Using Squid To Speed Things Up
Mar 18, 2007I've been hearing other admins talk about using squid to speed thins up on web servers. Yes, not as a network proxy, but as simple cache engine for dinamic sites.
Any experience with this?
I've been hearing other admins talk about using squid to speed thins up on web servers. Yes, not as a network proxy, but as simple cache engine for dinamic sites.
Any experience with this?
I'm not sure if this is correct place to post this, but I had a look round and couldn't see anything particularly appropriate.
Can someone point me in the right direction... give me a link or some advice... I want to learn about 302 pages, 301 pages and other types of pages.
I read that 302 pages may mean a website's traffic is being redirected by someone else...?
Obviously, I want to know if someone is sneakily redirecting my traffic... and I need to protect myself against it.
I have been researching the vps market for a month or so now and have started to compile a list of questions to put to vps providers who get short listed. I would love some contributions!
1) What is the cpu and how is cpu capacity distributed, by account number limits, by assigning a certain number of mhz, is the asisgned capcity burstable?
2) ram is usually clearly advertised but who scalable is it? Can you add just extra ram or do you need to upgrade to the next package. Is it burstable and with what constraints.
3) are there any limits for the number of processes (shared hosting providers may limit processes to only a few, 15 for instance before terminating them). This isnt advertsised but need to be answered for dynamic sites with high traffic.
4) Number of simaltanious connections, both from individual Ips to the sites/account or to pop3 accounts. If the pop3 account sim con is low its will be annoying when trying to donwlaod email from several of your sites at the same time....attempts after the X number will fail.
5) Will your account have assigned bandwidth or will you just be sharing whatever connection 10/100mbps with the other uses on the server. This isnt such a big deal as a lot of servers will be streched to output 100mbps of data. If the connection is a 10mbps one then its much more important.
6) if you're used to a certain type of control panel make sure they have it and at what possible extra cost.
7) Check their terms and conditions for liability regards lost data. I chose a hosting company beofre because of their superior back up system, turns out they didnt use it and I lost 5 weeks of data (about $4000 loss for me). Their t & C avioded libility for any losses inspite of the fact that they advertises the b/u facility as a special feature.
8) quiz them on "Monitoring" and "Management". Us hosting novices may see these as the same thing but hosting companies do not. Monitoring is knowing that something is wrong, management is doing something about it. Many vps providers advertise full management but wait to be asked to fix problems that could have been lossing you money for days till one of your kind users lets you know.
9) What is their infrastructure...power, location, connectivity redundency like (ie how many T1,2 or 3 do they have and is that enough).
10) Support. Is it in house or outsourced....the later is bad as they are usually given little power to do anything and you have to wait longer for an inhouse guy to get off his lazy boy.
11) Do they limit the number of emails per period (ie like 500 per hour). This wont affect some but for those of us who have large memberships to send newsletters to this is a non starter.
I think it sad on one hand..many hosts complain about users crashing/causing problems for other users on the node they are on..yet..this topic has never been covered to my knowledge.
I can fix that.
OK..the most important thing is to *NOT* try and install windows updates from Microsoft. I have heard of it crashing the entire node. Do not run Windows update either. These updates come from sw-soft and will be installed by your host. nothing for you to do here.
OK...here's the list so far of what else not to install:
1) Hard drive encryption software
2) True RRAS VPN access software
3) Antivirus software
4) Virtual NIC software
5) Virtual Drive software
By all means..if you have any additions to this list..
I'm currently a customer of The Planet and have been now for about 3-4 years, I've been very pleased with their service and their hardware. However I'm getting to the point where I'd like to upgrade my server and their upgrade prices as like most any other datacenter are 100-200% more then retail. While I'm not against people making money, this to me seems a bit to much.
So I'm considering paying a bunch of money up front to buy a new Dell 1950 PowerEdge server, and in doing so I need to find a company that can colo the new server. However I know a little about dedicated servers but nothing about colo or where to even start. I've found a few companies here in Lexington, KY as well as Louisville, KY and a few other companies in surrounding areas but I don't know the slightest thing I should be asking about. When searching for a dedicated machine it was easy - bandwidth and system specs.
What are a good list of questions I should be asking these companies when I call them for prices and availability?
My friend asked me that, "Hey! How are you doing? I am thinking about buying hosting from this new-webhosting-company-to-me.com . What do you think?"
