Re: [squid-users] squid accelerator bestpractice

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sun, 31 May 2009 12:30:11 +1200

Heiko L. wrote:
> Hallo!
>
> I try to configure squid accelerator since months.
> I miss a page bestpractice or troubleshoot.
> Now i have write my minds to a page. Please read this.
> I am grateful for informations.
>
> http://www-home.fh-lausitz.de/~hlehmann/tmp/090527.squid.accel.bestprakt.html
>
> regards Heiko
>

Some points:
  1)
   http://wiki.squid-cache.org/SquidFaq/ReverseProxy

  2) you overlook the far better method of redirection: deny_info + ACL
to perform HTTP protocol level redirects where needed. Based on any ACL
criteria. With a client-visible redirect so headers and body etc are all
updated correctly.

  3) redirector method of doing it is WORST practice possible.
     HTTP headers and body content often contain the hostname/port the
webserver thinks is being used. With redirect this is no longer the
publicly visible ones and things die badly very quickly. The debug_redir
does not help identify these problems in any way.

  You also seem to have a very perl-centric view of redirectors. They
are applications, unlimited by coding language or method of operation.
There are popular redirectors out there that do things far more powerful
than alter URL (ie http://www.ex-parrot.com/pete/upside-down-ternet.html)

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE15
   Current Beta Squid 3.1.0.8 or 3.0.STABLE16-RC1
Received on Sun May 31 2009 - 00:30:17 MDT

This archive was generated by hypermail 2.2.0 : Sun May 31 2009 - 12:00:01 MDT