[squid-users] Squid cache cgi-bin

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 25 Feb 2009 23:34:32 +1300

projproxy_at_libero.it wrote:
>
>> ----Messaggio originale----
>> Da: projproxy_at_libero.it
>> Data: 25-feb-2009 8.46
>> A: <squid3_at_treenet.co.nz>
>> Cc: <squid-users_at_squid-cache.org>
>> Ogg: R: Re: [squid-users] R: Re: [squid-users] Squid cache cgi-bin
>>
>> ok....
>>
>> i report here what my con file (the only mistake I found is about the
>> coredump_dir that it´s still in windows format):
>>
>>
>> acl all src all
>> acl SSL_ports port 443
>> acl Safe_ports port 8080 # http
>> acl Safe_ports port 443 # https
>> acl CONNECT method CONNECT
>>
>> acl server_sites dstdomain domain.server.org
>>
>> external_acl_type squid_ldap children=50 %LOGIN usr/sbin/squid_ldap_group -R
> -
>> v "3" -s "sub" -b "dc=dom, dc=org" -f "(&(objectClass=person)
> (sAMAccountName=%v)
>> (memberOf=cn=%a,ou=one,ou=twon,ou=three,dc=four,dc=five,dc=org))" -d -D
>> "cn=......." -w "xxxxx" -h "another.server.org" -p "3268"
>>
>> acl static urlpath_regex .gif .jpg .html
>> acl authorized_one external squid_ldap one
>> acl authorized_two external squid_ldap two
>> acl authorized_three external squid_ldap three
>> acl authorized_four external squid_ldap four
>> acl authorized_five external squid_ldap five
>> acl authorized_six external squid_ldap six

>> acl fly urlpath_regex some part to match in the eddress

Not sure what you mean by 'eddress' but a really hope your patterns
here actually only try to match the **urlpath_** part of URLs. Not the
address or domain, or you will find those patterns don't match.

>> acl password proxy_auth REQUIRED
>> cache allow static

default action of 'cache' is to cache everything possible.

default action when a test sequence ends in 'allow' is to implicitly
follow that with 'deny all'

So... the above means ONLY cache files matching the regex pattern
".+gif.*|.+jpg.*|.+html.*" in its URL-path:

either, add "cache allow all" explicitly, or remove all cache lines.

>>
>> cache_peer_access server allow server_sites
>> cache_peer_access server deny all
>>
>> cache_peer 1xx..x.x.xx parent 81xx 0 no-query originserver name=server

This line is supposed to be above the cache_peer_access ones.

>>
>> http_access allow password server_sites authorized_one
>> http_access allow password server_sites authorized_two fly
>>
>> http_access deny all
>>
>> cache_dir ufs /var/cache/squid 100 16 256

100 MB of cache. Is it big enough?

>>
>> refresh_pattern ^ftp: 1440 20% 10080
>> refresh_pattern ^gopher: 1440 0% 1440
>> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
>> refresh_pattern . 0 20% 4320
>>
>> acl apache rep_header Server ^Apache
>>
<snip extra coment area>
>>
>>
>>> ----Messaggio originale----
>>> Da: squid3_at_treenet.co.nz
>>> Data: 25-feb-2009 3.51
>>> A: "projproxy_at_libero.it"<projproxy_at_libero.it>
>>> Cc: <squid-users_at_squid-cache.org>
>>> Ogg: Re: [squid-users] R: Re: [squid-users] Squid cache cgi-bin
>>>
>>> projproxy_at_libero.it wrote:
>>>> Hi,
>>>>
>>>> first thanks already for your answer.
>>>>
>>>> I´m using squid 3 on SLES 11 server, is working as reverse proxy in
> front
>> of
>>>> a web server that takes the role of parent.
>>>>
>>>> The configuration works properly for my reverse purpose.
>>>>
>>>> just the caching doesn´t work.
>>>>
>>>> In order in squid.conf
>>>>
>>>> -auth parameter (line 294)
>>>> -acl (line 627)
>>>> -cache or no_cache(line 645)
>>>> -cache_peer_access (line 692)
>>>> -http_access (line 696)
>>>> -http_port and cache_peer (ca. line 1138)
>>>> -hierarchy_stop_list (line 1723)
>>>> -Refresh_pattern (line 2764)
>>>>
>>>> I mainteined the original conf file and in this way I inserted in the
>> right
>>>> place my instructions.
>>>> I f there´s any kind of mistake (or obsolete instructions) please tell
> me.
>> I
>>>> don´t understand if there´s any kind of instrauction that create a
>> conflict for
>>>> caching.
>>>> Thanks in advance
>>> I meant the details of those lines.
>>>
>>> For example the output of:
>>> grep -E
>>> "^(acl|http_access|cache|no_cache|cache_peer|refresh_pattern)" squid.conf
>>>
>>> Amos
>>>
>>>>
>>>>> ----Messaggio originale----
>>>>> Da: squid3_at_treenet.co.nz
>>>>> Data: 23-feb-2009 23.38
>>>>> A: "projproxy_at_libero.it"<projproxy_at_libero.it>
>>>>> Cc: <squid-users_at_squid-cache.org>
>>>>> Ogg: Re: [squid-users] Squid cache cgi-bin
>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> I have some questions about squid as reverse proxy.
>>>>>>
>>>>>> The web server I´m accelerating (cache_peer....) has dynamic content
>>>>>> (cgi-
>>>>>> bin).
>>>>>>
>>>>>> At the beginning I left the default cache refresh values (so for cgi-
>> bin
>>>> \
>>>>>> /
>>>>>> ? has a value "0") and the hierarchy list for cgi-bin.... and
>> "no_cache
>>>>>> deny
>>>>>> all".
>>>>>>
>>>>>> Now this pages contain some elements like .gif that I´d like to cash:
>>>>>> these
>>>>>> elements have not the path http://nameserver/cgi-bi/... but a path
> like
>>>>>> http:
>>>>>> //nameserver/icons...
>>>>>>
>>>>>> I tried with a normal ACL elements url_regex .gif .html .jpeg
>>>>>>
>>>>>> and then
>>>>>>
>>>>>> cache allow static
>>>>>>
>>>>>> But it seems squid is not caching nothing!!!
>>>>>>
>>>>>> Could you give me any kind of advice?
>>>>>>
>>>>>> Thanks in advance
>>>>>>
>>>>> It's a little unclear what config you are having trouble using.
>>>>> The various options you mention above are a mix of current, obsolete,
>>>>> deprecated, and irrelevant.
>>>>>
>>>>> But the use of correct options in the correct order is important for a
>>>>> working Squid.
>>>>>
>>>>> What version are you using?
>>>>>
>>>>> And in the order listed in yoru squid.conf, what lines do you have that
>>>>> start with:
>>>>> cache, no_cache, refresh_pattern, acl, or cache_peer*
>>>>>
>>>>>
>>>>> Amos
>>>>>
>>>>>
>>>>
>>>
>>> --
>>> Please be using
>>> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
>>> Current Beta Squid 3.1.0.5
>>>
>>
>
>

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.5
Received on Wed Feb 25 2009 - 10:34:14 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 25 2009 - 12:00:02 MST