I replied him that,
"Well, I had a server with them.. Let me tell you something about them,"
"Value for money: 4/5 points" (their hardwares are worthy)
"Setup Time: 3/5 points" (they took 2 days to setup. But i read 24 hours setup time on their homepage)
"Friendly Support: 5/5" (those dudes were skill full and friendly when i asked for os reinstall and other support requests)
"Datacenter/Infrastructure: 4/5" ("good network and I got 2 hours downtime only once")
==================================
Well, I said above 4 things to consider, before buying from a host.
What would be your top 5 considerations about any host to recommend your friend?
We are too small needswise for even a half rack. Even a 1/4 rack would be overkill but nontheless, options in the area are limited to even *owned-enclosed* 1/4 racks from the colo facility itself.
The local facilities that would fit our needs spacewise are probably going to fit this in a full rack with space that we purchase against.
My concern is the security of *our* -- the customer equipment. Read alot of horror stories and would hate to end up one day finding out that whatever provider we choose was behind on bills, etc and we have X days to grab equipment from the facility, etc.
I am looking to colo SAN equipment, which is almost a triple digit box.
As per the last thread, I cleaned this up a little more, I welcome more comments as we make this the best it can be!
-------------------
Top Ten Things to Consider when choosing a Datacenter
Redundant Power
A minimum of N+1 power on critical systems (UPS and Generators) should be an absolute requirement for your business; however this doesn’t mean there aren’t points of failure. Not all power distribution is the same so demand a copy of your provider’s power map. 2N or greater systems is the only practical way to prevent failure. Definitions of redundant power can vary so demand to see a map that shows what it is truly redundant to. True B power should be redundant to the street.
Redundant Cooling
Redundant means more than just N+1 CRAH or CRAC units. If the facility has chilled water demand either a loop feed bi-directional system or a completely redundant pipe. This allows for maintenance on the pipe without taking the system down. Other considerations include redundant chillers, pumps, valves, controls, and electrical.
Network Carriers
At a minimum you should require a facility with multiple on site carriers. Competition drives pricing, therefore; by being in a carrier neutral facility with access to multiple providers, you increase your bottom line and decrease risk. Fiber should have diverse entrance paths to the building as well.
Location
The risk of system outage is significantly reduced by placing your servers in a datacenter that is located in a disaster free area. The threat of natural disaster such as tornadoes, hurricanes, earthquakes, and wildfires can be easily thwarted by choosing a datacenter that does not reside in a coastal or storm centered region. Also consider the cost and availability of power when selecting your location.
Security
It is important to demand accountability from your Datacenter Operator. While two-factor authentication is good, the most secure datacenters enforce three-factor authentication: something you have, something you are, and something you know. Man traps to avoid pass-back and tailgating at all points of ingress and egress should also be high on your list of requirements.
Support
Do not risk your business to an unmanned facility. Require a minimum of 2 remote hands engineers and ensure the datacenter has certified professionals on site at all times. Don’t be fooled by datacenters who hire “button pushers.” Remember that your infrastructure lies in their hands during critical moments.
Flexibility to meet your business needs
Don’t pay for a datacenter that is everything to everyone; in other words, avoid paying for services you don’t require. And do plan for growth, as your business grows, you want a datacenter that grows with you.
Vendors and Partners of the Datacenter
Often times the datacenter operator has relationships established with vendors. Leveraging these relationships can save you time and money compared to working with solution providers.
Service
Be sure to consider any other services the datacenter may offer you with regard to office space, engineering services, consulting services, customer accessibility, remote hands, etc.
Standards
The datacenter you choose should be SAS 70 Type II compliant. If your business deals with online payment transactions ensure that the datacenter meets the physical and environmental controls necessary for Payment Card Industry (PCI) Data Security Standards.
How many of you cpanel folks are using the new cpanel 11 "EasyApache 3" to manage apache/php on your servers? (Instead of doing things manually?)
We have always managed our apache and php configs manually, because cpanel was "under-powered" for the task.
However, with this new EasyApache 3 that is included with cpanel 11, it seems cpanel might finally have figured things out.
How many of you have switched over from doing things yourself manually to using EasyApache to manage your PHP config?
I have a shared hosting account on dreamhost
It has php and others installed but it allows custom installations for a number of reasons (control of the php.ini file, ...).
I have shell and ftp access to /home/username/ where my websites are
(/home/username/domain.ltd)
I installed php 5.2.9 under /home/username/php5,
I also installed ffmpeg but I ran into troubles installing ffmpeg-php.
