Re: Squid regex comparison speed

We also have an interest in this issue, since many subscription
information services overseas still insist on IP based access control.
This means that we really need our local squid caches to go _direct_ for
about 200 site regexes, rather than going via their parents. Indirect
information I obtained indicated that this would render our heavily-hit
caches unusable.
I have not done nearly enough research on this, but since the discussion
thread was active, I wondered if anyone else has tried this.
TIA,
Andrew.

Allen Smith wrote:
>
> On Jun 16, 10:35pm, Steven Sporen (possibly) wrote:
> > > The below message appears not to have been quite clear enough; I'm not
> > > talking about using a redirector. I'm talking about using the
> > > cache_host_acl with a regex acl, with the regexes fetched from a file,
> > > to have our cache fetch directly stuff that our users may want to keep
> > > private (e.g., political sites).
> >
> > Hmmm interesting idea but it doesn't make any sense. Whether or not
> > squid caches the info, it shouldn't make a difference, as the only
> > person who has access the in data would be yourself and the person
> > who fetched it.
> >
> > ie Squid will log in the log file who went where no matter if it was
> > direct or not.
>
> The concern isn't about the local log file; the concern is about log
> files kept by parents and siblings. For instance, the
> rtp.cache.nlanr.net cache is run by an organization called NC-REN,
> which has an "acceptable use" policy (at
> http://www.ncren.net/Internet/aup.html) that bans a considerable range
> of free speech (so much so that public universities using it is
> probably unconstitutional under the First Amendment, and in violation
> of various Privacy Act guidelines). While I don't care whether we're
> violating such a policy - that's their problem - I do care that this
> means they're likely to be snooping on requests via their cache log
> file. I have no desire to have, for instance, the Rutgers
> administration getting complaints that this cache is being used to
> access NORML's site - which is in violation of their Acceptable Use
> policy, since smoking marijuana (an activity which NORML seeks to
> legalize) is in violation of current US laws, and their Acceptable Use
> policy bans any communication promoting violations of the law.
>
> -Allen

-- 
Dr. Andrew Smith                     Any OPINIONS expressed are
Network Development                  mine and do not necessarily
Prentice Centre                      reflect the views of the
University of Queensland             University of Qld.
Australia, 4072.
email: ccasmith@prentice.uq.edu.au
phone: 07 336 57408