Hi,
I'm having some difficulty trying to set up my squid servers to use
cache-digests.
First of all, in order to use cache-digests, must I also use ICP?
I do not get any errors, but I do not know even if it's working. What
should I see in the access.log?
My setup is made up of 3 servers(squid on all 3) behind a load balancer
on the same subnet. I only want sibling relationships between my caches.
There is no other proxy server on this subnet. I have only configured
the first two at the moment. The configuration is the same for both (IP
addresses of course are substituted appropriately).
Squid version is 3.0.STABLE20
Compile options are:
squid/sbin/squid -v
Squid Cache: Version 3.0.STABLE20
configure options: '--with-aio' '--with-pthreads'
'--enable-linux-netfilter' '--enable-snmp' '--enable-delay-pools'
'--enable-coss-aio-ops' '--with-aufs-threads=30'
'--enable-removal-policies' '--enable-storeio=ufs,aufs' '--enable-icmp'
'--enable-useragent-log' '--with-maxfd=32768' '--enable-poll'
'--disable-ident-lookups' '--enable-truncate'
'--enable-removal-policies=heap,lru' '--enable-follow-x-forwarded-for'
'--enable-forw-via-db' '--enable-cache-digests'
'--prefix=/local/squid-3.0.STABLE20' 'CFLAGS=-DNUMTHREADS=30'
The only thing I can get from squid's logs is (from server-squid1 access
log file):
TCP_MEM_HIT/200 2366753 GET
http://server-squid2:3128/squid-internal-periodic/store_digest - NONE/-
application/cache-digest
From what I can understand, my server fetches the cache digest. But
what happens from there on? What happens if the requested site is found
on my sibling's cache? How does squid request it from the sibling cache,
and what is seen, if anything, in the logfile?
Thanks in advance for any help!
Following is my squid.conf of server-squid1 :
acl manager proto
cache_object acl localhost
src 127.0.0.1/32 acl
to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl purge method
PURGE acl
server-squid1 src 10.95.4.46/32
acl server-squid2 src 10.95.4.50/32
acl SSL_ports port
443
acl SSL_ports port 21 # Added for filezilla
downloads acl SSL_ports port
1025-65535 # Added for filezilla
downloads acl Safe_ports port
80 #
http
acl Safe_ports port 8080 #
webcache
acl Safe_ports port 21 #
ftp
acl Safe_ports port 443 #
https
acl Safe_ports port 70 #
gopher
acl Safe_ports port 210 #
wais
acl Safe_ports port 1025-65535 # unregistered
ports acl
Safe_ports port 280 #
http-mgmt
acl Safe_ports port 488 #
gss-http
acl Safe_ports port 591 #
filemaker
acl Safe_ports port 777 # multiling
http acl
CONNECT method
CONNECT
acl FTP proto FTP #for other ftp
clients http_access
allow manager localhost
http_access allow manager server-squid1
http_access deny manager
http_access allow server-squid2
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow server-squid1
http_access allow localhost
http_access allow purge localhost
http_access deny purge
http_access deny all
icp_access deny all
htcp_access deny all
http_port 10.95.4.46:3128
cache_peer 10.95.4.50 sibling 3128 0 no-netdb-exchange no-query
hierarchy_stoplist cgi-bin ?
cache_mem 796 MB
maximum_object_size_in_memory 128 KB
cache_dir aufs /local/squid/var/cache 15920 24 256
max_open_disk_fds 32768
maximum_object_size 768 KB
cache_swap_low 80
cache_swap_high 100
access_log syslog:local5 squid
cache_store_log none
logfile_rotate 10
ftp_passive on
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
half_closed_clients off
cache_effective_user proxy
visible_hostname server-squid1
unique_hostname server-squid1
digest_generation on
always_direct allow FTP
always_direct deny all
dns_nameservers 127.0.0.1 10.95.4.18 10.95.4.20
forwarded_for on
client_db off
coredump_dir /local/squid/var/cache
