David
Tue Mar 18 00:26:30 CDT 2008
On Mar 17, 2:34=A0am, "Lognoul, Marc \(Private\)" <logno...@hotmail.com>
wrote:
> It will not help a lot, but several squid admins at customers already
> reported me that they intentionally configured SQUID not to transmit all
> headers. For "security" reasons they claimed (as seen on some *NIX forums)=
.
> So it may not be a flaw but a (flawed) configuration.
>
> Marc
>
> "Eric LAMIDIAUX" <sam.arch...@nospam.org> wrote in message
>
> news:C0C940A0-4984-426E-9AC7-A17A2583EEAB@microsoft.com...
>
>
>
> > Hi David,
>
> > Thanks for your answer ...
>
> > I'll have to discuss that with our network admin ... but I can already
> > guess what his response will be !
>
> > Regards,
>
> > Eric.- Hide quoted text -
>
> - Show quoted text -
Well, if SQUID is configured to remove Transfer-Encoding: chunked
response headers, that basically corrupts the HTTP data stream and is
simply broken configuration.
And if SQUID cannot properly handle Transfer-Encoding: chunked
responses (I have seen SQUID bugs in this area in the past), that is a
bug in SQUID.
In either case, the only thing you can control is to not turn on
Dynamic Compression because downstream servers cannot handle it. There
is no such thing as turning on Dynamic Compression and expecting
Content-Length for all the reasons I stated earlier. Given dynamic
data stream, I believe people expect streaming data and not buffered
data behavior.
Of course, one can argue that maybe there should be a choice here for
configuration of buffering or not. Certainly in IIS7 response
buffering is enabled for "reasonably sized" responses by default such
that all content can automagically take advantage of the HTTP.SYS
kernel response cache. But that's not in IIS6 and was introduced in
IIS7 purely because we needed feature parity between ASP.Net request
processing pipeline and IIS6's request processing pipeline to simply
extensibility of IIS7 Integrated Pipeline with managed code (a major
architectural win). So, you get response buffering natively in IIS7 as
a side-effect. :-)
//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//