[General] FT Cache Compromised (Again)

Burhan Khalid burhan at kuwaitnet.net
Thu Dec 4 11:03:55 +03 2008


Bashar Al-Abdulhadi wrote:
> having local machine when accessing the internet via your ISP via port 
> 80 it will be triggered by your ISP's caching system and wwill be 
> filtered again, so no real use of it, thats why when you put a remote 
> box to connect to it via non-default http port then that remote box goes 
> to the internet
> 
> 
> for example from your local machine do wget www.skype.com it will show 
> FT's blocked page it will be the same when squid/proxy access the 
> internet from the machine

If your browser is setup to go through the proxy, it will not use port 
80; so this will not be trigged by the ISP's cache.

The proxy servers don't communicate over port 80 internally; so that 
shouldn't trigger as well.

To prevent such things as 'wget' and other cmdline utilities from being 
trapped by the ISPs proxy in your shell environment set HTTP_PROXY and 
HTTP_USER HTTP_PASSWORD variables. Most GNU utils will respect these.

> 
> 
> 
> 
> Majed B. wrote, On 12/04/2008 09:33 AM:
> 
>> I have built a Virtual Machine host with 24GB RAM and about 250GB
>> space (RAID5) -- quad core xeon, for work.
>>
>> We have a couple of low utilization VMs running on it, so I guess I
>> can slap another Linux VM and put squid on it. It's gonna serve around
>> 150-300 users.
>>
>> I love the ramfs/tmpfs idea!! I've been tinkering with it for a while,
>> so I guess this is yet another usage for it :D
>>
>> What I wanna ask is whether it's worth having 2 caches: local & remote
>> on the VPS?
>>
>> It seems to me that one local is quite enough, and the secondary one
>> would only put more delay (prefetching, caching, logging, sending).
>> If a request comes to the local cache, it will fetch the data through
>> its gateway which is the VPS, then cache it locally. The next time a
>> request comes along, it's gonna hit the local cache, so the remote one
>> would never be touched for previously visited data.
>>
>> Correct me if I'm wrong!
>>
>> Thanks a lot Burhan for the link! But can you elaborate on this 
>> paragraph:
>> cache_peer_domain parent.foo.net    .edu
>> "has the effect such that UDP query packets are sent to 'bigserver'
>> only when the requested object exists on a server in the .edu domain."
>>
>> Does that mean that cache requests are served for edu domains only?
>>   
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> General mailing list
> General at oskw.org
> http://mail.oskw.org/mailman/listinfo/general_oskw.org





More information about the General mailing list