Frito Lay wrote:
Hello list,
Some medieval country that shall remain unnamed is
blocking access to
some
specific websites, but the list of websites is huge,
dynamic, and not
public.
I have two proxy servers, one of which is located
outside of this
firewall, but access to this proxy server is slower
than to the local
one.
I would like to configure the local proxy to use a
peer cache based on
the
geoip address of the destination.
If the required object belongs to a specific country
then the request
will
go through the second proxy.
I know about the cache_peer_domain option, but I would
like to use a
geoip
based solution.
....
So the acl is evaluated, returns false, and the log
file doesn't have
any
output. How come?
Nope. The helpers is a "slow" category lookup being used in
a "fast"
category access list. The helper is never called, just the
existing results
cache tested to see if a result is known.
http://wiki.squid-cache.org/SquidFaq/SquidAcl#Fast_and_Slow_ACLs
To get this to work you need to use the ACL in a "slow"
category access
list such as http_access first to get the result cached in
Squid so it can
be retrieved without any delays by cache_peer_access.
Amos
Thanks, http_access did the trick.
Perhaps there should be a reference to this in the docs, under the cache_peer_access page.
By the way, I can contribute my external script, in case it would be a useful addition to the squid package.
Thanks a lot!
Thank you. It's always worth a look. can you attach it to a mail to
squid-dev mailing list then please? with a bit of usage and use-case
description for docs.
Amos
--
Please be using
Current Stable Squid 2.7.STABLE7 or 3.0.STABLE19
Current Beta Squid 3.1.0.14
