is only aware on an HTTP request. So the ACL will match <em>HTTP</em>.
-<sect>Windows support
-<P>This Squid version can run on Windows as a system service using the Cygwin emulation environment,
-or can be compiled in Windows native mode using the MinGW + MSYS development environment. Windows NT 4 SP4 and later are supported.<newline>
-On Windows 2000 and later the service is configured to use the Windows Service Recovery option
-restarting automatically after 60 seconds.
-
-<sect1>Usage
-
-<p>Some new command line options were added for the Windows service support:<newline>
-
-<p>The service installation is made with -i command line switch, it's possible to use -f switch at
-the same time for specify a different config-file settings for the Squid Service that will be
-stored on the Windows Registry.
-
-<p>A new -n switch specify the Windows Service Name, so multiple Squid instance are allowed.
-<em/"Squid"/ is the default when the switch is not used.
-
-<p>So, to install the service, the syntax is:
-
-<verb>squid -i [-f file] [-n name]</verb>
-
-<p>Service uninstallation is made with -r command line switch with the appropriate -n switch.
-
-<p>The -k switch family must be used with the appropriate -f and -n switches, so the syntax is:
-
-<verb>squid -k command [-f file] -n service-name</verb>
-where <em/service-name/ is the name specified with -n options at service install time.
-
-<p>To use the Squid original command line, the new -O switch must be used ONCE, the syntax is:
-
-<verb>squid -O cmdline [-n service-name]</verb>
-<p>If multiple service command line options must be specified, use quote. The -n switch is
-needed only when a non default service name is in use.
-
-<p>Don't use the "Start parameters" in the Windows 2000/XP/2003 Service applet: they are
-specific to Windows services functionality and Squid is not designed for understand they.
-
-<p>In the following example the command line of the "squidsvc" Squid service is set to "-D -u 3130":
-
-<verb>squid -O "-D -u 3130" -n squidsvc</verb>
-
-<sect1>PSAPI.DLL (Process Status Helper) Considerations
-
-<p>The process status helper functions make it easier for you to obtain information about
-processes and device drivers running on Microsoft® Windows NT®/Windows® 2000. These
-functions are available in PSAPI.DLL, which is distributed in the Microsoft® Platform
-Software Development Kit (SDK). The same information is generally available through the
-performance data in the registry, but it is more difficult to get to it. PSAPI.DLL is
-freely redistributable.
-
-<p>PSAPI.DLL is available only on Windows NT, 2000, XP and 2003. The implementation in Squid is
-aware of this, and try to use it only on the right platform.
-
-<p>On Windows NT PSAPI.DLL can be found as component of many applications, if you need it,
-you can find it on Windows NT Resource KIT. If you have problem, it can be
-downloaded from here:
-<url url="http://download.microsoft.com/download/platformsdk/Redist/4.0.1371.1/NT4/EN-US/psinst.EXE" name="http://download.microsoft.com/download/platformsdk/Redist/4.0.1371.1/NT4/EN-US/psinst.EXE">
-
-<p>On Windows 2000 and later it is available installing the Windows Support Tools, located on the
-Support\Tools folder of the installation Windows CD-ROM.
-
-<sect1>Registry DNS lookup
-
-<p>On Windows platforms, if no value is specified in the <em/dns_nameservers/ option on
-squid.conf or in the /etc/resolv.conf file, the list of DNS name servers are
-taken from the Windows registry, both static and dynamic DHCP configurations
-are supported.
