Re: [SQU] Intermittent problem when running Squid...

Sounds like the Host header gets rewritten/added with the internal IP.

How does the requests find their way to the backend servers?

My recommended accelerator setup is to use /etc/hosts for mapping the
domains to the backend server IPs, and use the official domain names all
thru Squid. (squid needs to be built with --disable-internal-dns for
this to work).

--
Henrik Nordstrom
Squid hacker
FCP Wong wrote:
> 
> Hi,
> 
> I'm running squid as an httpd-accelerator. My squid.conf file is as
> below :
> 
> http_port 81
> icp_port 0
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> cache_mem 32 MB
> cache_dir ufs /home/squid 200 16 256
> emulate_httpd_log on
> redirect_rewrites_host_header off
> replacement_policy GDSF
> acl all src 0.0.0.0/0.0.0.0
> http_access allow all
> cache_mgr wongcs@mydomain.com
> cache_effective_user squid
> cache_effective_group squid
> httpd_accel_host virtual
> httpd_accel_port 80
> httpd_accel_uses_host_header on
> log_icp_queries off
> cachemgr_passwd my-secret-pass all
> buffered_logs on
> cache_access_log /var/log/squid/access.log
> cache_log /var/log/squid/cache.log
> cache_store_log /var/log/squid/store.log
> I'm running my servers using NAT behind a firewall. This means that on
> my servers themselves I use private IP addresses 192.168.1.X which are
> NAT'ed to public virtual addresses on the firewall. The flow is as
> below :
> 
> Browser <---> 66.140.140.X :80 (firewall) <--> 192.168.1.X :80 (squid;
> behind firewall) <---> 192.168.1.X : 81 (apache daemon)
> 
> My problem is that whenever I restart my computer and go to
> www.mydomain.com at 66.140.140.X :80, it will get redirected to
> http://192.168.1.X:81 resulting in an error. What I mean is the URL on
> the browser will change to http://192.168.1.X:81. This will always
> happen the first time I go to the page after restarting the PC or
> after a long time of not going to that page. After that all operations
> will return to normal until I restart the PC again.
> 
> This is a big problem as users frequently get a server not available
> error when I run squid. I don't mind if it gets redirected to
> http://www.mydomain.com:81 but this is not so...
> 
> Does anybody know what's happening here? Would appreciate any help on
> this... Thanks...
> 
> Wong
>
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html