Hello, I've just set up my first Squid server. So far I've been very impressed with the performance. I would have been lost without this list so thanks for all your help. My config seems to work, but the peers are not talking to each other at all and I was hoping that someone on this (extremely helpful) list can help me out. Here are the parameters: - 3 Squid servers running in accelerator mode - Each server has its own cache (I have plenty of space available) - 3 web servers - 3 different domains are served by these servers (domain.com, test.domain.com, dev.domain.com) and each goes to a different origin server. - I want the Squid servers to query each other before going to the parent (this is not working) - I have set up the peers as siblings (not sure if this is correct) - Each server has a different origin server defined (webserver 1, 2, 3 respectively) - I pretty much always want to serve from the cache regardless of header (We enforce unique file names) - This server only serves jpg, png, gif, js, css, and txt So I have four questions: 1. Is it possible to round robin the origin server instead of defining different IPs for each server? 2. How can I make the servers talk to each other, before hitting the origin server? 3. Is there anything else odd in my configuration? 4. How can I block all other file types besides images, js, css, txt. I know this can be done with an acl but thus far I haven't figured it out. Here are the IPs: Squid 1: 10.155.0.90:80 -> Webserver 1: 10.155.0.101 Squid 2: 10.155.0.91:80 -> Webserver 1: 10.155.0.102 Squid 3: 10.155.0.92:80 -> Webserver 1: 10.155.0.103 Squid 1 Config: visible_hostname img1.squid_server.com dns_nameservers 10.155.0.240 10.155.0.241 cache_effective_user squid cache_effective_group squid http_port 127.0.0.1:3128 accel defaultsite=localhost vhost http_port 10.155.0.90:80 accel defaultsite=squid_server.com vhost cache_peer 10.155.0.101 parent 80 0 no-query originserver no-digest no-netdb-exchange forceddomain=www.domain.com name=prod cache_peer_domain prod squid_server.com www.squid_server.com cache_peer 10.155.0.101 parent 80 0 no-query originserver no-digest no-netdb-exchange forceddomain=test.domain.com name=test cache_peer_domain test test.squid_server.com cache_peer 10.155.0.101 parent 80 0 no-query originserver no-digest no-netdb-exchange forceddomain=dev.domain.com name=dev cache_peer_domain dev dev.squid_server.com cache_peer 10.155.0.91 sibling 80 3130 allow-miss no-netdb-exchange name=squid2 cache_peer 10.155.0.92 sibling 80 3130 allow-miss no-netdb-exchange name=squid3 #headers reply_header_access Cache-Control deny all header_replace Cache-Control max-age=1209600 refresh_pattern . 0 50% 1209600 ignore-no-cache override-expire override-lastmod reload-into-ims ignore-reload ignore-no-store ignore-private reload_into_ims on #ICP query_icmp on icp_port 3130 udp_incoming_address 10.155.0.90 # Basic ACLs acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl mydomain dstdomain .domain.com .squid_server.com localhost .external.alliedadvpub.com acl localnet src 10.0.0.0/16 acl Safe_ports port 80 # http acl Safe_ports port 3128 # admin acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access allow mydomain http_access deny all icp_access allow localnet icp_access deny all cache_peer_access prod allow mydomain cache_peer_access prod deny all cache_peer_access test allow mydomain cache_peer_access test deny all cache_peer_access dev allow mydomain cache_peer_access dev deny all #cache_peer_access squid1 allow mydomain localnet #cache_peer_access squid1 deny all cache_peer_access squid2 allow mydomain localnet cache_peer_access squid2 deny all cache_peer_access squid3 allow mydomain localnet cache_peer_access squid3 deny all icp_access allow localnet icp_access deny all (other settings removed) The other configs are exactly the same except the siblings are configure to be the other servers and the parent for the main server points to another IP (a different webserver). I'm not seeing anything weird in cache.log. It seems to load the siblings but when I look at the cache manger ICP sent and received is 0. Jeff
