On 23/05/2013 11:35 p.m., James Harper wrote:
I was testing an external_acl_type and set ttl=3 so my script would be called often enough to see what was happening. This seemed to result in the acl logging as denied fairly regularly, even though it definitely returns OK. Putting ttl up to 30 seconds seems to make all the problems go away. Obviously 3 seconds is a dumb ttl, even for testing, but is this expected?
external_acl_type is just a definition informing Squid hw to service some named ACL test of type "external". That external-type ACL is in turn just a OK/ERR/BH test as to whether some conditions are true/false/unknown at the time of testing. Notice how there is no "deny" anywhere in the details of it.
You will be *using* that external ACL in some access control point of Squid. Which one, what actino is assigned to it and what else is going on will determine what happens to any given request.
So... please provide your whole config to show what is going on in these strange tests of yours.
Amos
