I updated the following entry in this way and now it works FINE ( no warning logs in cache.log) : acl psvirt dst A.B.C.D ==> acl psvirt dstdomain page.example.com so I have: http_port A.B.C.D:80 accel vhost defaultsite=HostA:8080 cache_peer HostA parent 8080 0 no-query originserver name=PSAccel acl psvirt dstdomain page.example.com http_access allow psvirt cache_peer_access PSAccel allow psvirt cache_peer_access PSAccel deny all If I understood, Squid search 'host' header in the client request but if client fails to send this header, Squid assumes the domain specified by defaultsite. But when client fails to send 'host' header ? And if I delete "defaultsite=HostA:8080" what happens ? > ... there is a great risk that 8080 port number > leaks out to clients in various situations I don't understand what you want to say. This web server (HostA) is only accessible from intern. network by link on another server which references to HostA:8080, while fro external network by Squid Accelerator mechanism. Thank you very much for your help -----Messaggio originale----- Da: Henrik Nordström [mailto:henrik@xxxxxxxxxxxxxxxxxxx] Inviato: Wednesday, March 10, 2010 8:50 PM A: Riccardo Castellani Cc: squid-users@xxxxxxxxxxxxxxx Oggetto: Re: R: [squid-users] Failed to select source ons 2010-03-10 klockan 15:19 +0100 skrev Riccardo Castellani: > http_port A.B.C.D:80 accel vhost defaultsite=HostA:8080 defaultsite should be your preferred site name as requested by clients, i.e. www.example.com or whatever your main web site published here is. If unsure then leave it out entirely. > cache_peer HostA parent 8080 0 no-query originserver name=PSAccel > > acl psvirt dst A.B.C.D This is not right. Should be acl psvirt dstdomain www.example.com [etc, list all site names this server publishes here] > My Squid listens to on specific virtual IP address (IP: A.B.C.D, port 80) > where it accelerates http requests to HostA which has opened port 8080. If you can then it's much better if you can move the web server on HostA over to port 80 as well.. there is a great risk that that 8080 port number leaks out to clients in various situations. Regards Henrik