-
-<sect1>Compatibility Notes
-<p>
-<itemize>
-<item>It's recommended to use '/' char in Squid paths instead of '\'
-<item>Paths with spaces (like 'C:\Programs Files\Squid) are NOT supported by Squid
-<item>When using ACL like 'acl aclname acltype "file"' the file must be in DOS text
-format (CR+LF) and the full Windows path must be specified, for example:
-
-<verb>acl blocklist url_regex -i "c:/squid/etc/blocked1.txt"</verb>
-
-<item>The Windows equivalent of '/dev/null' is 'NUL'
-<item>Squid doesn't know how to run external helpers based on scripts, like .bat, .cmd,
-.vbs, .pl, etc. So in squid.conf the interpreter path must be always specified, for example:
-
-<verb>redirect_program c:/perl/bin/perl.exe c:/squid/libexec/redir.pl
-redirect_program c:/winnt/system32/cmd.exe /C c:/squid/libexec/redir.cmd</verb>
-<item>When Squid runs in command line mode, the launching user account must have administrative privilege on the system
-<item>"Start parameters" in the Windows 2000/XP/2003 Service applet cannot be used
-<item>On Windows Vista and later, User Account Control (UAC) must be disabled before running service installation
-</itemize>
-
-
-<sect1>Known Limitations
-<p>
-<itemize>
-<item>Squid features not operational:<newline>
-<itemize>
-<item>DISKD: still needs to be ported<newline>
-<item>WCCP: cannot work because user space GRE support on Windows is missing<newline>
-<item>Transparent Proxy: missing Windows non commercial interception driver<newline>
-</itemize>
-<item>Some code sections can make blocking calls.
-<item>Some external helpers may not work.
-<item>File Descriptors number hard-limited to 2048 when building with MinGW.
-</itemize>
-
-<sect1>Building Squid on Windows
-
-<p>A reasonably recent release of <url url="http://www.cygwin.com/" name="Cygwin"> or <url url="http://www.mingw.org/" name="MinGW"> is needed.<newline>
-The usage of the Cygwin environment is very similar to other Unix/Linux environments, and -devel version of libraries must be installed.<newline>
-For the MinGW environment, the packages MSYS, MinGW and msysDTK must be installed. Some additional libraries and tools must be downloaded separately:<newline><newline>
-OpenSSL: <url url="http://www.slproweb.com/products/Win32OpenSSL.html" name="Shining Light Productions Win32 OpenSSL"><newline>
-libcrypt: <url url="http://sourceforge.net/projects/mingwrep/" name="MinGW packages repository"><newline>
-db-1.85: <url url="http://tinycobol.org/download.html" name="TinyCOBOL download area"><newline>
-When running configure, --disable-wccp and --disable-wccpv2 options should always specified to avoid compile errors.<newline>
-<itemize>
-<item>New configure options:<newline>
-<itemize>
-<item>--enable-win32-service<newline>
-</itemize>
-<item>Updated configure options:<newline>
-<itemize>
-<item>--enable-arp-acl<newline>
-<item>--enable-default-hostsfile<newline>
-</itemize>
-<item>Unsupported configure options:<newline>
-<itemize>
-<item>--enable-coss-aio-ops: On Windows Posix AIO is not available<newline>
-<item>--with-large-files: No suitable build environment is available on both Cygwin and MinGW, but --enable-large-cache-files works fine<newline>
-</itemize>
-<item>Recommended configure minimal options for Windows:<newline>
-<itemize>
-<item>--prefix=c:/squid --disable-wccp --disable-wccpv2 --enable-win32-service --enable-default-hostsfile=none
-</itemize>
-</itemize>
-<newline>
-Before build Squid with SSL support, some operations are needed (in the following example OpenSSL is installed in C:\OpenSSL and MinGW in C:\MinGW):
-<itemize>
-<item>Copy C:\OpenSSL\lib\MinGW content to C:\MinGW\lib<newline>
-<item>Copy C:\OpenSSL\include\openssl content to C:\MinGW\include\openssl<newline>
-<item>Rename C:\MinGW\lib\ssleay32.a to C:\MinGW\lib\libssleay32.a<newline>
