On 10/30/18 6:45 PM, Arunabha Saha wrote: > Squid 3.5.25 does not seem to recognise the 408 request timeout error > code from ICAP. Squid effectively recognizes ICAP 408 response as an ICAP transaction error response and blames the ICAP service for that error. That (minimal) support can be improved, of course. See options #1 and #3 below. As with any timeout, it is impossible to say in general which side of the connection is at fault. This case has at least three sides: It could be the HTTP agent, Squid, and/or the ICAP service. Did one of them stall the transaction? Or was the ICAP service just too impatient? See option #4 below. Needless to say, treating all ICAP service timeouts as if nothing bad happened would break some existing Squid deployments (while possibly fixing yours). A proper general solution (option #3 below) would most likely require making Squid behavior configurable. > The more troublesome issue for me is the exception it generates and then > declares ICAP down after a certain number of such exceptions. > > I don't want to disable the failure limit entirely given that we can > often have genuine failures that squid needs to detect. > > What i'd like to see is squid should not throw an exception in this > case. The "exception" is a minor low-level/technical detail. What you really want to see is Squid blaming itself (rather than the ICAP service) for the problem. Squid indeed lacks that kind of functionality, but it can be added if really needed. See options #1 and #3 below. > The timeout is somewhat aggressive but works with an earlier > version of ICAP (0.1.x). The one i'm testing is 0.5.3. Please note that ICAP is a protocol, not a product/software name. It probably does not matter what ICAP service you are using though. > Any suggestions? I can suggest a few options, in no particular order: 1. Modify your Squid to treat 408 differently. 2. Modify your ICAP service to stop sending ICAP 408 responses to Squid. 3. Add proper ICAP timeout support feature to Squid. 4. Investigate why your ICAP service times out. If you are lucky, you may be able to fix or work around the problem by adjusting Squid and/or your ICAP service configuration. For option #1, Adaptation::Icap::ModXact::parseIcapHead() may be a good starting point. For options #1 and #3, see also https://wiki.squid-cache.org/SquidFaq/AboutSquid#How_to_add_a_new_Squid_feature.2C_enhance.2C_of_fix_something.3F In most cases, option #4 is the best first step but YMMV. HTH, Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