Now I would like to start over, I'm not very advanced in this and I probably messed some stuff up. It seemed like a good idea to ask for some general advice before going at it again.
First, I was wondering about the filesystem I needed to set up, like the bin, tmp, lib, ... directories. Which ones do I need and what should go in them.
And how exactly do I let the system know these folders are there and it should look there for some commands. When I used phpize, it used the default one instead of the one in my custom php folder. Is the export command all there is to it?
When I install PHP, where should I install it and do I need to point it to my directories (bin, lib, etc...) instead of the ones in the host's root.
I noticed when installing ffmpeg-php it still looked for the default ones at some points:
HTML Code:
"checking for PHP includes... -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend..."
I don't know if this is normal behaviour or not, I'm just basically writing everything I am unsure about.
I got my website to use the custom PHP by editting the htaccess file
Also,
what would be the best approach to remove the things I currently installed, I suppose remove the php5 directory is not enough.
I've been working in this industry for 5 years now. Over the years, I've come to realize the little things that customers do that REALLY piss tech support off. This is a guide for customers for 10 things NOT do when contacting their host's technical support team.
This is a repost of what I already posted before the big catastrophe.
Please forgive the brutal honesty. It's for your own good.
1. One ticket per issue.
Emailing your issue to Support, Sales, Billing, Abuse, the owner, each individual tech, and the mayor of your town is not going to get your ticket answered any quicker. Additionally, opening 2, 3, 4, or 10 tickets isn't going to get things done any faster. Seriously - all it will do is irritate the support guy
2. Contact the proper department
If your account is suspended due to non-payment, or your account hasn't yet been setup, or you want to upgrade your account - please don't bother contacting support hoping it'll get done faster. All it will do is slow down their response time to customers that have actual support issues. Billing issues goto Billing. Sales issues goto Sales. Abuse issues goto abuse. Get the picture?
3. Contact support via ONE medium
If you put in a support ticket, don't get on live chat and call too. Trust me - you'll get the same answer on live chat and the phone as you will in the ticket . Same goes for requesting "updates" on your ticket - if your ticket is in queue, wait patiently for a response. If you don't get a timely response, contact the management to complain.
4. Everyone thinks their ticket is CRITICAL
Tech support reps realize that you think your issue is CRITICAL and must be dealt with IMMEDIATELY. But, guess what, so does everyone else that submitted their ticket before you. Your CRITICAL ticket will be answered in the order received after everyone else's CRITICAL ticket has been answered.
5. Do not try to "bump" your ticket
Making continuous replies to your ticket in an event to get a faster response won't work. In fact, in most common helpdesk applications, each reply made rotates the ticket to the bottom of the queue. So really, by bumping your ticket, you're just making yourself wait longer. Not getting service fast enough? Contact the manager of the company!
6. Include all relevant information, but only relevant information
Seriously - we don't care to hear your life story. Submit your ticket with your client ID, domain name, username, password, error messages, steps to reproduce, and other information directly pertinent to your issue. If your website is inaccessible, check http://www.downforeveryoneorjustme.com/ and include your local IP address (from www.whatismyip.com) and a traceroute. That will save you a reply.
7. Just because YOU can't see the website does NOT mean the server is down
So please - don't come shouting at us claiming we're fraudsters and have horrible uptime and demand a credit. Most of the time you will find there is either a firewall issue or a routing issue - or scheduled maintenance. Check http://www.downforeveryoneorjustme.com/ and your host's forums before screaming at them.
8. Avoid live chat & phone support
Unless you have a quick question, live chat and phone support are probably not going to be good avenues. Chances are, if your issue requires someone to login to the server to investigate, you're just going to be escalated to a support ticket. Instead of whining about how long the support ticket will take to get answered - just get it in queue. Figure if you spend 5-10 minutes on the phone only for them to tell you that you need to submit a ticket - that's 5-10 minutes that your ticket could have been looked into. Think about it. If you do call or chat - be brief - and keep in mind we have other customers to help.
9. We don't make the rules
If you don't like a company's policies or procedures, don't complain to your support tech about it. They don't make the rules, they just follow them. If you want a change, contact the management of the company.
10. Do NOT disrespect or mistreat support people
If you curse at us, disrespect us, or mistreat us in any way - you can almost be guaranteed that we won't be going out of our way to help you beyond the minimum. By polite, cordial, and courteous to your support tech and it will get you a LOT farther. We don't get paid enough to deal with people's abuse.