-</itemize>
-
-<sect1>Using cache manager on Windows:
-<p>On Windows, cache manager (cachemgr.cgi) can be used with Microsoft IIS or Apache.<newline>
-Some specific configuration could be needed:<newline>
-<itemize>
-<item>IIS 6 (Windows 2003):<newline>
-<itemize>
-<item>On IIS 6.0 all CGI extensions are denied by default for security reason, so the following configuration is needed:<newline>
-<itemize>
-<item>Create a cgi-bin Directory
-<item>Define the cgi-bin IIS Virtual Directory with read and CGI execute IIS
-permissions, ASP scripts are not needed. This automatically defines a
-cgi-bin IIS web application
-<item>Copy cachemgr.cgi into cgi-bin directory and look to file permissions:
-the IIS system account and SYSTEM must be able to read and execute the file
-<item>In IIS manager go to Web Service extensions and add a new Web Service
-Extension called <em/"Squid Cachemgr"/, add the cachemgr.cgi file and set the
-extension status to <em/Allowed/
-</itemize>
-</itemize>
-<item>Apache:<newline>
-<itemize>
-<item>On Windows, cachemgr.cgi needs to create a temporary file, so Apache must be instructed
- to pass the TMP and TEMP Windows environment variables to CGI applications:<newline>
-<verb>
-ScriptAlias /squid/cgi-bin/ "c:/squid/libexec/"
-<Location /squid/cgi-bin/cachemgr.cgi>
- PassEnv TMP TEMP
- Order allow,deny
- Allow from workstation.example.com
-</Location>
-</verb>
-</itemize>
-</itemize>
-
-
<sect>Changes to squid.conf since Squid-3.0
<p>
There have been changes to Squid's configuration file since Squid-3.0.
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
- <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.50">
+ <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.65">
<TITLE>Squid 3.2.0.0 release notes</TITLE>
</HEAD>
<BODY>
<H2><A NAME="toc2">2.</A> <A HREF="#s2">Major new features since Squid-3.1</A></H2>
<UL>
-<LI><A NAME="toc2.1">2.1</A> <A HREF="#ss2.1">Multi-Lingual manuals</A>
-<LI><A NAME="toc2.2">2.2</A> <A HREF="#ss2.2">Solaris 10 pthreads Support (Experimental)</A>
+<LI><A NAME="toc2.1">2.1</A> <A HREF="#ss2.1">Helper Name Changes</A>
+<LI><A NAME="toc2.2">2.2</A> <A HREF="#ss2.2">Multi-Lingual manuals</A>
+<LI><A NAME="toc2.3">2.3</A> <A HREF="#ss2.3">Solaris 10 pthreads Support (Experimental)</A>
</UL>
<P>
<H2><A NAME="toc3">3.</A> <A HREF="#s3">Windows support</A></H2>
<H2><A NAME="s2">2.</A> <A HREF="#toc2">Major new features since Squid-3.1</A></H2>
<P>Squid 3.2 represents a new feature release above 3.1.</P>
-<P>The most important of these new features are:</P>
-<P>
+
+<P>The most important of these new features are:
<UL>
+<LI>Helper Name Changes</LI>
<LI>Multi-Lingual manuals</LI>
<LI>Solaris 10 pthreads Support (Experimental)</LI>
</UL>
</P>
<P>Most user-facing changes are reflected in squid.conf (see below).</P>
-<H2><A NAME="ss2.1">2.1</A> <A HREF="#toc2.1">Multi-Lingual manuals</A>
+<H2><A NAME="ss2.1">2.1</A> <A HREF="#toc2.1">Helper Name Changes</A>
+</H2>
+
+<P>To improve the understanding of what each helper does and where it should be used the helper binaries
+which are bundled with Squid have undergone a naming change in this release.</P>
+
+<P>Below is a list of the old helper names and what their names have changed to.</P>
+
+<H3>Basic Authentication protocol helpers</H3>
+
+<P>
+<UL>
+<LI>squid_db_auth - basic_db_auth - Retrieve authentication details from a simple SQL database table.</LI>
+<LI>getpwnam_auth - basic_getpwname_auth - Authenticate with local system user accounts.</LI>
+<LI>squid_ldap_auth - basic_ldap_auth - Authenticate with LDAP user accounts.</LI>
+<LI>ncsa_auth - basic_ncsa_auth - Authenticate with NCSA httpd-style password file.</LI>
+</UL>
+</P>
+
+<H3>Digest Authentication protocol helpers</H3>
