Landy Landy | 2 Jan 02:27 2010
Picon

Use cache dir in different server

Hello. Happy new year to all.

I am replacing a server I currently have with squid 3.0.20 to another box with a bigger hard drive. Right now I
have about 40GB of cache that would like to move to the new server. My question is: can I just copy
/var/log/squid/cache ( cache_dir aufs /var/log/squid/cache 40000 64 255
 ) to a different hard drive?

and

if the new hard drive's config is: cache_dir aufs /var/log/squid/cache 100000 64 255. This one 100GB for
cache. 

Would I have problems putting the 40GB cache on to the 100GB?

Thanks in advanced for your help.

Jefferson Diego | 2 Jan 05:53 2010
Picon

Re: Use cache dir in different server

Em 01-01-2010 23:27, Landy Landy escreveu:
> Hello. Happy new year to all.
>
> I am replacing a server I currently have with squid 3.0.20 to another box with a bigger hard drive. Right now
I have about 40GB of cache that would like to move to the new server. My question is: can I just copy
/var/log/squid/cache ( cache_dir aufs /var/log/squid/cache 40000 64 255
>   ) to a different hard drive?
>
> and
>
> if the new hard drive's config is: cache_dir aufs /var/log/squid/cache 100000 64 255. This one 100GB for cache.
>
> Would I have problems putting the 40GB cache on to the 100GB?
>
> Thanks in advanced for your help.
>
>
>
>
>
>
>
>    
About to put your /var/log/squid/cache in to another drive, you can. 
Just make sure that you will conserve all permissions (use tar to store 
the files, and extract then on the other drive).
About change cache_dir entry from 40GB to 100GB, I did something like 
this, and my cache wasn't loose. I THINK that you can do this.

(Sorry by my poor english)
(Continue reading)

Muhammad Sharfuddin | 2 Jan 07:22 2010
Picon

uninteruptable proxy

peoples in my organization do online bidding, and if browsing
interrupt/disconnect for any reason(e.g hardware failure) and restore
within a 50 or 60 seconds.. their session terminate/disconnect, and they
lost.

we need uninteruptable web/proxy services. we need Highly Available
Proxy Infrastructure/Services

what are the possible solutions 

does following are the options
1, Clustering Squid (I think session will break)
2, Clustering two virtual machines, and virtual machines are running
Squid, so if one host machine downs/crash, the other host machine
continue running squid (I think in this case, session wont break,
because the other host machine will run the same squid)

please suggest/recommend

Regards
--ms

Guido Marino Lorenzutti | 2 Jan 07:53 2010
Picon

Re: uninteruptable proxy

My humble opinion is.. don't use squid, use haproxy.

Muhammad Sharfuddin <m.sharfuddin <at> nds.com.pk> escribió:

> peoples in my organization do online bidding, and if browsing
> interrupt/disconnect for any reason(e.g hardware failure) and restore
> within a 50 or 60 seconds.. their session terminate/disconnect, and they
> lost.
>
> we need uninteruptable web/proxy services. we need Highly Available
> Proxy Infrastructure/Services
>
> what are the possible solutions
>
> does following are the options
> 1, Clustering Squid (I think session will break)
> 2, Clustering two virtual machines, and virtual machines are running
> Squid, so if one host machine downs/crash, the other host machine
> continue running squid (I think in this case, session wont break,
> because the other host machine will run the same squid)
>
> please suggest/recommend
>
> Regards
> --ms
>
>
>
>
>
(Continue reading)

Kinkie | 2 Jan 08:40 2010
Picon

Re: Use cache dir in different server

>> I am replacing a server I currently have with squid 3.0.20 to another box
>> with a bigger hard drive. Right now I have about 40GB of cache that would
>> like to move to the new server. My question is: can I just copy
>> /var/log/squid/cache ( cache_dir aufs /var/log/squid/cache 40000 64 255
>>  ) to a different hard drive?
>>
>> and
>>
>> if the new hard drive's config is: cache_dir aufs /var/log/squid/cache
>> 100000 64 255. This one 100GB for cache.
>>
>> Would I have problems putting the 40GB cache on to the 100GB?

No, as long as the parameters for the first and second dir levels don't change.

