[squid-users] Sibling cache peer for a HTTPS reverse proxy

From: Makson <cdlee123_at_gmail.com>
Date: Thu, 24 Jul 2014 01:41:21 -0700 (PDT)

We have a Squid server A configured as a HTTPS reverse proxy for our internal
application server, now we want to set up a Squid server B to use A as a
sibling cache peer, but never get it work, when we download file through
server B, it always download the file from parent instead of sibling, can
you tell me how to troubleshoot it? Or sibling cache peer is not an option
for a HTTPS reverse proxy?

# Squid server A
cache_replacement_policy lru
memory_replacement_policy lru
maximum_object_size 1024 MB
maximum_object_size_in_memory 16 MB
cache_dir aufs /usr/local/squid/var/cache 614400 256 256
cache_mem 40960 MB
cache_store_log none
cache_peer app.domain parent 9443 0 no-query originserver ssl
login=PROXYPASS sslflags=DONT_VERIFY_PEER
cache_peer_access app.domain allow all
coredump_dir /usr/local/squid/var/cache
http_port 3128
http_access allow all
icp_port 3130
icp_access allow all
https_port 9443 cert=/usr/local/squid/etc/server.pem accel
key=/usr/local/squid/etc/privkey.pem vhost
refresh_pattern . 0 20% 4320
buffered_logs on
visible_hostname servera.domain
access_log none

# Squid server B
cache_replacement_policy lru
memory_replacement_policy lru
maximum_object_size 1024 MB
maximum_object_size_in_memory 16 MB
cache_dir aufs /usr/local/squid/var/cache 614400 256 256
cache_mem 40960 MB
cache_store_log none
cache_peer app.domain parent 9443 0 no-query originserver ssl
login=PROXYPASS sslflags=DONT_VERIFY_PEER
cache_peer servera.domain sibling 3128 3130 weight=10
cache_peer_access app.domain allow all
cache_peer_access servera.domain allow all
coredump_dir /usr/local/squid/var/cache
http_port 3128
http_access allow all
icp_port 3130
icp_access allow all
https_port 9443 cert=/usr/local/squid/etc/server.pem accel
key=/usr/local/squid/etc/privkey.pem vhost
refresh_pattern . 0 20% 4320
buffered_logs on
visible_hostname serverb.domain
access_log none

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Sibling-cache-peer-for-a-HTTPS-reverse-proxy-tp4667011.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Thu Jul 24 2014 - 08:41:23 MDT

This archive was generated by hypermail 2.2.0 : Thu Jul 24 2014 - 12:00:05 MDT