.0.STABLE snapshot.
>
> Second thing to note - the wikimedia guys are using Squid-2.6 at the
> present time; perhaps the CARP support is slightly different between
> 2.6/2.7 and your Squid-3.0 snapshot.

Possibly. Though the latest 3.0.STABLE8 has the same CARP.

Looks to me like a mistake in testing URI:
    http://box4_test_eth0/index21.html

If apache knows its supposed to be authoritative for the domain
"box4_test_eth0" things would be okay. But I suspect its not.

Also there is a forwarding loop going on to confuse things further.

Note that the mediawiki guys have two layers of Squid. The routing layer
and the caching layer. The routing layer are the ones configured saying
CARP each parent on the caching layer. The caching layer are configured
saying peer from apache. Only 'parents' at each level going upwards.

Your single-layer setup needs the squid to be _siblings_ (carp should
work the same between siblings as between parents). With only the apache
as 'default' parent.

Also;
  DNS needs to be configured for a test domain pointing at the squid IP.
This domain name needs to be configured in apache as the public FQDN
being served. Maybe in squid as the defaultsite= , but not as any of the
server names. It definately MUST be the domain used in testing URIs.

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE8
Received on Wed Aug 06 2008 - 14:13:16 MDT

This archive was generated by hypermail 2.2.0 : Thu Aug 07 2008 - 12:00:02 MDT