Re: [squid-users] best practice for transparent

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 08 Dec 2010 11:13:22 +1300

On 08/12/10 05:32, donovan jeffrey j wrote:
> greetings
>
> i recently updated my transparent proxy to sq 3.1.9, which also uses squidguard for url filters.

First "best practice" is to use the right terminology.

Your log traces says "Accepting intercepted HTTP connections at
10.0.2.3:3128" So they are NAT interception connections.

>
> this have been bogging down. browser always says ,.." waiting for google,... or waiting for www.abc.com
> I could have a dns issue or I could have a cache swap issue or a squidguard issue. I first wanted to make sure that running 3.1.9 transparent is the best version for the job. I had read a while back in a thread that v2.7 might be better than 3.1.x. Can anyone confirm ?

2.7 should not be.

I've not had anyone explicitly mention whether the NAT logic upgrades to
3.x worked or not in Mac. The BSD ones needed some extra fixes which
were done back around 3.1.6

> heres a snap shot of cache.log
>
> hook2:bin root# ulimit -n 2048
> hook2:bin root# squid -d1x
> hook2:bin root# 2010/12/07 11:12:34| Starting Squid Cache version 3.1.9 for i686-apple-darwin9.8.0...
<snip>
> 2010/12/07 11:12:35| Loaded Icons.
> 2010/12/07 11:12:35| Accepting intercepted HTTP connections at 10.0.2.3:3128, FD 217.
> 2010/12/07 11:12:35| HTCP Disabled.
> 2010/12/07 11:12:35| Squid modules loaded: 0
> 2010/12/07 11:12:35| Ready to serve requests.
<snip>

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.9
   Beta testers wanted for 3.2.0.3
Received on Tue Dec 07 2010 - 22:13:26 MST

This archive was generated by hypermail 2.2.0 : Wed Dec 08 2010 - 12:00:01 MST