range_offset_limit not working as expected

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

range_offset_limit not working as expected

Omid Kosari
Hello,

My config:
acl download_until_end dstdomain .cdn.mozilla.net
range_offset_limit none download_until_end


Squid 3.5.19




1473082997.229    697 x.29.186.47 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473082999.365   1122 x.10.189.81 TCP_MISS/206 300512 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083001.570    573 x.29.184.205 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083004.941   2196 x.10.184.141 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083005.383    631 x.10.184.65 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083006.711    970 x.10.191.220 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/49.0b6/update/win32/en-US/firefox-49.0b6.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083008.124  74151 x.10.182.124 TCP_MISS/206 300627 GET http://download.cdn.mozilla.net/pub/firefox/releases/12.0/update/win32/en-US/firefox-12.0.complete.mar - ORIGINAL_DST/54.192.128.59 application/octet-stream
1473083012.317    646 x.10.185.248 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083015.680    793 x.29.187.142 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083017.918    515 x.10.184.114 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083023.480    514 x.29.185.194 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083027.521   1208 x.6.25.227 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083028.096   1017 x.6.24.5 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/43.0.1/update/win32/en-US/firefox-43.0.1.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083032.366   1288 x.10.183.80 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083038.171    548 x.29.185.69 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083038.579   1298 x.10.182.90 TCP_HIT/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.1-48.0.2.partial.mar - HIER_NONE/- application/octet-stream
1473083038.706    277 x.10.185.96 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083039.127   7808 x.29.189.2 TCP_MISS/206 300487 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083044.820   1296 x.6.25.74 TCP_MISS/206 300473 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.1-48.0.2.partial.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083047.174    577 x.29.188.118 TCP_HIT/206 300622 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/fa/firefox-47.0.1.complete.mar - HIER_NONE/- application/octet-stream
1473083050.059    623 x.10.188.231 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083050.332    436 x.6.25.60 TCP_MISS/206 300624 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083053.730    824 x.10.183.153 TCP_MISS/206 300621 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/54.192.44.217 application/octet-stream
1473083058.374    759 x.29.186.47 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083059.571   3537 x.6.24.123 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083061.041   1068 x.10.189.81 TCP_MISS/206 300512 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083062.504    562 x.29.184.205 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083066.482    768 x.10.184.65 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083067.842   2611 x.10.186.8 TCP_MISS/206 300485 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083068.328    947 x.10.191.220 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/49.0b6/update/win32/en-US/firefox-49.0b6.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083069.011   2324 x.10.184.141 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083073.250    722 x.10.185.248 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083076.617    760 x.29.187.142 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083078.889    531 x.10.184.114 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083079.248    756 x.6.25.60 TCP_MISS/206 300625 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083084.462    638 x.29.185.194 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083089.045   1374 x.6.25.227 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083098.255   1191 x.10.182.131 TCP_HIT/206 300488 GET http://download.cdn.mozilla.net/pub/firefox/releases/12.0/update/win32/en-US/firefox-12.0.complete.mar - HIER_NONE/- application/octet-stream
1473083099.285    524 x.29.185.69 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083099.408    652 x.10.185.96 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083100.063   1088 x.10.182.90 TCP_HIT/206 300624 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.1-48.0.2.partial.mar - HIER_NONE/- application/octet-stream
1473083106.221   1214 x.6.25.74 TCP_MISS/206 300473 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.1-48.0.2.partial.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083107.936    560 x.29.188.118 TCP_HIT/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/fa/firefox-47.0.1.complete.mar - HIER_NONE/- application/octet-stream
1473083109.106   3703 x.29.189.2 TCP_MISS/206 300487 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083110.606    461 x.10.188.231 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083117.117   1428 x.10.183.153 TCP_MISS/206 300622 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/54.192.44.217 application/octet-stream