11 (Free bonus ). The amount of money you pay does not matter to us
Seriously - the fact that you pay us $9.95/month does not matter to us. We're going to provide you with the same support that we provide somebody that's paying $3.95/month or $99.95/month. Don't expect better treatment based on the amount of money you pay.
I've been working in this industry for 5 years now. Over the years, I've come to realize the little things that customers do that REALLY piss tech support off. This is a guide for customers for 10 things NOT do when contacting their host's technical support team.
Please forgive the brutal honesty. It's for your own good.1. One ticket per issue.
Emailing your issue to Support, Sales, Billing, Abuse, the owner, each individual tech, and the mayor of your town is not going to get your ticket answered any quicker.
Additionally, opening 2, 3, 4, or 10 tickets isn't going to get things done any faster.
Seriously - all it will do is irritate the support guy 2. Contact the proper department
If your account is suspended due to non-payment, or your account hasn't yet been setup, or you want to upgrade your account - please don't bother contacting support hoping it'll get done faster. All it will do is slow down their response time to customers that have actual support issues. Billing issues goto Billing. Sales issues goto Sales. Abuse issues goto abuse. Get the picture?3. Contact support via ONE medium
If you put in a support ticket, don't get on live chat and call too. Trust me - you'll get the same answer on live chat and the phone as you will in the ticket . Same goes for requesting "updates" on your ticket - if your ticket is in queue, wait patiently for a response. If you don't get a timely response, contact the management to complain.4. Everyone thinks their ticket is CRITICAL
Tech support reps realize that you think your issue is CRITICAL and must be dealt with IMMEDIATELY. But, guess what, so does everyone else that submitted their ticket before you. Your CRITICAL ticket will be answered in the order received after everyone else's CRITICAL ticket has been answered.5. Do not try to "bump" your ticket
Making continuous replies to your ticket in an event to get a faster response won't work. In fact, in most common helpdesk applications, each reply made rotates the ticket to the bottom of the queue. So really, by bumping your ticket, you're just making yourself wait longer. Not getting service fast enough? Contact the manager of the company!6. Include all relevant information, but only relevant information
Seriously - we don't care to hear your life story. Submit your ticket with your client ID, domain name, username, password, error messages, steps to reproduce, and other information directly pertinent to your issue. If your website is inaccessible, check [url] and include your local IP address (from www.whatismyip.com) and a traceroute. That will save you a reply.7. Just because YOU can't see the website does NOT mean the server is down
So please - don't come shouting at us claiming we're fraudsters and have horrible uptime and demand a credit. Most of the time you will find there is either a firewall issue or a routing issue - or scheduled maintenance. Check [url]and your host's forums before screaming at them.8. Avoid live chat
After having conversation with many WHT members and few other system admins I have not been been to resolve an issue yet.
I have a Basic VPS and squid runs fine on it.
Debian 4
Squid 3
Now the issue is that I have 2 IP allocated to my VPS. But no matter what configuration i have on squid.conf file , no matter what version of Squid i use,I am not able to have the additional Ip on my vps as Outgoing External IP address.
I have also tried this config setting :
acl ip1 myip 192.168.1.2
acl ip2 myip 192.168.1.3
acl ip3 myip 192.168.1.4
tcp_outgoing_address 192.168.1.2 ip1
tcp_outgoing_address 192.168.1.3 ip2
tcp_outgoing_address 192.168.1.4 ip3
But no luck yet.
I currently have a site running on 8 servers : 5 web servers (apache2/php5), 2 DB servers (mysql 5), and one front reverse proxy server.
Currently I use apache as the reverse proxy (with mod_proxy of course).
I have it do 3 type of things:
1) serve some static files (the website's static files) directly from the front server. The files are stored in local directories.
2) cache some other static files (user uploaded images and files) on the front server after downloading them once from the backend webservers. This is done via mod_cache.
3) route some requests to specific web servers depending on a subdomain (on the first few letters of the subdomain more precisely). To do this i use rewrite rules like :
RewriteCond %{HTTP_HOST}^sub1(.*).domain.com$
RewriteRule ^(.*) http://sub1%1.webserver1.com/$1 [P,L]
RewriteCond %{HTTP_HOST}^sub2(.*).domain.com$
RewriteRule ^(.*) http://sub2%1.webserver2.com/$1 [P,L]
etc.
