Re: Strange Interaction between Squid and Facebook

[Patrick Blair - Peapod <patrick.blair@xxxxxxxxx>]

Hi Amos, 

I ran squid with those debug options you indicated and here is the output for requesting https://www.facebook.com and https://www.facebook.com/PeapodDelivers/

access.log

1446160994.160    471 10.1.99.147 TCP_MISS/200 3628 CONNECT api.ip2info.org:443 pblair HIER_DIRECT/178.63.49.5 -

1446160998.706     76 10.1.99.147 TCP_MISS/200 3197 CONNECT static.xx.fbcdn.net:443 - HIER_DIRECT/31.13.74.7 -

1446160998.713     57 10.1.99.147 TCP_MISS/200 3198 CONNECT static.xx.fbcdn.net:443 - HIER_DIRECT/31.13.74.7 -

1446160998.795     48 10.1.99.147 TCP_MISS/200 3198 CONNECT scontent.xx.fbcdn.net:443 - HIER_DIRECT/31.13.74.7 -

1446160998.863     25 10.1.99.147 TCP_MISS/200 2074 POST http://vassg142.ocsp.omniroot.com/ - HIER_DIRECT/96.17.10.89 application/ocsp-response

1446160999.000     61 10.1.99.147 TCP_MISS/200 3198 CONNECT static.xx.fbcdn.net:443 - HIER_DIRECT/31.13.74.7 -

1446161028.891  30142 10.1.99.147 TCP_MISS/200 8547 CONNECT fbcdn-dragon-a.akamaihd.net:443 - HIER_DIRECT/96.17.10.18 -

1446161033.696  59489 10.1.99.147 TCP_MISS/200 4953 CONNECT play.google.com:443 - HIER_DIRECT/74.125.196.100 -

1446161042.680  64997 10.1.99.147 TCP_MISS/200 23601 CONNECT mail.google.com:443 - HIER_DIRECT/74.125.21.17 -

1446161049.265    519 10.1.99.147 TCP_MISS/200 688 CONNECT api.ip2info.org:443 pblair HIER_DIRECT/178.63.49.5 -

1446161082.351     48 10.1.99.147 TCP_MISS/200 3198 CONNECT static.xx.fbcdn.net:443 - HIER_DIRECT/31.13.74.7 -

1446161091.418  58753 10.1.99.147 TCP_MISS/200 5520 CONNECT plus.google.com:443 - HIER_DIRECT/74.125.21.139 -

1446161109.247    502 10.1.99.147 TCP_MISS/200 3628 CONNECT api.ip2info.org:443

cache.log

2015/10/29 18:22:49 kid1| Starting Squid Cache version 3.3.8 for x86_64-redhat-linux-gnu...

2015/10/29 18:23:13 kid1| Starting new basicauthenticator helpers...

2015/10/29 18:23:18.853 kid1| forward.cc(317) Start: 'http://vassg142.ocsp.omniroot.com/'

2015/10/29 18:23:18.853 kid1| forward.cc(121) FwdState: Forwarding client request local=10.46.128.68:10000 remote=10.1.99.147:61616 FD 22 flags=1, url="" href="http://vassg142.ocsp.omniroot.com/">http://vassg142.ocsp.omniroot.com/

2015/10/29 18:23:18.853 kid1| forward.cc(368) startConnectionOrFail: http://vassg142.ocsp.omniroot.com/

2015/10/29 18:23:18.853 kid1| forward.cc(936) connectStart: fwdConnectStart: http://vassg142.ocsp.omniroot.com/

2015/10/29 18:23:18.853 kid1| forward.cc(1058) connectStart: fwdConnectStart: got outgoing addr 0.0.0.0, tos 0, netfilter mark 0

2015/10/29 18:23:18.854 kid1| AsyncCall.cc(18) AsyncCall: The AsyncCall fwdConnectDoneWrapper constructed, this=0x7f053becf100 [call619]

