Amos, Here's a challenge, I can't find the reason why the Header rewrite is not happening? My configuration has only 1 "web server"(unified1.abstract.net, IP:192.168.0.10) behind the reverse proxy server(proxy1.abstract.net, IP: 192.168.0.20) What I want the reverse proxy server to do is: a) not cache anything, essentially just stream the web server content straight to the client b) *suppose* the Header needs to be rewritten, but I am assuming this get's done by virtue of using the following lines in squid.conf: ### cache_peer unified1.abstract.net parent 80 0 no-query originserver forceddomain=unified1.abstract.net name=myAccel ### acl FMS dstdomain unified1.abstract.net http_access allow FMS cache_peer_access myAccel allow FMS ------------------ Any ideas??????? Below is some logging ---------------------- THNKs The request GET http://proxy1:80/configMultiSiteConfigRequest is ALLOWED, because it matched 'PROXY1' 2009/04/07 04:39:04| clientStoreURLRewriteDone: 'http://proxy1.abstract.net/configMultiSiteConfigRequest' result=NULL 2009/04/07 04:39:04| WARNING: Forwarding loop detected for: Client: 192.168.0.20 http_port: 192.168.0.20:80 GET http://proxy1.abstract.net/configMultiSiteConfigRequest HTTP/1.0 User-Agent: FMS-FCC/1.3 (bd:20081014) Java/1.5.0_11 Host: proxy1.abstract.net Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 Via: 1.1 proxy1:80 (squid/2.7.STABLE6), 1.0 proxy1:80 (squid/2.7.STABLE6) X-Forwarded-For: 192.168.0.20, 192.168.0.20 Cache-Control: max-age=259200 Connection: keep-alive 2009/04/07 04:39:04| clientProcessRequest2: storeGet() MISS 2009/04/07 04:39:04| storeCreateEntry: 'http://proxy1.abstract.net/configMultiSiteConfigRequest' 2009/04/07 04:39:04| new_MemObject: returning 00F818D8 2009/04/07 04:39:04| new_StoreEntry: returning 00F81890 2009/04/07 04:39:04| storeKeyPrivate: GET http://proxy1.abstract.net/configMultiSiteConfigRequest 2009/04/07 04:39:04| storeHashInsert: Inserting Entry 00F81890 key '3D8B98FA9C7FBCC0711DCF9AB7173967' 2009/04/07 04:39:04| storeReleaseRequest: '3D8B98FA9C7FBCC0711DCF9AB7173967' 2009/04/07 04:39:04| storeLockObject: (C:\work\SNT-2.7\src\store_client.c:122): key '3D8B98FA9C7FBCC0711DCF9AB7173967' count=2 2009/04/07 04:39:04| storeClientCopy: 3D8B98FA9C7FBCC0711DCF9AB7173967, seen 0, want 0, size 4096, cb 0041D44A, cbdata 00F80E80 2009/04/07 04:39:04| cbdataLock: 00F80E80 2009/04/07 04:39:04| cbdataLock: 00F81A78 2009/04/07 04:39:04| storeClientCopy2: 3D8B98FA9C7FBCC0711DCF9AB7173967 2009/04/07 04:39:04| storeClientCopy3: Waiting for more 2009/04/07 04:39:04| cbdataUnlock: 00F81A78 2009/04/07 04:39:04| storeLockObject: (C:\work\SNT-2.7\src\errorpage.c:316): key '3D8B98FA9C7FBCC0711DCF9AB7173967' count=3 2009/04/07 04:39:04| errorConvert: %U --> 'http://proxy1.abstract.net/configMultiSiteConfigRequest' 2009/04/07 04:39:04| errorConvert: %U --> 'http://proxy1.abstract.net/configMultiSiteConfigRequest' 2009/04/07 04:39:04| errorConvert: %w --> 'webmaster' 2009/04/07 04:39:04| errorConvert: %w --> 'webmaster' 2009/04/07 04:39:04| errorConvert: %T --> 'Tue, 07 Apr 2009 08:39:04 GMT' 2009/04/07 04:39:04| errorConvert: %h --> 'proxy1' 2009/04/07 04:39:04| errorConvert: %s --> 'squid/2.7.STABLE6' 2009/04/07 04:39:04| errorConvert: %S --> ' <BR clear="all"> <HR noshade size="1px"> <ADDRESS> Generated Tue, 07 Apr 2009 08:39:04 GMT by proxy1 (squid/2.7.STABLE6) </ADDRESS> </BODY></HTML> ' 2009/04/07 04:39:04| storeExpireNow: '3D8B98FA9C7FBCC0711DCF9AB7173967' 2009/04/07 04:39:04| InvokeHandlers: 3D8B98FA9C7FBCC0711DCF9AB7173967 2009/04/07 04:39:04| InvokeHandlers: checking client #0 2009/04/07 04:39:04| cbdataLock: 00F81A78 2009/04/07 04:39:04| storeClientCopy2: 