+
+<P>
+<UL>
+<LI>(none yet converted)</LI>
+</UL>
+</P>
+
+<H3>External ACL helpers</H3>
+
+<P>
+<UL>
+<LI>(none yet converted)</LI>
+</UL>
+</P>
+
+<H3>Negotiate Authentication protocol helpers</H3>
+
+<P>
+<UL>
+<LI>squid_kerb_auth - negotiate_kerberos_auth - Authenticate with Kerberos servers.</LI>
+</UL>
+</P>
+
+<H3>NTLM Authentication protocol helpers</H3>
+
+<P>
+<UL>
+<LI>ntlm_auth - ntlm_smb_lm_auth - Perform SMB LanManager domain-less authentication over NTLM protocol.</LI>
+</UL>
+</P>
+
+<H3>URL re-write helpers</H3>
+
+<P>This group of helpers have been bundled to demonstrate how to code URL re-writers:
+<UL>
+<LI>url_fake_rewrite - Accept various url_rewrite details and log the input.</LI>
+</UL>
+</P>
+
+
+<H2><A NAME="ss2.2">2.2</A> <A HREF="#toc2.2">Multi-Lingual manuals</A>
</H2>
<P>The man(8) and man(1) pages bundled with Squid are now provided online for all
<P>3.1 began the Internationalization of Squid with the public facing error pages.
This move begins the Localization of the internal administrator facing manuals.</P>
-<H2><A NAME="ss2.2">2.2</A> <A HREF="#toc2.2">Solaris 10 pthreads Support (Experimental)</A>
+<H2><A NAME="ss2.3">2.3</A> <A HREF="#toc2.3">Solaris 10 pthreads Support (Experimental)</A>
</H2>
<P>Automatic detection and use of the pthreads library available from Solaris 10</P>
<P>
<DL>
+<DT><B>eui_lookup</B><DD>
+<P> Whether to lookup the EUI or MAC address of a connected client.</P>
+
<DT><B>memory_cache_mode</B><DD>
<P> Controls which objects to keep in the memory cache (cache_mem)
<PRE>
</PRE>
</P>
+<DT><B>logfile_daemon</B><DD>
+<P>Ported from 2.7</P>
</DL>
</P>
<P>
<DL>
+<DT><B>acl random</B><DD>
+<P>New type <EM>random</EM>. Pseudo-randomly match requests based on a configured probability.</P>
+
+<DT><B>auth_param</B><DD>
+<P>New options for Basic, Digest, NTLM, Negotiate <EM>children</EM> settings.
+<EM>startup=N</EM> determins minimum number of helper processes used.
+<EM>idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.
+<EM>concurrency=N</EM> previously called <EM>auth_param ... concurrency</EM> as a separate option.</P>
+<P>Removed Basic, Digest, NTLM, Negotiate <EM>auth_param ... concurrency</EM> setting option.</P>
+
+<DT><B>deny_info</B><DD>
+<P>Support URL format tags. For dynamically generated URL in denial redirect.</P>
+
+<DT><B>external_acl_type</B><DD>
+<P>New format tags and option parameters:</P>
+<P><EM>%SRCEUI48</EM> EUI-48 / MAC address of client from ARP lookup.</P>
+<P><EM>%SRCEUI64</EM> EUI-64 of clients with SLAAC address.</P>
+<P><EM>children-max=N</EM> determins maximum number of helper processes used.</P>
+<P><EM>children-startup=N</EM> determins minimum number of helper processes used.</P>
+<P><EM>children-idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.</P>
+<P>Deprecated <EM>children=N</EM> in favor of <EM>children-max=N</EM>.</P>
+
+<DT><B>logformat</B><DD>
+<P><EM>%sn</EM> Unique sequence number per log line. Ported from 2.7</P>
+<P><EM>%>eui</EM> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
+Both EUI forms are logged in the same field. Type can be identified by length or byte delimiter.</P>
+
<DT><B>windows_ipaddrchangemonitor</B><DD>
<P>Now only available to be set in Windows builds.</P>
+<DT><B>url_rewrite_children</B><DD>
+
+<DT><B>New options <EM>startup=N</EM>, <EM>idle=N</EM>, <EM>concurrency=N</EM></B><DD>
+<P>startup=N allow finer tuning of how many helpers are started initially.</P>
+<P>idle=N allow fine tuning of how many helper to retain as buffer against sudden traffic loads.</P>
+<P>concurrency=N was previously called url_rewrite_concurrency as a distinct directive.</P>
+
</DL>
</P>
<P>
<DL>
+<DT><B>ftp_list_width</B><DD>
+<P>Obsolete.</P>
-<DT><B>???alphabetical list???</B><DD>
-<P> ???
