Is there any difference if you configure the proxy explicit without using a PAC? Do you have any rules in the PAC depending on destinaion IP of the requested server? fre 2008-06-06 klockan 08:56 +0200 skrev Ionel GARDAIS: > Configured proxy for now. > I'm doing some network to see how can I use squid in transparent > interception without breaking the exclude rules ffrom the current pac we > use. > > Ionel > > > Henrik Nordstrom wrote: > > Configured proxy, or transparent interception? > > > > > > On fre, 2008-06-06 at 08:29 +0200, Ionel GARDAIS wrote: > > > >> DNS issues ... client side ? proxy side ? > >> clients resolve to Windows Server 2003 DNS for internal domain names. > >> These servers forward to DMZ DNS (running bind) for internal view of > >> the DNS (private IPs). DMZ DNS forward to the world for all internet > >> name resolution. > >> The squid box uses the DMZ DNS. > >> > >> Thanks, > >> Ionel > >> > >> Henrik Nordstrom wrote: > >> > >>> tor 2008-06-05 klockan 19:10 +0200 skrev GARDAIS Ionel: > >>> > >>> > >>>> After rereading my post, I saw that I did not finish a line : > >>>> "[...] cache-misses median service times are around 200ms and cache-hits are around 3ms" but we often see a 10-second lag for browser to start loading the page. > >>>> > >>>> > >>> That's usually DNS issues. For example if you have two DNS servers > >>> configured where one can not resolve external names... > >>> > >>> Regards > >>> Henrik > >>> > >>> > >> -- > >> Ionel GARDAIS > >> System-Network Engineer > >> >