1473083119.444    697 x.29.186.47 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083122.682    977 x.10.189.81 TCP_MISS/206 300512 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083123.436    562 x.29.184.205 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083125.641   3494 x.6.24.123 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083127.791   1110 x.10.184.65 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083129.991    975 x.10.191.220 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/49.0b6/update/win32/en-US/firefox-49.0b6.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083132.907   2201 x.10.184.141 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083133.160   2028 x.29.188.16 TCP_MISS/206 300626 GET http://download.cdn.mozilla.net/pub/firefox/releases/43.0.1/update/win32/en-US/firefox-43.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083134.093    629 x.10.185.248 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083137.540    758 x.29.187.142 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083139.841    508 x.10.184.114 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083140.132    580 x.6.25.60 TCP_MISS/206 300625 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083144.676    523 x.10.183.169 TCP_MISS/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083145.432    623 x.29.185.194 TCP_MISS/206 300475 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083150.678   1401 x.6.25.227 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083159.669    402 x.10.181.243 TCP_MISS/206 300483 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083159.984    540 x.10.185.96 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083161.515   1088 x.10.182.90 TCP_HIT/206 300625 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.1-48.0.2.partial.mar - HIER_NONE/- application/octet-stream
1473083167.504   1069 x.6.25.74 TCP_MISS/206 280483 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.1-48.0.2.partial.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083168.699    553 x.29.188.118 TCP_HIT/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/fa/firefox-47.0.1.complete.mar - HIER_NONE/- application/octet-stream
1473083171.595    873 x.10.188.231 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083175.433   3624 x.29.189.2 TCP_MISS/206 300487 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083177.088  17269 x.29.185.69 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083178.399    773 x.10.183.153 TCP_MISS/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/54.192.44.217 application/octet-stream
1473083180.400    583 x.29.186.47 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.72 application/octet-stream
1473083184.321    967 x.10.189.81 TCP_MISS/206 300512 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083184.375    561 x.29.184.205 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083188.727    578 x.10.184.65 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083191.677   1011 x.10.191.220 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/49.0b6/update/win32/en-US/firefox-49.0b6.complete.mar - ORIGINAL_DST/2.21.246.11 application/octet-stream
1473083191.892   3636 x.6.24.123 TCP_MISS/206 300474 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083193.504   7646 x.10.191.76 TCP_MISS/206 300622 GET http://download.cdn.mozilla.net/pub/firefox/releases/43.0.1/update/win32/en-US/firefox-43.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083195.044    736 x.10.185.248 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083195.752   2153 x.29.188.16 TCP_MISS/206 300626 GET http://download.cdn.mozilla.net/pub/firefox/releases/43.0.1/update/win32/en-US/firefox-43.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083200.501    842 x.29.187.142 TCP_MISS/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/54.192.44.217 application/octet-stream
1473083200.805    520 x.10.184.114 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.81 application/octet-stream
1473083201.198   6592 x.10.184.141 TCP_MISS/206 300514 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083206.310    573 x.29.185.194 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083212.437   1563 x.6.25.227 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/188.43.76.80 application/octet-stream
1473083220.760    740 x.10.185.96 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar - ORIGINAL_DST/188.43.76.59 application/octet-stream
1473083222.952   1084 x.10.182.90 TCP_HIT/206 300625 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win64/en-US/firefox-48.0.1-48.0.2.partial.mar - HIER_NONE/- application/octet-stream
1473083224.446    201 x.10.188.231 TCP_MISS/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - STANDBY_POOL/1.1.1.12 application/octet-stream
1473083229.466    549 x.29.188.118 TCP_HIT/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/fa/firefox-47.0.1.complete.mar - HIER_NONE/- application/octet-stream
1473083239.495    848 x.10.183.153 TCP_MISS/206 300623 GET http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/update/win32/en-US/firefox-47.0.1.complete.mar - ORIGINAL_DST/54.192.44.217 application/octet-stream
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

Amos Jeffries
Administrator
What are you expecting?

The Squid native format access.log shows what was delivered to the
client, and what server was involved. It does not show how the
range_offset_limit directive affected the server connection messages.

