Re: [squid-users] Cache_peer based on destination's geoip

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 28 Oct 2009 23:51:11 +1300

Frito Lay wrote:
>>> Hello list,
>>>
>>> Some medieval country that shall remain unnamed is
>> blocking access to
>> some
>>> specific websites, but the list of websites is huge,
>> dynamic, and not
>>> public.
>>>
>>> I have two proxy servers, one of which is located
>> outside of this
>>> firewall, but access to this proxy server is slower
>> than to the local
>> one.
>>> I would like to configure the local proxy to use a
>> peer cache based on
>> the
>>> geoip address of the destination.
>>>
>>> If the required object belongs to a specific country
>> then the request
>> will
>>> go through the second proxy.
>>>
>>> I know about the cache_peer_domain option, but I would
>> like to use a
>> geoip
>>> based solution.
>>>
>
> ....
>
>>> So the acl is evaluated, returns false, and the log
>> file doesn't have
>> any
>>> output. How come?
>> Nope. The helpers is a "slow" category lookup being used in
>> a "fast"
>> category access list. The helper is never called, just the
>> existing results
>> cache tested to see if a result is known.
>> http://wiki.squid-cache.org/SquidFaq/SquidAcl#Fast_and_Slow_ACLs
>>
>> To get this to work you need to use the ACL in a "slow"
>> category access
>> list such as http_access first to get the result cached in
>> Squid so it can
>> be retrieved without any delays by cache_peer_access.
>>
>> Amos
>
> Thanks, http_access did the trick.
> Perhaps there should be a reference to this in the docs, under the cache_peer_access page.
>
> By the way, I can contribute my external script, in case it would be a useful addition to the squid package.
>
> Thanks a lot!
>

Thank you. It's always worth a look. can you attach it to a mail to
squid-dev mailing list then please? with a bit of usage and use-case
description for docs.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE19
   Current Beta Squid 3.1.0.14
Received on Wed Oct 28 2009 - 10:51:26 MDT

This archive was generated by hypermail 2.2.0 : Wed Oct 28 2009 - 12:00:03 MDT