Re: [squid-users] Squid 3.1 vmware.com access

On 20/09/2012 11:46 p.m., Bambang Sumitra wrote:
>
>
> On Sep 20, 2012 5:12 PM, "Amos Jeffries" <squid3_at_treenet.co.nz
> <mailto:squid3_at_treenet.co.nz>> wrote:
> >
> > On 20/09/2012 7:03 p.m., Bambang Sumitra wrote:
> >>
> >> Hi All,
> >>
> >> I'am using Squid Cache: Version 3.1.19 on ubuntu 12.04, and i have
> >> problem accessing vmware.com <http://vmware.com>, its never
> complete load, always showing
> >> white blank page, i have try with different browser also, firefox,
> >> chrome and IE
> >>
> >>
> >> here is my squid config
> >>
> >> ---------------------------------- squid config
> >> ----------------------------------
> >> acl manager proto cache_object
> >> acl localhost src 127.0.0.1/32 <http://127.0.0.1/32> ::1
> >> acl to_localhost dst 127.0.0.0/8 <http://127.0.0.0/8> 0.0.0.0/32
> <http://0.0.0.0/32> ::1
> >> acl localnet src 192.168.0.0/16 <http://192.168.0.0/16> # RFC1918
> possible internal network
> >> acl SSL_ports port 443
> >> acl Safe_ports port 80 # http
> >> acl Safe_ports port 21 # ftp
> >> acl Safe_ports port 443 # https
> >> acl Safe_ports port 70 # gopher
> >> acl Safe_ports port 210 # wais
> >> acl Safe_ports port 1025-65535 # unregistered ports
> >> acl Safe_ports port 280 # http-mgmt
> >> acl Safe_ports port 488 # gss-http
> >> acl Safe_ports port 591 # filemaker
> >> acl Safe_ports port 777 # multiling http
> >> acl CONNECT method CONNECT
> >> http_access allow manager localhost
> >> http_access deny manager
> >> http_access deny !Safe_ports
> >> http_access deny CONNECT !SSL_ports
> >> http_access allow localnet
> >> http_access allow localhost
> >> http_access deny all
> >> http_port 192.168.1.3:3128 <http://192.168.1.3:3128> transparent
> >> cache_dir aufs /squid-cache/squid 10000 16 256
> >> coredump_dir /squid-cache/squid
> >> refresh_pattern ^ftp: 1440 20% 10080
> >> refresh_pattern ^gopher: 1440 0% 1440
> >> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
> >> refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
> >> refresh_pattern . 0 20% 4320
> >>
> >> # custom config
> >> logfile_rotate 10
> >> cache_mem 1024 MB
> >> pipeline_prefetch on
> >> dns_nameservers 192.168.1.1 8.8.8.8 8.8.4.4
> >>
> >> acl langsung dstdomain .vmware.com <http://vmware.com>
> >> always_direct allow langsung
> >>
> >> ## quinto lab configuration
> >> icap_enable on
> >> icap_preview_enable on
> >> icap_preview_size 4096
> >> icap_persistent_connections on
> >> icap_send_client_ip on
> >> icap_send_client_username on
> >> icap_client_username_header X-Client-Username
> >> icap_service qlproxy1 reqmod_precache bypass=0
> icap://127.0.0.1:1344/reqmod <http://127.0.0.1:1344/reqmod>
> >> icap_service qlproxy2 respmod_precache bypass=0
> icap://127.0.0.1:1344/respmod <http://127.0.0.1:1344/respmod>
> >> adaptation_access qlproxy1 allow all
> >> adaptation_access qlproxy2 allow all
> >> ---------------------------------- squid config
> >> ----------------------------------
> >>
> >>
> >> ---------------------------------- access.log clip
> >> ----------------------------------
> >
> >
> >> 1348124282.802 158646 192.168.1.65 TCP_MISS/200 338 GET
> >> http://www.vmware.com/files/templates/inc/baynote_global.js - NONE/-
> >> application/javascript
> >> 1348124283.102 159150 192.168.1.65 TCP_MISS/200 338 GET
> >> http://www.vmware.com/files/templates/inc/baynote_observer.js - NONE/-
> >> application/javascript
> >
> >
> > It looks like it may be these which take 159 seconds *each* before
> they timeout and 338 bytes are returned to the client. No server is
> contacted. Everything else is only a few milliseconds.
> >
> > Amos
>
> Hi Amos,
>
> Thank you for replying on my issue.
> do you have any idea what is causing squid to timeout?
> I have test to by pass squid and i can open vmware.com
> <http://vmware.com> with no problem and its open so fast.
>

No idea. Its very strange. A MISS where no server was contacted
("NONE/-") resulting in a 200 response with 338 bytes of data.
Unless that 200 response is coming out of the ICAP RESPMOD for some
unknown reason?

Amos
Received on Fri Sep 21 2012 - 06:39:33 MDT