Re: [squid-users] delay_pool and external_acl problem

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 04 Jul 2012 16:51:46 +1200

On 4/07/2012 2:03 a.m., Mateusz Kamiński wrote:
> Hello,
> I am trying to build squid configuration but i fail with delay pools
> for external_acl's. I am running squid for multiple ip addresses and I
> have authentication per src ip or user/pass. I try to do delay_pool
> configuration for src->dst pair to limit transfer speed per second. I
> am using ip_user_check plugin for it and it seems it works but i
> cannot see delay. Here is part of my config:
>
> #delayed clients
> external_acl_type ip_delay2 ttl=30 negative_ttl=30 %SRC %DST
> /usr/local/squid/libexec/ip_user_check -f
> /usr/local/squid/etc/delay.conf
> acl delay_acl external ip_delay2
> http_reply_access deny delay_acl !delay_acl

Make that:
   http_access deny delay_acl !all

>
>
> In debug i can see that when i am trying to access %SRC -> %DST which
> matches my delay.conf file delay_acl returns 1. But i don't see any
> download slow down (i put there 50/50 to really see the limitation).
> But if i uncomment line #http_access deny delay_acl - request is
> denied - so i can verify that delay_acl works fine. Where is my
> mistake?
> I tried also to change delay_acl for normal (not external one) with :
> acl delay_acl src my_ip , and for this configuration delay_pools
> works fine limiting transfer speed. So it seems there is a problem
> with external_acl and delay_pool pair...

... or the timing of when you test delay_acl. See above.

Amos
Received on Wed Jul 04 2012 - 04:51:57 MDT

This archive was generated by hypermail 2.2.0 : Wed Jul 04 2012 - 12:00:02 MDT