My web servers are not in a cluster from this point of view, so it is important that the reverse proxy is able to route requests based on subdomain like this.
Now I have a few weird performance problems on the front server. CPU, hard disk usage and memory usage keep staying at relatively constant (and always low) levels, yet the server load periodically spikes to places anywhere between 4 and 12 during the day. This seems to be mod_cache related (spikes disappear when i disable it) but I can't figure what's happenning, and I'm reading everywhere squid is a better alternative to do reverse proxying.
Only, I don't know if i can do the same as mentionned above with squid. From what I read, I know I can do 2). However I'm not sure if squid is able to serve some files (based on URL patterns) directly from the local file system rather than querying them / caching them locally ? And can squid route the reverse proxy requests to different web servers based on the subdomain in a URL?
The DC installed Squid. It manages the load fine but the php code on my page is cached and doesn't work.
Is there a way to get squid to not cache php? in that httpd can directly call php while squid does everything else?
I just installed Squid V3. I set up putty to ssh socks proxy to my vps that I installed squid on.
Here is a snippet of my cache.logs, but there is no cache log of websites I have visited. The access.log is empty.
How to I tell if squid is working?
Quote:
2009/04/04 22:52:37| Starting Squid Cache version 3.0.STABLE13-20090405 for i686-pc-linux-gnu...
2009/04/04 22:52:37| Process ID 9886
2009/04/04 22:52:37| With 1024 file descriptors available
2009/04/04 22:52:37| Performing DNS Tests...
2009/04/04 22:52:37| Successful DNS name lookup tests...
2009/04/04 22:52:37| DNS Socket created at 0.0.0.0, port 36048, FD 7
2009/04/04 22:52:37| Adding nameserver 208.67.222.222 from /etc/resolv.conf
2009/04/04 22:52:37| Adding nameserver 208.67.220.220 from /etc/resolv.conf
2009/04/04 22:52:37| Unlinkd pipe opened on FD 12
2009/04/04 22:52:37| Swap maxSize 102400 KB, estimated 7876 objects
2009/04/04 22:52:37| Target number of buckets: 393
2009/04/04 22:52:37| Using 8192 Store buckets
2009/04/04 22:52:37| Max Mem size: 8192 KB
2009/04/04 22:52:37| Max Swap size: 102400 KB
2009/04/04 22:52:37| Version 1 of swap file with LFS support detected...
2009/04/04 22:52:37| Rebuilding storage in /usr/local/squid/var/cache (CLEAN)
2009/04/04 22:52:37| Using Least Load store dir selection
2009/04/04 22:52:37| Set Current Directory to /usr/local/squid/var/cache
2009/04/04 22:52:37| Loaded Icons.
2009/04/04 22:52:37| Accepting HTTP connections at 0.0.0.0, port 8080, FD 14.
2009/04/04 22:52:37| Accepting ICP messages at 0.0.0.0, port 3130, FD 15.
2009/04/04 22:52:37| HTCP Disabled.
2009/04/04 22:52:37| Ready to serve requests.
2009/04/04 22:52:37| Done reading /usr/local/squid/var/cache swaplog (0 entries)
2009/04/04 22:52:37| Finished rebuilding storage from disk.
2009/04/04 22:52:37| 0 Entries scanned
2009/04/04 22:52:37| 0 Invalid entries.
2009/04/04 22:52:37| 0 With invalid flags.
2009/04/04 22:52:37| 0 Objects loaded.
2009/04/04 22:52:37| 0 Objects expired.
2009/04/04 22:52:37| 0 Objects cancelled.
2009/04/04 22:52:37| 0 Duplicate URLs purged.
2009/04/04 22:52:37| 0 Swapfile clashes avoided.
2009/04/04 22:52:37| Took 0.02 seconds ( 0.00 objects/sec).
2009/04/04 22:52:37| Beginning Validation Procedure
2009/04/04 22:52:37| Completed Validation Procedure
2009/04/04 22:52:37| Validated 25 Entries
2009/04/04 22:52:37| store_swap_size = 0
2009/04/04 22:52:38| storeLateRelease: released 0 objects
2009/04/04 22:59:06| Squid is already running! Process ID 9886
to install squid-2.5.STABLE14 with yum, but when i run "yum install squid" another version going for install.
View 2 Replies View RelatedWhenever I am using getacoder and try to post a message on the private message boards I get a squid error like this:
ERROR
The requested URL could not be retrieved
--------------------------------------------------------------------------------
While trying to retrieve the URL: [url]
The following error was encountered:
Zero Sized Reply
Squid did not receive any data for this request.
