Re: [squid-users] Allow Streaming media through squid

Beavis wrote:
> hello list:
>
> I have a squid box version:
>
> Squid Cache: Version 2.6.STABLE16
> configure options: '--prefix=/var/squid' '--enable-snmp'
> '--enable-arp-acl' '--enable-htcp' '--enable-follow-x-forwarded-for'
> '--enable-ssl' '--disable-wccp' '--disable-wccpv2'
> '--with-openssl=/usr' '--enable-icmp' '--enable-useragent-log'
> '--enable-referer-log' '--enable-forward-log' '--with-large-files'
> '--enable-kill-parent-hack' '--enable-multicast-miss'
> '--enable-pthreads'
>
> I have squidGuard and AdZap in place as filters. the filters worked
> great, but I would like to allow video streaming through squid as
> well. I have tried putting the URL on a whitelist but without any
> luck. I haven't set up any blocking method on streaming but it seems
> to be doing it. below are my logs.
>
> 1201525684.377 222 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 313
> GET http://www.cie.purdue.edu/cie.css - DIRECT/128.210.63.40 -
> 1201525684.478 100 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 329
> GET http://www.cie.purdue.edu/images/logo_purdue3.gif -
> DIRECT/128.210.63.40 -
> 1201525684.511 1366 172.20.0.253 TCP_MISS/200 19230 GET
> http://www.cie.purdue.edu/media/index.cfm - DIRECT/128.210.63.40
> text/html
> 1201525684.581 102 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 330
> GET http://www.cie.purdue.edu/images/button_search.gif -
> DIRECT/128.210.63.40 -
> 1201525684.603 216 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 324
> GET http://www.cie.purdue.edu/images/logo_cie.gif -
> DIRECT/128.210.63.40 -
> 1201525684.606 215 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 322
> GET http://www.cie.purdue.edu/images/spacer.gif - DIRECT/128.210.63.40
> -
> 1201525684.716 135 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 328
> GET http://www.cie.purdue.edu/images/arrow_links.gif -
> DIRECT/128.210.63.40 -
> 1201525684.728 124 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 327
> GET http://www.cie.purdue.edu/images/header_dot.gif -
> DIRECT/128.210.63.40 -
> 1201525684.728 122 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 323
> GET http://www.cie.purdue.edu/images/Petrin.jpg - DIRECT/128.210.63.40
> -
> 1201525684.834 237 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 324
> GET http://www.cie.purdue.edu/images/bg_links.gif -
> DIRECT/128.210.63.40 -
> 1201525684.841 124 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 326
> GET http://www.cie.purdue.edu/images/wmp_small.gif -
> DIRECT/128.210.63.40 -
> 1201525684.842 113 172.20.0.253 TCP_CLIENT_REFRESH_MISS/304 323
> GET http://www.cie.purdue.edu/images/Bodner.jpg - DIRECT/128.210.63.40
> -
> 1201525687.047 242 172.20.0.253 TCP_MISS/200 7351 GET
> http://edge1.catalog.video.msn.com/videoByTag.aspx? -
> DIRECT/204.245.162.18 text/xml
> 1201525690.545 159 172.20.0.253 TCP_MISS/200 221 POST
> http://mail.google.com/mail/channel/bind? - DIRECT/66.249.83.83
> text/html
> 1201525693.612 4 172.20.0.253 TCP_IMS_HIT/304 249 GET
> http://www.cie.purdue.edu/images/close.gif - NONE/- image/gif
> 1201525693.614 1 172.20.0.253 TCP_IMS_HIT/304 248 GET
> http://www.cie.purdue.edu/images/spacer.gif - NONE/- image/gif
> 1201525693.618 4 172.20.0.253 TCP_IMS_HIT/304 249 GET
> http://www.cie.purdue.edu/images/helpful_links.gif - NONE/- image/gif
> 1201525693.692 446 172.20.0.253 TCP_MISS/200 6953 GET
> http://www.cie.purdue.edu/media/play.cfm? - DIRECT/128.210.63.40
> text/html
> 1201525693.821 128 172.20.0.253 TCP_IMS_HIT/304 249 GET
> http://www.cie.purdue.edu/images/close_f2.gif - NONE/- image/gif
> 1201525693.822 0 172.20.0.253 TCP_IMS_HIT/304 249 GET
> http://www.cie.purdue.edu/images/close_f4.gif - NONE/- image/gif
> 1201525693.824 1 172.20.0.253 TCP_IMS_HIT/304 249 GET
> http://www.cie.purdue.edu/images/close_f3.gif - NONE/- image/gif
> 1201525694.469 192 172.20.0.253 TCP_MISS/200 529 GET
> http://video.dis.purdue.edu/CIE/Petrin.wmv - DIRECT/128.210.13.134
> video/x-ms-wvx
> 1201525694.666 189 172.20.0.253 TCP_MISS/200 534 GET
> http://video.dis.purdue.edu/CIE/Petrin.wmv - DIRECT/128.210.13.134
> video/x-ms-wvx
>
> is there any other setting I may need to put into my squid.conf
> directly in order to allow streaming? or does it do it by
> default(which if it does by default for some weird reason it's not
> working on mine).

The defaults for 2.6 are wowking properly in yours (preventing dynamic
pages ever caching)

You will need to update your cache policy a little.

KILL any of these in your squid.conf:

   acl QUERY urlpath_regex cgi-bin \?
   cache deny QUERY
   no_cache deny QUERY

UPDATE the default refresh_patterns:

   refresh_pattern ^ftp: 1440 20% 10080
   refresh_pattern ^gopher: 1440 0% 1440
   refresh_pattern cgi-bin 0 0% 0
   refresh_pattern \? 0 0% 0
   refresh_pattern . 0 20% 4320

This will allow any dynamic pages that contain proper cache-controls to
follow those settings. Dynamic pages without will continue to non-cache.

Have a look at your logs with the setting updates and decide which
domains you will need to handle specially.

Amos

-- 
Please use Squid 2.6STABLE17+ or 3.0STABLE1+
There are serious security advisories out on all earlier releases.