-<PRE>
- relevant quote directly from cf.data.pre
-
-</PRE>
-</P>
+<DT><B>url_rewrite_concurrency</B><DD>
+<P>Replaced by url_rewrite_children ... concurrency=N option.</P>
</DL>
</P>
<P>
<DL>
+<DT><B>--enable-eui</B><DD>
+<P>Enable Support for handling EUI operations.
+This includes ARP lookups for MAC (EUI-48) addresses and the ACL arp type tests.</P>
-<DT><B>???alphabetical list within group ordered: enable, disable, with, without) ???</B><DD>
-<P> ???explain??</P>
+<DT><B>--enable-url-rewrite-helpers</B><DD>
+<P>Build helpers for some basic URL-rewrite actions. For use by url_rewrite_program.
+If omitted or set to =all then all bundled helpers that are able to build will be built.
+If set to a specific list of helpers then only those helpers will build.
+Currently one demo helper <EM>fake</EM> is provided in shell and C++ forms to demonstrate
+the helper protocol usage and provide exemplar code.</P>
</DL>
</P>
<DL>
<DT><B>???alphabetical list within group ordered: enable, disable, with, without) ???</B><DD>
<P> ???explain??</P>
+
</DL>
</P>
<H2><A NAME="removedoptions"></A> <A NAME="ss5.3">5.3</A> <A HREF="#toc5.3">Removed options</A>
<P>
<DL>
-<DT><B>???alphabetical list within group ordered: enable, disable, with, without) ???</B><DD>
-<P> ???explain??</P>
+<DT><B>--enable-arp-acl</B><DD>
+<P>Replaced by --enable-eui</P>
</DL>
</P>
<DT><B>redirector_bypass</B><DD>
<P>Replaced by <EM>url_rewrite_bypass</EM></P>
+<DT><B>upgrade_http0.9</B><DD>
+<P>Obsolete.</P>
+
<DT><B>zph_local</B><DD>
<P>Replaced by <EM>qos_flows local-hit=</EM></P>
<P><EM>urllogin</EM> option not yet ported from 2.6</P>
<P><EM>urlgroup</EM> option not yet ported from 2.6</P>
-<DT><B>auth_param digest</B><DD>
-<P><EM>concurrency</EM> option not yet ported from Squid-2</P>
-
<DT><B>authenticate_ip_shortcircuit_access</B><DD>
<P>Not yet ported from 2.7</P>
<DT><B>location_rewrite_program</B><DD>
<P>Not yet ported from 2.6</P>
-<DT><B>logfile_daemon</B><DD>
-<P>Not yet ported from 2.7</P>
-
<DT><B>logformat</B><DD>
<P><EM>%oa</EM> tag not yet ported from 2.7</P>
-<P><EM>%sn</EM> tag not yet ported from 2.7</P>
<DT><B>max_filedescriptors</B><DD>
<P>Not yet ported from 2.7</P>
<DT><B>update_headers</B><DD>
<P>Not yet ported from 2.7</P>
-<DT><B>upgrade_http0.9</B><DD>
-<P>Not yet ported from 2.7</P>
-
<DT><B>zero_buffers</B><DD>
<P>Not yet ported from 2.7</P>
The 3.2 change history can be <url url="http://www.squid-cache.org/Versions/v3/3.2/changesets/" name="viewed here">.
