On 10/18/21 5:04 AM, Sándor Szabolcs [Budapest Környéki Törvényszék] wrote: > My squid cache log has a lot of error: > > tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD > flags=1: read/write failure: (104) Connection reset ny peer > ... my squid working perfectly. Assuming the above message is logged with debugging level 2 or higher: You should not be worried about it. That debugging information is meant for developers. To be more precise, one should either not look at developer-only debugging information or, if they do look at it, they should know whether they should worry about ECONNRESET errors :-). If this is a production Squid, consider limiting debugging sessions to active problem investigations -- one should not be running Squid with debugging level 2 or higher without a good reason because it obscures important messages, slows Squid down, increases attack surfaces, etc. HTH, Alex. > workers 4 > > cpu_affinity_map process_numbers=1,2,3,4 cores=3,4,5,6 > > acl localnet src 10.0.0.0/8 # RFC 1918 local private network > (LAN) > > acl SSL_ports port 443 > > acl Safe_ports port 80 # http > > acl Safe_ports port 21 # ftp > > acl Safe_ports port 443 # https > > acl Safe_ports port 70 # gopher > > acl Safe_ports port 210 # wais > > acl Safe_ports port 1025-65535 # unregistered ports > > acl Safe_ports port 280 # http-mgmt > > acl Safe_ports port 488 # gss-http > > acl Safe_ports port 591 # filemaker > > acl Safe_ports port 777 # multiling http > > acl CONNECT method CONNECT > > http_access deny !Safe_ports > > http_access deny CONNECT !SSL_ports > > http_access allow localhost manager > > http_access deny manager > > include /etc/squid/conf.d/* > > http_access allow localhost > > http_access deny all > > http_port 3128 > > cache_peer 10.0.249.120 parent 3128 0 no-query default > > cache_mem 1024 MB > > maximum_object_size_in_memory 1024 KB > > memory_cache_shared on > > memory_cache_mode always > > memory_replacement_policy lru > > debug_options ALL,2 > > coredump_dir /var/spool/squid > > refresh_pattern ^ftp: 1440 20% 10080 > > refresh_pattern ^gopher: 1440 0% 1440 > > refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 > > refresh_pattern . 0 20% 4320 > > dns_v4_first on > > > > In include /etc/squid/conf.d/* > > acl business_hours time MTWHF 8:00-16:00 > > acl VIP src "/etc/squid/conf.d/bkt/vip.acl" > > acl Restricted_Workstations src > "/etc/squid/conf.d/bkt/restricted_workstations.acl" > > acl RestrictedURL dstdom_regex > "/etc/squid/conf.d/bkt/regex_restricted_url.acl" > > acl RestrictedSites dstdomain "/etc/squid/conf.d/bkt/restricted_sites.acl" > > acl AllowedSites dstdomain "/etc/squid/conf.d/bkt/allowed_sites.acl" > > acl StreamingRequest req_mime_type -i > "/etc/squid/conf.d/bkt/StreamingRequest.acl" > > acl local-servers dstdomain "/etc/squid/conf.d/bkt/local-servers.acl" > > acl no-access-log dstdom_regex "/etc/squid/conf.d/bkt/no-access-log.acl" > > acl no-log any-of local-servers no-access-log > > acl hasRequest has request > > acl logMe note important_transaction > > always_direct allow local-servers > > http_access allow AllowedSites Restricted_Workstations > > http_access deny Restricted_Workstations > > http_access allow VIP RestrictedSites > > http_access allow VIP RestrictedURL > > http_access allow VIP StreamingRequest > > http_access deny localnet StreamingRequest business_hours > > http_access deny localnet RestrictedSites business_hours > > http_access deny localnet RestrictedURL business_hours > > http_access allow localnet AllowedSites > > http_access allow localnet > > http_access allow localhost > > http_access deny all > > access_log daemon:/var/log/squid/access.log logformat=squid hasRequest > logMe no-log > > never_direct allow all > > > > > > Although my squid working perfectly. > > > > Should I do anything against these errors messages. > > > > > > Szabolcs Sandor > > > > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users > _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