3D8B98FA9C7FBCC0711DCF9AB7173967 2009/04/07 04:39:04| storeClientCopy3: Copying from memory 2009/04/07 04:39:04| cbdataValid: 00F80E80 2009/04/07 04:39:04| clientBuildReplyHeader: Error, don't keep-alive 2009/04/07 04:39:04| clientSendHeaders: 181 bytes of headers 2009/04/07 04:39:04| The reply for GET http://proxy1.abstract.net/configMultiSiteConfigRequest is ALLOWED, because it matched 'PROXY1' 2009/04/07 04:39:04| cbdataLock: 00F80E80 2009/04/07 04:39:04| cbdataUnlock: 00F80E80 2009/04/07 04:39:04| cbdataUnlock: 00F81A78 2009/04/07 04:39:04| storeComplete: '3D8B98FA9C7FBCC0711DCF9AB7173967' 2009/04/07 04:39:04| storeEntryValidLength: Checking '3D8B98FA9C7FBCC0711DCF9AB7173967' 2009/04/07 04:39:04| InvokeHandlers: 3D8B98FA9C7FBCC0711DCF9AB7173967 2009/04/07 04:39:04| InvokeHandlers: checking client #0 2009/04/07 04:39:04| storeUnlockObject: (C:\work\SNT-2.7\src\errorpage.c:331): key '3D8B98FA9C7FBCC0711DCF9AB7173967' count=2 On Tue, Apr 7, 2009 at 5:03 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > louis gonzales wrote: >> >> Amos, >> on "defaultsite=X tells Squid to assume the domain X was wanted when >> broken clients fail to send a Host: header properly." >> >> is "domain=FQDN" or just the domain name(viz. not host.domain.com, nor >> cname.domain.com) - e.g. FQDN=www.domain.com, where as >> domainname=domain.com without the host/cname prefix. >> >> "words" themselves are ambiguous.... I appreciate your insight. > > The situation is slightly ambiguous also. It depends on what your DNS > requirements are. > > From the official docs: > > " > defaultsite=domainname > > What to use for the Host: header if it is not present > in a request. Determines what site (not origin server) > accelerators should consider the default. > Implies accel. > " > > What the Host: header should contain depends entirely on whether you are > virtual hosting or not. > > All we can say is its a domain. _should_ be a FQDN, but _may_ be anything > the squid box can resolve. > > > Amos > >> >> >> On Tue, Apr 7, 2009 at 4:05 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> >> wrote: >>> >>> louis gonzales wrote: >>>> >>>> Amos, >>>> Yes "did seen these". My specific question, results from the fact >>>> that the information provided for "defaultsite=mysite.domain.com" (not >>>> origin server) -> is ambiguous. >>>> >>>> When one is configuring a reverse proxy server, it's usually, because >>>> one wants to have the reverse proxy server "appear as the origin >>>> server". >>> >>> Aha, hopefully my new additions there will reduce that ambiguity a >>> little. >>> >>> Amos >>> >>>> >>>> On Tue, Apr 7, 2009 at 3:30 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> >>>> wrote: >>>>> >>>>> louis gonzales wrote: >>>>>> >>>>>> Dist, >>>>>> Squid 2.7.Stable6 >>>>>> I'm setting up a reverse proxy, such that the Squid system will be >>>>>> viewed as the "originserver" to the clients contacting it. >>>>>> >>>>>> Does the "defaultsite=" attribute get the name of the "actual web >>>>>> server" or the proxy server? >>>>> >>>>> defaultsite= is the public domain name visitors are expected to visit. >>>>> It's used to fix broken HTTP Host: headers some clients still send. >>>>> In a virtual-host site broken clients will be passed to that domain. >>>>> >>>>> seen these? >>>>> http://wiki.squid-cache.org/ConfigExamples >>>>> >>> Amos >>> -- >>> Please be using >>> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13 >>> Current Beta Squid 3.1.0.6 >>> >> >> >> > > > -- > Please be using > Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13 > Current Beta Squid 3.1.0.6 > -- Louis Gonzales BSCS EMU 2003 HP Certified Professional louis.gonzales@xxxxxxxxxxxxxx
