Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    cache_object// showing miss should not cache the loopback right?

    Scheduled Pinned Locked Moved Cache/Proxy
    21 Posts 3 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JonathanLeeJ
      JonathanLee @mcury
      last edited by

      @mcury light squid 🦑 can it see that and try to cache that? Should I add a bypass in light squid?

      Make sure to upvote

      M 1 Reply Last reply Reply Quote 0
      • M
        mcury @JonathanLee
        last edited by mcury

        @JonathanLee said in cache_object// showing miss should not cache the loopback right?:

        light squid 🦑 can it see that and try to cache that? Should I add a bypass in light squid?

        I suppose lightsquid is checking cache status only.
        First I would make sure it is lightsquid generating those logs, if you can, disable for a few minutes to see if those logs disappear.

        According to this post:

        You can try this:

        acl exclude dst localhost
        access_log none exclude
        

        dead on arrival, nowhere to be found.

        JonathanLeeJ 1 Reply Last reply Reply Quote 1
        • JonathanLeeJ
          JonathanLee @mcury
          last edited by

          @mcury ok it is doing this in there a way to resolve this? Bypass local host on squidguard?

          Make sure to upvote

          M 1 Reply Last reply Reply Quote 0
          • M
            mcury @JonathanLee
            last edited by mcury

            @JonathanLee said in cache_object// showing miss should not cache the loopback right?:

            Bypass local host on squidguard?

            I always bypassed these networks from the proxy, perhaps you should, unfortunately there is a long time I don't use squid, so give it a shot to see how it goes.

               isInNet(dnsResolve(host), "10.0.0.0",  "255.0.0.0") ||
                isInNet(dnsResolve(host), "172.16.0.0",  "255.240.0.0") ||
                isInNet(dnsResolve(host), "192.168.0.0",  "255.255.0.0") ||
                isInNet(dnsResolve(host), "127.0.0.0", "255.0.0.0") ||
            

            dead on arrival, nowhere to be found.

            JonathanLeeJ 1 Reply Last reply Reply Quote 1
            • JonathanLeeJ
              JonathanLee @mcury
              last edited by

              @mcury thanks where are you adding this information into the WPAD? DNS entries.

              Make sure to upvote

              M 1 Reply Last reply Reply Quote 0
              • M
                mcury @JonathanLee
                last edited by mcury

                @JonathanLee said in cache_object// showing miss should not cache the loopback right?:

                @mcury thanks where are you adding this information into the WPAD? DNS entries.

                I wouldn't use WPAD because I can't update the .pac file on the fly.
                I used to deploy .pac file directly to the browsers, using a setting to do not cache .pac file using GPO.
                So, when a new bypass was required, I would update the .pac file and ask the user to close and reopen the browser to get the newest thing.
                I also used to set "do not allow the user to change proxy settings".

                For smartphones, I would put them in another VLAN and leave them alone, sometimes some DNS filtering only depending on the environment.

                dead on arrival, nowhere to be found.

                JonathanLeeJ 2 Replies Last reply Reply Quote 1
                • JonathanLeeJ
                  JonathanLee @mcury
                  last edited by

                  @mcury

                  IMG_0393.jpeg

                  Is this where the ACL should go?

                  Make sure to upvote

                  1 Reply Last reply Reply Quote 0
                  • JonathanLeeJ
                    JonathanLee @mcury
                    last edited by

                    @mcury

                    More thought this would be a better solution right outside of just not logging it?

                    IMG_0395.png

                    Except http access deny at the end of the list

                    Make sure to upvote

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      mcury @JonathanLee
                      last edited by

                      @JonathanLee To be honest, I'm not sure what is best, a lot things about squid I forgot..
                      I have a few .txt files here stored from years ago but that is it..

                      dead on arrival, nowhere to be found.

                      JonathanLeeJ 1 Reply Last reply Reply Quote 1
                      • JonathanLeeJ
                        JonathanLee @mcury
                        last edited by JonathanLee

                        @mcury I think I found the solution..

                        Screenshot 2024-03-18 at 10.41.53.png

                        or just add loopback to splice only so it stops accessing miss_access or acl for it

                        Screenshot 2024-03-18 at 10.46.18.png

                        testing this

                        AnnotateClient_8h__incl.png

                        ref:
                        http://www.squid-cache.org/Doc/config/acl/
                        http://www.squid-cache.org/Doc/code/AnnotateClient_8h.dyn

                        Make sure to upvote

                        1 Reply Last reply Reply Quote 1
                        • JonathanLeeJ
                          JonathanLee
                          last edited by JonathanLee

                          Screenshot 2024-03-18 at 11.25.28.png

                          I am going to test this without use of splice the loopback. I removed it from my non bump

                          Per Squid Docs...

                          acl aclname annotate_client [-m[=delimiters]] key=value ...
                          	acl aclname annotate_client [-m[=delimiters]] key+=value ...
                          	  #
                          	  # Always matches. [fast]
                          	  # Used for its side effect: This ACL immediately adds a
                          	  # key=value annotation to the current client-to-Squid
                          	  # connection. Connection annotations are propagated to the current
                          	  # and all future master transactions on the annotated connection.
                          	  # See the annotate_transaction ACL for details.
                          	  #
                          	  # For example, the following configuration avoids rewriting URLs
                          	  # of transactions bumped by SslBump:
                          	  #
                          	  #  # First, mark bumped connections:
                          	  #  acl markBumped annotate_client bumped=true
                          	  #  ssl_bump peek acl1
                          	  #  ssl_bump stare acl2
                          	  #  ssl_bump bump acl3 markBumped
                          	  #  ssl_bump splice all
                          	  #
                          	  #  # Second, do not send marked transactions to the redirector:
                          	  #  acl markedBumped note bumped true
                          	  #  url_rewrite_access deny markedBumped
                          	  #
                          	  #  # Note that the following would not have worked because acl3 alone
                          	  #  # does not determine whether the connection is going to be bumped:
                          	  #  url_rewrite_access deny acl3 # Wrong!
                          
                          

                          Make sure to upvote

                          JonathanLeeJ 1 Reply Last reply Reply Quote 1
                          • JonathanLeeJ
                            JonathanLee @JonathanLee
                            last edited by JonathanLee

                            @JonathanLee Screenshot 2024-03-18 at 11.29.44.png

                            Now I got some improved hits!!! WOW

                            Make sure to upvote

                            M 1 Reply Last reply Reply Quote 1
                            • M
                              mcury @JonathanLee
                              last edited by

                              @JonathanLee ow, good to hear that 👍

                              dead on arrival, nowhere to be found.

                              1 Reply Last reply Reply Quote 1
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.