<sect>Major new features since Squid-3.1
-<p>
-Squid 3.2 represents a new feature release above 3.1.
-
-The most important of these new features are:
+<p>Squid 3.2 represents a new feature release above 3.1.
+<p>The most important of these new features are:
<itemize>
<item>Helper Name Changes
<item>Multi-Lingual manuals
<p>Below is a list of the old helper names and what their names have changed to.
<sect2>Basic Authentication protocol helpers
-<itemize>
+<p><itemize>
<item>squid_db_auth - basic_db_auth - Retrieve authentication details from a simple SQL database table.
<item>getpwnam_auth - basic_getpwname_auth - Authenticate with local system user accounts.
<item>squid_ldap_auth - basic_ldap_auth - Authenticate with LDAP user accounts.
</itemize>
<sect2>Digest Authentication protocol helpers
-<itemize>
+<p><itemize>
<item>(none yet converted)
</itemize>
<sect2>External ACL helpers
-<itemize>
+<p><itemize>
<item>(none yet converted)
</itemize>
<sect2>Negotiate Authentication protocol helpers
-<itemize>
+<p><itemize>
<item>squid_kerb_auth - negotiate_kerberos_auth - Authenticate with Kerberos servers.
</itemize>
<sect2>NTLM Authentication protocol helpers
-<itemize>
+<p><itemize>
<item>ntlm_auth - ntlm_smb_lm_auth - Perform SMB LanManager domain-less authentication over NTLM protocol.
</itemize>
<sect2>URL re-write helpers
<p>This group of helpers have been bundled to demonstrate how to code URL re-writers:
-
<itemize>
<item>url_fake_rewrite - Accept various url_rewrite details and log the input.
</itemize>
<p>Automatic detection and use of the pthreads library available from Solaris 10
-
-<sect>Windows support
-<P>This Squid version can run on Windows as a system service using the Cygwin emulation environment,
-or can be compiled in Windows native mode using the MinGW + MSYS development environment. Windows NT 4 SP4 and later are supported.<newline>
-On Windows 2000 and later the service is configured to use the Windows Service Recovery option
-restarting automatically after 60 seconds.
-
-<sect1>Usage
-
-<p>Some new command line options were added for the Windows service support:<newline>
-
-<p>The service installation is made with -i command line switch, it's possible to use -f switch at
-the same time for specify a different config-file settings for the Squid Service that will be
-stored on the Windows Registry.
-
-<p>A new -n switch specify the Windows Service Name, so multiple Squid instance are allowed.
-<em/"Squid"/ is the default when the switch is not used.
-
-<p>So, to install the service, the syntax is:
-
-<verb>squid -i [-f file] [-n name]</verb>
-
-<p>Service uninstallation is made with -r command line switch with the appropriate -n switch.
-
-<p>The -k switch family must be used with the appropriate -f and -n switches, so the syntax is:
-
-<verb>squid -k command [-f file] -n service-name</verb>
-where <em/service-name/ is the name specified with -n options at service install time.
-
-<p>To use the Squid original command line, the new -O switch must be used ONCE, the syntax is:
-
-<verb>squid -O cmdline [-n service-name]</verb>
-<p>If multiple service command line options must be specified, use quote. The -n switch is
-needed only when a non default service name is in use.
-
-<p>Don't use the "Start parameters" in the Windows 2000/XP/2003 Service applet: they are
-specific to Windows services functionality and Squid is not designed for understand they.
-
-<p>In the following example the command line of the "squidsvc" Squid service is set to "-D -u 3130":
-
-<verb>squid -O "-u 3130" -n squidsvc</verb>
-
-<sect1>PSAPI.DLL (Process Status Helper) Considerations
-
-<p>The process status helper functions make it easier for you to obtain information about
-processes and device drivers running on Microsoft® Windows NT®/Windows® 2000. These
-functions are available in PSAPI.DLL, which is distributed in the Microsoft® Platform
-Software Development Kit (SDK). The same information is generally available through the
-performance data in the registry, but it is more difficult to get to it. PSAPI.DLL is
-freely redistributable.