The ORIGINAL_DST indicates that this is intercepted traffic.

Notice how the TCP_MISS transactions are rotating through different IP
addresses and using ORIGINAL_DST. That is usualy a sign that Host header
verification is unable to match the destination domain name with the
client contacted IP address on many transactions.

There is a mix of TCP_HIT/206 when that verification succeeds in its
matching.

Amos

_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

sallo baloch
plz send me a squid.config file from https and http cahe

On Mon, Sep 5, 2016 at 7:09 PM, Amos Jeffries <[hidden email]> wrote:
What are you expecting?

The Squid native format access.log shows what was delivered to the
client, and what server was involved. It does not show how the
range_offset_limit directive affected the server connection messages.

The ORIGINAL_DST indicates that this is intercepted traffic.

Notice how the TCP_MISS transactions are rotating through different IP
addresses and using ORIGINAL_DST. That is usualy a sign that Host header
verification is unable to match the destination domain name with the
client contacted IP address on many transactions.

There is a mix of TCP_HIT/206 when that verification succeeds in its
matching.

Amos

_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

Omid Kosari
In reply to this post by Amos Jeffries
It is tproxy cache . Is there a way to force caching them .
current configs:
host_verify_strict off
client_dst_passthru on

dns_nameservers x.y.160.172
dns_nameservers 217.218.155.155
dns_nameservers 217.218.127.127
dns_nameservers 8.8.8.8
dns_nameservers 8.8.4.4
dns_nameservers 208.67.222.222
dns_nameservers 208.67.220.220
dns_nameservers 208.67.222.220
dns_nameservers 208.67.220.222

The first dns server is our caching dns server and its parents dns servers are the others which appears in this config . Users dns traffic intercepted to x.y.160.172 .

So the problem seems the cdn dns round-robin . Is there a way to solve that ?
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

Amos Jeffries
Administrator
On 6/09/2016 9:14 p.m., Omid Kosari wrote:
> It is tproxy cache . Is there a way to force caching them .

No, and trying to do so is a VERY bad idea. I cannot stress enough how
bad it is.  Allowing remote attackers to completely (and invisibly)
bypass almost all other security measures you might have in your
network, just for starters.

I fully realise that not being able to cache a fairly large chunk of CDN
hosted traffic is extremely annoying and also can be costly. But the
risks of this particular vulnerability outweight that price tag.


> current configs:
> host_verify_strict off
> client_dst_passthru on
>
> dns_nameservers x.y.160.172
> dns_nameservers 217.218.155.155
> dns_nameservers 217.218.127.127
> dns_nameservers 8.8.8.8
> dns_nameservers 8.8.4.4
> dns_nameservers 208.67.222.222
> dns_nameservers 208.67.220.220
> dns_nameservers 208.67.222.220
> dns_nameservers 208.67.220.222
>
> The first dns server is our caching dns server and its parents dns servers
> are the others which appears in this config . Users dns traffic intercepted
> to x.y.160.172 .
>
> So the problem seems the cdn dns round-robin . Is there a way to solve that
> ?

Use only that first DNS server in your squid.conf. Using it as an
aggregation point reduces the impact, but only if it is also the sole
point of resolving for Squid.
 NP: this is not a fix, just a workaround to reduce impact until Squid
DNS system can be updated to do things better.

Amos

_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

Omid Kosari
Amos Jeffries wrote
Squid DNS system can be updated to do things better.
 Hi,

Any news or updates ?
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: range_offset_limit not working as expected

Amos Jeffries
Administrator
On 16/07/17 21:45, Omid Kosari wrote:
> Amos Jeffries wrote
>> Squid DNS system can be updated to do things better.
>
>   Hi,
>
> Any news or updates ?
>

Alex has been doing some of the necessary DNS redesign to get "Happy
Eyeballs" behaviour going better. So we are a few steps closer now in
Squid-5, but not quite there yet.

Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Loading...