Re: [squid-users] Re: Can't access facebook.com through squid 3.1.19

From: E.S. Rosenberg <esr+squid_at_g.jct.ac.il>
Date: Fri, 28 Sep 2012 12:56:56 +0200

2012/9/28 woitek <wojtek_at_dracul.kill.pl>:
> Hello,
>
> I seem to have quite the same problem, except that it is happening with
> Squid-2.7 and -3.2 (I tested the newest version yesterday) on the OpenBSD
> operating system.
>
> A couple days ago (over a week ago) users started complaining about
> *sometimes* not being able to access portions of Facebook. It was very hard
> to spot, but later I found out where there is a problem almost nonstop -
> when you access pictures on a profile, like on one of ours:
> http://www.facebook.com/zycienagoraco?ref=ts
>
> I mean clicking on "zdjęcia", next to the square that has the number of
> people liking it. You don't even have to be logged in for that, everything
> is via http:// (not https://).
>
> The problem doesn't show up every time but rather after a few visits to the
> link. Then, once you click, the request goes to the original site (I can
> confirm it with tcpdump), but no reply comes back. After a few minutes Squid
> probably timeouts, and doees something again, which it doesn't do in the
> meantime, because of which the page loads (it loads a few times, actually -
> you have to go "back" a few times to reach the main page, - probably because
> it's javascripted).
>
> So far I've seen that the problem occurs both in transparent and in proxy
> mode. It might have something to do with the way FB load balances over it's
> servers - by changing the IP in the DNS often (2 minutes?). But still I
> can't imaging how with such frequent changes hitting the wrong node of the
> LB (there seem to be only 2, or 3 different IPs for facebook.com where I am
> connecting from) could create a timeout like this one.
>
> The problem, however, does NOT occur on a different server, which is Linux,
> not OpenBSD, a slightly different Squid (3.1.x), a different ISP uplink,
> naturally different firewall... I'll be diagnosing it more, but maybe you'll
> be able to help with what you discover. Thanks.
>
>
>
>
> --
> View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Can-t-access-facebook-com-through-squid-3-1-19-tp4656604p4656821.html
> Sent from the Squid - Users mailing list archive at Nabble.com.

//I didn't have time to read the whole thread so forgive me if this
has already been mentioned
As far as I understood from a recent newsarticle facebook is one of
the big players that support SPDY these days, maybe that has something
to do with this problem?

Regards,
Eliyahu - אליהו
Received on Fri Sep 28 2012 - 10:57:03 MDT

This archive was generated by hypermail 2.2.0 : Fri Sep 28 2012 - 12:00:05 MDT