RE: [squid-users] Reverse Proxy Sticky Sessions

Henrik:

That fixed the http responses, but the cache_peers with "ssl" do not work with "sourcehash". I get the following in the cache.log and the squid process terminates:

2007/02/01 11:24:59| clientNegotiateSSL: Error negotiating SSL connection on FD 362: error:140943E8:SSL routines:SSL3_READ_BYTES:reason(1000) (1/0)
2007/02/01 11:34:20| clientNegotiateSSL: Error negotiating SSL connection on FD 320: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (1/0)

Here is the associated part of the config:

http_port 167.x.y.20:80 vhost protocol=http
https_port 167.x.y.20:443 protocol=https cert=/usr/local/squid/etc/cert.pem key=/usr/local/squid/etc/squid.key defaultsite=www.xy.com
cache_peer 167.x.y.86 parent 443 0 ssl sourcehash no-query originserver name=ssl-tuweb2a sslflags=DONT_VERIFY_PEER login=PASS
cache_peer 167.x.y.85 parent 443 0 ssl sourcehash no-query originserver name=ssl-tuweb1a sslflags=DONT_VERIFY_PEER login=PASS
cache_peer 167.x.y.200 parent 443 0 ssl sourcehash no-query originserver name=ssl-tuweb3a sslflags=DONT_VERIFY_PEER login=PASS
cache_peer 167.x.y.200 parent 80 0 sourcehash no-query originserver name=tuweb3a login=PASS
cache_peer 167.x.y.85 parent 80 0 sourcehash no-query originserver name=tuweb1a login=PASS
cache_peer 167.x.y.86 parent 80 0 sourcehash no-query originserver name=tuweb2a login=PASS

Thanks,

Noah Peters

> -----Original Message-----
> From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
> Sent: Wednesday, January 31, 2007 6:02 PM
> To: Peters, Noah
> Cc: Adrian Chadd; squid-users@squid-cache.org
> Subject: RE: [squid-users] Reverse Proxy Sticky Sessions
>
> mån 2007-01-29 klockan 09:55 -0500 skrev Peters, Noah:
>
> > I am using Version 2.6.STABLE6.
>
> See the srchash load balancing option.
>
> Regards
> Henrik
Received on Thu Feb 01 2007 - 11:07:36 MST