2015/10/29 18:23:18.857 kid1| AsyncCall.cc(85) ScheduleCall: ConnOpener.cc(132) will call fwdConnectDoneWrapper(local=10.46.128.68:41365 remote=96.17.10.89:80 FD 23 flags=1, data="" [call619]

2015/10/29 18:23:18.857 kid1| AsyncCallQueue.cc(51) fireNext: entering fwdConnectDoneWrapper(local=10.46.128.68:41365 remote=96.17.10.89:80 FD 23 flags=1, data="">

2015/10/29 18:23:18.857 kid1| AsyncCall.cc(30) make: make call fwdConnectDoneWrapper [call619]

2015/10/29 18:23:18.857 kid1| forward.cc(883) connectDone: local=10.46.128.68:41365 remote=96.17.10.89:80 FD 23 flags=1: 'http://vassg142.ocsp.omniroot.com/'

2015/10/29 18:23:18.857 kid1| forward.cc(1074) dispatch: local=10.46.128.68:10000 remote=10.1.99.147:61616 FD 22 flags=1: Fetching 'POST http://vassg142.ocsp.omniroot.com/'

2015/10/29 18:23:18.857 kid1| AsyncCallQueue.cc(53) fireNext: leaving fwdConnectDoneWrapper(local=10.46.128.68:41365 remote=96.17.10.89:80 FD 23 flags=1, data="">

2015/10/29 18:23:18.863 kid1| forward.cc(426) unregister: http://vassg142.ocsp.omniroot.com/

2015/10/29 18:23:18.863 kid1| forward.cc(451) complete: http://vassg142.ocsp.omniroot.com/

        status 200

2015/10/29 18:23:18.863 kid1| forward.cc(1212) reforward: http://vassg142.ocsp.omniroot.com/?

2015/10/29 18:23:18.863 kid1| forward.cc(1215) reforward: No, ENTRY_FWD_HDR_WAIT isn't set

2015/10/29 18:23:18.863 kid1| forward.cc(475) complete: server (FD closed) not re-forwarding status 200

2015/10/29 18:23:18.863 kid1| forward.cc(248) ~FwdState: FwdState destructor starting

2015/10/29 18:23:18.863 kid1| AsyncCall.cc(48) cancel: will not call fwdConnectDoneWrapper [call619] because FwdState destructed

2015/10/29 18:23:18.863 kid1| forward.cc(278) ~FwdState: FwdState destructor done

It doesn't look like it's showing anything for the facebook request, just the ocsp one.

I forgot to mention as well in my earlier reply, we have the proxy listening over port 10000 if that makes a difference.

For your question:

Is it breaking only when Squid is in the "other" datacenter from the
client(s) ?

Not sure if I answered that completely. Clients that are "local" to that datacenter and not local to it have the same response, however I have been making my tests from the same location.

Thanks again for your response, please let me know if I can provide any further information.

Pat Blair
Sr. Unix Administrator
Peapod, LLC
pblair@xxxxxxxxxx

This email and any attachments may contain information that is proprietary,

confidential and/or privileged and for the sole use of the intended recipients(s)

only.

If you are not the intended recipient, please notify the sender by return

email and delete all copies of this email and any attachments. Ahold and/or its

subsidiaries shall neither be liable for the inaccurate or incomplete transmission

of the information contained in this email or any attachments, nor for any delay

in its receipt. To the extent this email is intended to create any legal obligation,

the obligation shall bind only the contracting entity and not any other entity within

the Ahold Group.

This email and any attachments may contain information that is proprietary,

confidential and/or privileged and for the sole use of the intended recipients(s)

only.

If you are not the intended recipient, please notify the sender by return

email and delete all copies of this email and any attachments. Ahold and/or its

subsidiaries shall neither be liable for the inaccurate or incomplete transmission

of the information contained in this email or any attachments, nor for any delay

in its receipt. To the extent this email is intended to create any legal obligation,

the obligation shall bind only the contracting entity and not any other entity within

the Ahold Group.

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users