[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    Re: [squid-users] unable to connect to ssl site: google+
From:       Henrik =?ISO-8859-1?Q?Nordstr=F6m?= <henrik () henriknordstrom ! net>
Date:       2011-12-30 23:28:29
Message-ID: 1325287709.9682.35.camel () henriknordstrom ! net
[Download RAW message or body]

tis 2011-12-27 klockan 22:56 +0100 skrev ftiaronsem:
> without problems. However I am unable to connect to google+
> https://plus.google.com, getting: "The connection has timed out".

Maybe Google have finally enabled some 10+ year old badly needed TCP
extensions to improve performance and your firewall is now falling over
in total confusion dropping it's packets on the floor?

That's namely the usual cause to unexpected "The connection has timed
out" issues where the same connections works when not going via the
proxy server.

Look for ECN , window scaling and to some extent PAWS.

Linux TCP/IP stack by default enables all these features very
aggressively. But not Windows and also many Linux based web servers have
ECN disabled and windows scaling aggressively tuned down to avoid broken
firewalls.

Regards
Henrik

[prev in list] [next in list] [prev in thread] [next in thread]