Your cache administrator is webmaster.
--------------------------------------------------------------------------------
Generated Tue, 22 Jul 2008 16:09:13 GMT by igw-ipcop.netarcs.com (squid/2.5.STABLE14)
Could anyone with server geekish skills tell me what may be the problem here might be (I should mention that their annoying support contact form uses the same script hence I can't even get in touch)? What's that ipcop thing about? Do they have some program at the server level filtering IP and mine is no good or what?
I'm aware the REMOTE_ADDR revealed in Squid needs to be a legitimate IP address to communicate properly across the internet. But I'd like Squid to use and publically reveal a different IP address than the default system IP address on our proxy servers. Does anyone know if its possible to make the Squid REMOTE_ADDR use a different IP address on the system other than default.
I've defined a different IP address and port for http_port at the top of the squid.conf file. And I can connect to this IP address and Port successfully. But when I run the connection through an IP address checker, or session environment test, it reveals the actual system IP address and not the http_port IP address.
Can someone provide me a guide to fully install and configure Squid.
View 2 Replies View RelatedI'm trying to set up a caching squid server to speed up website access. How can I selectively choose to cache certain PHP scripts while ignoring others? I can't seem to get it to work. I've commented out the following lines:
#acl QUERY urlpath_regex cgi-bin?
#no_cache deny QUERY
Yet in the squid/access.log file, I'm still seeing these:
Code:
1185561374.207 47 192.168.1.101 TCP_MISS/200 22267 GET http://www.mysite.com/? - DIRECT/192.168.1.108 text/html
I want to software load balance one of my website using squid. It doesn't look like it is possible with squid 2.5. Squid 2.6 is a upgrade for FC6. I am running FC4 and it cannot be installed with a lot of dependency failures.
Has anyone successfully installed Squid 2.6 on FC4?
I've got a problem with an SQL query that is behaving badly. Its probably really obvious, but I can't see the problem!
I have a table with 3 fields:
Code:
money bigint(20)
income int(12)
userID mediumint(7)
I have a row that has a negative money and a value of 0 for income. When I update the money value to add "0" to it, nothing happens (as expected). When I update the money field to add the income field (which is equal to 0) to it, MySQL flips the sign to make the money field positive.
The following queries show the problem:
Code:
mysql> SELECT money, income from users where userID=327961;
+----------------------+--------+
| money | income |
+----------------------+--------+
| -9223372036854775807 | 0 |
+----------------------+--------+
1 row in set (0.00 sec)
mysql> UPDATE `users` SET money = money + 0 WHERE userID =327961;
Query OK, 0 rows affected (0.00 sec)
Rows matched: 1 Changed: 0 Warnings: 0
mysql> SELECT money, income from users where userID=327961;
+----------------------+--------+
| money | income |
+----------------------+--------+
| -9223372036854775807 | 0 |
+----------------------+--------+
1 row in set (0.00 sec)
mysql> UPDATE `users` SET money = money + income WHERE userID =327961;
Query OK, 1 row affected, 1 warning (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 1
mysql> SELECT money, income from users where userID=327961;
+---------------------+--------+
| money | income |
+---------------------+--------+
| 9223372036854775807 | 0 |
+---------------------+--------+
1 row in set (0.00 sec)
mysql>
Notice that there is no negative sign after the third select!!
So, we are saying that executing an update where 0 is specified in the query results in the correct action but if you take the 0 from another field it takes the negative sign away...
This for various reasons is a rather urgent problem. This problem has only appeared after upgrading from MySQL 4.0 to MySQl 5.1. This problem does not occur in MySQL 4.1.
i need help regarding my squid proxy when i go to this site. whatismyip.com i have this result
Your IP Address Is: 119.95.IP.IP
Other IPs Detected: 67.IP.IP.185
Possible Proxy Detected: 1.1 67.IP.IP.185ORT (squid/2.6.STABLE21)
how can i completly hide my ip via squid? this squid is running on my dedicated server,
I would like to use cPanel Apache as the backend web server, and Squid cache as the front end http accelerator.
My VPS has two IP addresses, however, I want the httpd acceleration to occur only on one IP.