-
-<p>PSAPI.DLL is available only on Windows NT, 2000, XP and 2003. The implementation in Squid is
-aware of this, and try to use it only on the right platform.
-
-<p>On Windows NT PSAPI.DLL can be found as component of many applications, if you need it,
-you can find it on Windows NT Resource KIT. If you have problem, it can be
-downloaded from here:
-<url url="http://download.microsoft.com/download/platformsdk/Redist/4.0.1371.1/NT4/EN-US/psinst.EXE" name="http://download.microsoft.com/download/platformsdk/Redist/4.0.1371.1/NT4/EN-US/psinst.EXE">
-
-<p>On Windows 2000 and later it is available installing the Windows Support Tools, located on the
-Support\Tools folder of the installation Windows CD-ROM.
-
-<sect1>Registry DNS lookup
-
-<p>On Windows platforms, if no value is specified in the <em/dns_nameservers/ option on
-squid.conf or in the /etc/resolv.conf file, the list of DNS name servers are
-taken from the Windows registry, both static and dynamic DHCP configurations
-are supported.
-
-<sect1>Compatibility Notes
-<p>
-<itemize>
-<item>It's recommended to use '/' char in Squid paths instead of '\'
-<item>Paths with spaces (like 'C:\Programs Files\Squid) are NOT supported by Squid
-<item>When using ACL like 'acl aclname acltype "file"' the file must be in DOS text
-format (CR+LF) and the full Windows path must be specified, for example:
-
-<verb>acl blocklist url_regex -i "c:/squid/etc/blocked1.txt"</verb>
-
-<item>The Windows equivalent of '/dev/null' is 'NUL'
-<item>Squid doesn't know how to run external helpers based on scripts, like .bat, .cmd,
-.vbs, .pl, etc. So in squid.conf the interpreter path must be always specified, for example:
-
-<verb>redirect_program c:/perl/bin/perl.exe c:/squid/libexec/redir.pl
-redirect_program c:/winnt/system32/cmd.exe /C c:/squid/libexec/redir.cmd</verb>
-<item>When Squid runs in command line mode, the launching user account must have administrative privilege on the system
-<item>"Start parameters" in the Windows 2000/XP/2003 Service applet cannot be used
-<item>On Windows Vista and later, User Account Control (UAC) must be disabled before running service installation
-</itemize>
-
-
-<sect1>Known Limitations
-<p>
-<itemize>
-<item>Squid features not operational:<newline>
-<itemize>
-<item>DISKD: still needs to be ported<newline>
-<item>WCCP: cannot work because user space GRE support on Windows is missing<newline>
-<item>Transparent Proxy: missing Windows non commercial interception driver<newline>
-</itemize>
-<item>Some code sections can make blocking calls.
-<item>Some external helpers may not work.
-<item>File Descriptors number hard-limited to 2048 when building with MinGW.
