RE: [squid-users] any work arounds for bug 2176

From: Bill Allison <bill.allison_at_bsw.co.uk>
Date: Wed, 16 Dec 2009 07:57:21 -0600

Sorry - that was misleading. I've had persistent_connection_after_error set on throughout my testing. I get the same error as Brett only when the body of the post is much greater than that which causes the post to fail.

I'd like to correlate network traces with debug output and would appreciate suggestions as to which debug_options would include all possibly relevant info

-----Original Message-----
From: Bill Allison [mailto:bill.allison_at_bsw.co.uk]
Sent: 16 December 2009 12:07
To: Amos Jeffries; squid-users_at_squid-cache.org
Subject: RE: [squid-users] any work arounds for bug 2176

"Do you get the same result as Brett with persistent_connection_after_error set to ON?"

Yes - I've had it set on throughout my testing.

-----Original Message-----
From: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Sent: 16 December 2009 10:46
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] any work arounds for bug 2176

Bill Allison wrote:
> Amos
>
> I've done some more testing / tracing with this - one finding and one question to help me do more.
>
> My finding is that the response to a large POST varies - put simply, a small (< 5Kb) POST succeeds, larger POST pops up UID/PWD request, large (> 80Kb) gives the INVALID VERB error that Brett reported. There is no exact borderline size. Sometimes a 6Kb upload will succeed, sometimes the max is around 4Kb. This is on an otherwise idle test server. So far I've only tcpdumped the first two cases and can see that in the middle case, the proxy issues FIN packets to server and client just after receiving and passing on the second 401 response from the server. A feature, if not a factor, common to failures, at least in traces taken so far, is that transfer of the upload to the server begins before receipt of the upload from the client has completed. Comment please?
>
> My question - I'd now like to marry up tcpdump traces with squid debug output. Having read up on debug_options, I've used 5,6 17,6 33,6 41,6 48,6 58,6 73,6 85,6 87,6 88,6. What would be a better set?
>
> For the avoidance of doubt - I'm a rank amateur (as if you haven't already guessed :-) ) but really need to find a fix or workaround, despite knowing that Microsoft state that IIS NTLM authentication can not work through proxy servers. Any pointers gratefully received.
>
> Kind regards
> Bill A.
>

Hmm, I wonder...

Do you get the same result as Brett with
persistent_connection_after_error set to ON?

The default in all Squid is OFF which forces the connection closed on
all 4xx replies regardless of the patched Squid now seeing it as a
viable connection.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
   Current Beta Squid 3.1.0.15
-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Received on Wed Dec 16 2009 - 13:57:42 MST

This archive was generated by hypermail 2.2.0 : Wed Dec 16 2009 - 12:00:02 MST