So far, I have installed squid cache and edited its config file to this:
http_port 74.50.118.189:80
httpd_accel_host localhost
httpd_accel_port 80
httpd_accel_single_host on
httpd_accel_uses_host_header on
acl all src 0.0.0.0/0.0.0.0
http_access allow all
My site has a few subdomains and I would like them to work.
So, what do I do now in the apache config (which I think is here: /etc/httpd/conf/httpd.conf ?)
For 2 weeks I am under DDoS.
The type of DDoS is the one that comes from DC clients.
I have managed to mitigate the attack and to get everything working ok.
I do not like the solution I came up with for many reasons and I found that squid can be good on stopping bad requests like the one that DC clients send when the attack occurs.
I am kinda new to squid and I do not know all the settings.
I have configured It and everything works great when there is no DDoS.
But when the attacks starts , nothing works. Squid does not log anything in access_log and also, there is no load, just a lot of connections to squid.
Is there a limit for max concurrent connections in squid ?
Or the ideea of using squid as a reverse proxy without caching, just to stop bad requests is a bad one ? (I do not need snort-inline, I have some issues with it).
I want visitors from my site to be able to connect trough my squidproxy (installed on the same webserver as the site is) They will only be able to visit 3 or 4 sites trough the proxy. (These will be added to a whitelist in squid)
Preferably i want to to set it up so that users MUST visit my website to make the connection trough squid. Squid is already setup, but how do i link a site trough squid?
Preferably i would like users be able to click a link on my website, that opens an external site trough squid.
Im currently running cent0S 5. I recently just installed Squid Version 2.6.STABLE6 for a client to enable him to use as proxy. However it seems that sites like whatismyip.com and ipchicken.com are resolving back to my clients IP address and not the servers.
There is only one IP on my server and I think the problem may deal with X-Headers? (correct me if I am wrong)
Is there any way to use the server IP address for when my customer is using the proxy server.
My squid.conf looks like the following:
Code:
Code:
http_port 8080
forwarded_for off
icp_port 0
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 128
maximum_object_size 4096 KB
cache_store_log none
cache_access_log /var/log/squid/access.log
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY
visible_hostname proxyserver
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src xxx.xx.xxx.xxx
acl SSL_ports port 443 563 10000
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl Safe_ports port 901
acl purge method PURGE
acl CONNECT method CONNECT
acl LocalNet src xxx.xx.xxx.xx
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow LocalNet
http_access deny all
icp_access allow all
log_fqdn on
##### This side is to make the proxy tranparency
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on
#httpd_accel_host virtual
#httpd_accel_port 80
######------------------------------
error_directory /usr/share/squid/errors/English
#httpd_accel_uses_host_header off
#anonymize_headers deny From Referer Server
forwarded_for on
http_port ServerIP:8080 transparent
# no forwarded quite useless for an anonymizer
forwarded_for off
# no client stat
client_db off
# Paranoid anonymize
header_access Allow allow all
header_access Authorization allow all
header_access Cache-Control allow all
header_access Content-Encoding allow all
header_access Content-Length allow all
header_access Content-Type allow all
header_access Date allow all
header_access Expires allow all
header_access Host allow all
header_access If-Modified-Since allow all
header_access Last-Modified allow all
header_access Location allow all
header_access Pragma allow all
header_access Accept allow all
header_access Charset allow all
header_access Accept-Encoding allow all
header_access Accept-Language allow all
header_access Content-Language allow all
header_access Mime-Version allow all
header_access Retry-After allow all
header_access Title allow all
header_access Connection allow all
header_access Proxy-Connection allow all
header_access All deny all
header_access Cookie allow all
header_access Set-Cookie allow all
header_replace User-Agent Anonymous Proxy at example.com
i successfully installed Squid Proxy on my other Dedicated server however that dedicated server had 50 ip address, i am wondering if i can use those ip address for my Squid Proxy?
View 5 Replies View RelatedHere's my story: The landlord provides the internet for the house and it goes through a server which has squid installed. Squid in turn seems to block the internal port (or whatever the exact term for that is) for phpmyadmin or webmail in cpanel so I cannot access them.
At my reseller account at Hostgator they said they redirected that port to port80 via mod rewrite and that now works for me. I wonder how I would do the same thing on a dedicated server. I can't see what Hostgator did since it's happening out of my sight somewhere. Otherwise I would just replicate that on my box.
I want to count the traffic for every IP passed through squid proxy server.
Is it possible to record the traffic numbers for every IP in external .txt file
It would be better if it can write outgoing and ingoing traffic.