Re: [squid-users] Distribued ACL|

mån 2007-01-15 klockan 23:09 -0200 skrev Tom Lobato:

> Well, I already read about external_acl_type, but as far as I
> understood, each one and all requests (so, all objects within a page)
> are processed by it.

Not quite. Only every unique combination of the parameters given to
external_acl_type, once per ttl. I.e. if you use %DST with a ttl of 3600
(the default) then there is one query per visited site per hour, for all
users of this proxy.

> So, I realized it would create much delay and
> bandwidth, since each one have to send to the central squid, processed
> and returned. So I opted to store ACLs locally.

The queries are not sent to the central Squid, it's sent to the helper
specified in external_acl_type. How that helper finds the answer is
outside of Squid and up to the implementation of the helper. It could be
querying an database at your central office, or some distributed
resource, it's all up to how you implement the helper.

Regards
Henrik