|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Be careful, guys. Via is reauired to HTTP by RFC. 24.06.2016 21:40, Ozgur Batur пишет: > Hi Rafael, Yuri, > > Thank you very much, "via off" did the trick. It is probably a server specific issue as you said. > > Best Regards, > > On Fri, Jun 24, 2016 at 6:29 PM, Rafael Akchurin <rafael.akchurin@xxxxxxxxxxxx <mailto:rafael.akchurin@xxxxxxxxxxxx>> wrote: > > Hello Ozgur, Yuri, > > > > I also see this error. Actually it is even present on videos.yahoo.com <http://videos.yahoo.com> if I am not mistaken. > > The reason for this is unclear for me (incorrect handling of “Via” header by some of back office servers of Yahoo???) > > > > I was able to fix it by setting “via off” in squid.conf. I am not sure if this is the recommended way ( I presume not) and how to disable Via only for yahoo servers. Hopefully Amos has better answers. > > > > Via looks like: > > > > Via:"http/1.1 fts110.flickr.bf1.yahoo.com <http://fts110.flickr.bf1.yahoo.com> (ApacheTrafficServer [cMs f ]), http/1.1 r02.ycpi.ams.yahoo.net <http://r02.ycpi.ams.yahoo.net> (ApacheTrafficServer [cMsSf ]), 1.1 qlproxy (squid/3.3.8)" > > > > Best regards, > > Rafael Akchurin > > Diladele B.V. > > > > *From:*squid-users [mailto:squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx>] *On Behalf Of *Ozgur Batur > *Sent:* Friday, June 24, 2016 4:23 PM > *To:* Yuri <yvoinov@xxxxxxxxx <mailto:yvoinov@xxxxxxxxx>> > *Cc:* squid-users@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users@xxxxxxxxxxxxxxxxxxxxx> > *Subject:* Re: flickr.com <http://flickr.com> redirect error > > > > Hi Yuri, > > > > Thank you. I put the #301 loop directives and restarted squid unfortunately result is the same. Here is the access logs: > > > > 1466777191.791 235 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100 <http://188.125.93.100> text/html > > 1466777192.031 237 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100 <http://188.125.93.100> text/html > > 1466777192.386 352 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100 <http://188.125.93.100> text/html > > 1466777192.612 223 ::1 TCP_MISS/301 987 GET https://www.flickr.com/ - HIER_DIRECT/188.125.93.100 <http://188.125.93.100> text/html > > ... > > > > As I understand all responses are from origin server, there is no cache hit with or without store_miss and send_hit. Confusing part is when directly connected to server without proxy, flickr server does not send 301 response. When squid sends the same request somehow flickr server returns 301 with same URL. > > > > Ozgur > > > > > > On Fri, Jun 24, 2016 at 3:50 PM, Yuri <yvoinov@xxxxxxxxx <mailto:yvoinov@xxxxxxxxx>> wrote: > > Try to do something like: > > > > # 301 loop > acl text_mime rep_mime_type text/html text/plain > > acl http301 http_status 301 > > store_miss deny text_mime http301 > send_hit deny text_mime http301 > > > > 24.06.2016 18:14, Ozgur Batur пишет: > > I receive too many redirects(301 responses with same page URL) error on browser when opening https://www.flickr.com via Squid 3.5 proxy with SSL interception. If I connect to flickr website directly without Squid error does not happen. > > > > I tested it on two different systems one is Centos other is Ubuntu. There is no acl, redirect or any other configuration in squid.conf except enabling SSL interception. > > > > I opened http://bugs.squid-cache.org/show_bug.cgi?id=4537 for this issue but later thought it is better to ask if you also experience the same issue. > > > > > > Ozgur > > > > _______________________________________________ > > squid-users mailing list > > squid-users@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users@xxxxxxxxxxxxxxxxxxxxx> > > http://lists.squid-cache.org/listinfo/squid-users > > > > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users@xxxxxxxxxxxxxxxxxxxxx> > http://lists.squid-cache.org/listinfo/squid-users > > > > > > > -- > H Özgür Batur -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXbVmoAAoJENNXIZxhPexGPFgH/ib6RKjQ/JhhnvTtBQnM6euV +F6e/rrf6B295OpsrUgqFdogmCshJZGivdSBd8266KPOlvxE3I0F01SNBtAt96wC 1pL3Sam+TmFwbOGa5vYStQ+ZAkn5ReiSHppKVdeR1lXxBlMuhcDJovIxDtXvVV5G SZcmJWT1q+LS8vcS+mGybXOt0H7J32sSUyor+qJ0CZEfG5HEPb1XKjave1mJNxUj JEwsL0/B5zVw8LtL2yOzZY7E3ERY0r2ieGqQ4GpzYUVoDwoc5q8xwKaU08j5qyrP iS2fW8wbAZ2RoZmvJRxnFpFKel0NgzwrAOUeSAs8hPONUUpWaklFTL55lezNY+A= =t07f -----END PGP SIGNATURE----- |
Attachment:
0x613DEC46.asc
Description: application/pgp-keys
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