>> Thanks in advanced for your help.
>
> About to put your /var/log/squid/cache in to another drive, you can. Just
> make sure that you will conserve all permissions (use tar to store the
> files, and extract then on the other drive).
> About change cache_dir entry from 40GB to 100GB, I did something like this,
> and my cache wasn't loose. I THINK that you can do this.
>
> (Sorry by my poor english)

Also watch out for processor architectures. swap.state (for sure) is
not portable across different CPU architectures; I'm not sure about
the metadata stored in each cache entry.

   Kinkie
(Continue reading)

Kinkie | 2 Jan 08:43 2010
Picon

Re: uninteruptable proxy

On Sat, Jan 2, 2010 at 7:53 AM, Guido Marino Lorenzutti
<glorenzutti <at> jusbaires.gov.ar> wrote:
> My humble opinion is.. don't use squid, use haproxy.

Or even better, don't use a proxy at all: what doesn't exist, can't break.

You can use a pac-file to instruct the clients to bypass the proxy for
those specific destinations, and use a proxy such as squid for
everything else.

--

-- 
    /kinkie

Muhammad Sharfuddin | 2 Jan 11:21 2010
Picon

Re: uninteruptable proxy

-- Guido Marino Lorenzutti <glorenzutti <at> jusbaires.gov.ar>
>My humble opinion is.. don't use squid, use haproxy.
but I need a web proxy server, and not the TCP/HTTP reverse proxy server.

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability 
environments
Reference
http://linux.die.net/man/1/haproxy

As per my understandings(which might be wrong) Reverse Proxy is used to publish 
your servers(on your private LAN) to the Internet, so I think HAProxy is not for my case, 
I need a http proxy server.
So do you think, I can use HAProxy in my organization  ?
If yes, then please provide some url/doc to install and configure it on SUSE box

Regards
--ms

>>Muhammad Sharfuddin <m.sharfuddin <at> nds.com.pk> escribió:
>>
>> peoples in my organization do online bidding, and if browsing
>> interrupt/disconnect for any reason(e.g hardware failure) and restore
>> within a 50 or 60 seconds.. their session terminate/disconnect, and they
>> lost.
>>
>> we need uninteruptable web/proxy services. we need Highly Available
>> Proxy Infrastructure/Services
>>
>> what are the possible solutions
>>
(Continue reading)

Landy Landy | 2 Jan 14:24 2010
Picon

Re: Use cache dir in different server


> Also watch out for processor architectures. swap.state (for
> sure) is
> not portable across different CPU architectures; I'm not
> sure about
> the metadata stored in each cache entry.

Would I still need to create the cache, squid -z? If so, can I just move the 40GB to the new cache 100GB cache and
replace it the new directories

Kinkie | 2 Jan 15:07 2010
Picon

Re: Use cache dir in different server

On Sat, Jan 2, 2010 at 2:24 PM, Landy Landy <landysaccount <at> yahoo.com> wrote:
>
>> Also watch out for processor architectures. swap.state (for
>> sure) is
>> not portable across different CPU architectures; I'm not
>> sure about
>> the metadata stored in each cache entry.
>
>
> Would I still need to create the cache, squid -z? If so, can I just move the 40GB to the new cache 100GB cache
and replace it the new directories

No, you wouldn't need to.

--

-- 
    /kinkie

ml ml | 2 Jan 19:19 2010

Re: Squid LDAP Auth and ACL Integration

Hi,

thanks for the reply.

However, i cant get the proof-of-concept working on the command line:

echo "mo" | squid_ldap_group  -b "dc=my-domain,dc=com"  -f "cn=mo" -F
"cn=mo" -h localhost -D "cn=Manager,dc=my-domain,dc=com"  -w secret

it always returns ERR. If i do a "tcpdump -i any -n port 389" then i
cant see any traffic at all.

Any idea how i can debug this? the "-d" option does not seem to do any
debugging!

Thanks,
Mario

On Thu, Dec 31, 2009 at 9:29 PM, Chris Robertson <crobertson <at> gci.net> wrote:
> ml ml wrote:
>>
>> Hello List,
>>
>> i read that its quite easy to get squid with ldap auth running.
>>
>> I would also like to manage Black/White URL-Lists in ldap. Can this be
>> done via ldap, too?
>>
>
> Yes, it can be done.  It's roll-your-own, however...
(Continue reading)


Gmane