-</itemize>
-
-<sect1>Building Squid on Windows
-
-<p>A reasonably recent release of <url url="http://www.cygwin.com/" name="Cygwin"> or <url url="http://www.mingw.org/" name="MinGW"> is needed.<newline>
-The usage of the Cygwin environment is very similar to other Unix/Linux environments, and -devel version of libraries must be installed.<newline>
-For the MinGW environment, the packages MSYS, MinGW and msysDTK must be installed. Some additional libraries and tools must be downloaded separately:<newline><newline>
-OpenSSL: <url url="http://www.slproweb.com/products/Win32OpenSSL.html" name="Shining Light Productions Win32 OpenSSL"><newline>
-libcrypt: <url url="http://sourceforge.net/projects/mingwrep/" name="MinGW packages repository"><newline>
-db-1.85: <url url="http://tinycobol.org/download.html" name="TinyCOBOL download area"><newline>
-When running configure, --disable-wccp and --disable-wccpv2 options should always specified to avoid compile errors.<newline>
-<itemize>
-<item>New configure options:<newline>
-<itemize>
-<item>--enable-win32-service<newline>
-</itemize>
-<item>Updated configure options:<newline>
-<itemize>
-<item>--enable-arp-acl<newline>
-<item>--enable-default-hostsfile<newline>
-</itemize>
-<item>Unsupported configure options:<newline>
-<itemize>
-<item>--enable-coss-aio-ops: On Windows Posix AIO is not available<newline>
-<item>--with-large-files: No suitable build environment is available on both Cygwin and MinGW, but --enable-large-files works fine<newline>
-</itemize>
-<item>Recommended configure minimal options for Windows:<newline>
-<itemize>
-<item>--prefix=c:/squid --disable-wccp --disable-wccpv2 --enable-win32-service --enable-default-hostsfile=none
-</itemize>
-</itemize>
-<newline>
-Before build Squid with SSL support, some operations are needed (in the following example OpenSSL is installed in C:\OpenSSL and MinGW in C:\MinGW):
-<itemize>
-<item>Copy C:\OpenSSL\lib\MinGW content to C:\MinGW\lib<newline>
-<item>Copy C:\OpenSSL\include\openssl content to C:\MinGW\include\openssl<newline>
-<item>Rename C:\MinGW\lib\ssleay32.a to C:\MinGW\lib\libssleay32.a<newline>
-</itemize>
-
-<sect1>Using cache manager on Windows:
-<p>On Windows, cache manager (cachemgr.cgi) can be used with Microsoft IIS or Apache.<newline>
-Some specific configuration could be needed:<newline>
-<itemize>
-<item>IIS 6 (Windows 2003):<newline>
-<itemize>
-<item>On IIS 6.0 all CGI extensions are denied by default for security reason, so the following configuration is needed:<newline>
-<itemize>
-<item>Create a cgi-bin Directory
-<item>Define the cgi-bin IIS Virtual Directory with read and CGI execute IIS
-permissions, ASP scripts are not needed. This automatically defines a
-cgi-bin IIS web application
-<item>Copy cachemgr.cgi into cgi-bin directory and look to file permissions:
-the IIS system account and SYSTEM must be able to read and execute the file
-<item>In IIS manager go to Web Service extensions and add a new Web Service
-Extension called <em/"Squid Cachemgr"/, add the cachemgr.cgi file and set the
-extension status to <em/Allowed/
-</itemize>
-</itemize>
-<item>Apache:<newline>
-<itemize>
-<item>On Windows, cachemgr.cgi needs to create a temporary file, so Apache must be instructed
- to pass the TMP and TEMP Windows environment variables to CGI applications:<newline>
-<verb>
-ScriptAlias /squid/cgi-bin/ "c:/squid/libexec/"
-<Location /squid/cgi-bin/cachemgr.cgi>
- PassEnv TMP TEMP
- Order allow,deny
- Allow from workstation.example.com
-</Location>
-</verb>
-</itemize>
-</itemize>
-
-
<sect>Changes to squid.conf since Squid-3.1
<p>
There have been changes to Squid's configuration file since Squid-3.1.
<p>New options for Basic, Digest, NTLM, Negotiate <em>children</em> settings.
<em>startup=N</em> determins minimum number of helper processes used.
<em>idle=N</em> determines how many helper to retain as buffer against sudden traffic loads.
+ <em>concurrency=N</em> previously called <em>auth_param ... concurrency</em> as a separate option.
+ <p>Removed Basic, Digest, NTLM, Negotiate <em>auth_param ... concurrency</em> setting option.
<tag>deny_info</tag>
<p>Support URL format tags. For dynamically generated URL in denial redirect.
<descrip>
<tag>???alphabetical list within group ordered: enable, disable, with, without) ???</tag>
<p> ???explain??
+
</descrip>
</p>
<p><em>urllogin</em> option not yet ported from 2.6
<p><em>urlgroup</em> option not yet ported from 2.6
- <tag>auth_param digest</tag>
- <p><em>concurrency</em> option not yet ported from Squid-2
-
<tag>authenticate_ip_shortcircuit_access</tag>
<p>Not yet ported from 2.7
projects / thirdparty / squid.git / commitdiff
