<div style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; overflow-wrap: break-word; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><br><br><br>Thank you. I picked up this part of log as evidence that Squid does conduct DNS lookups AFTER a peer connection is selected( log ommited). In the configuration, a cache peer (parent proxy) for specified domains presents.</div><div style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; overflow-wrap: break-word; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><br></div><div style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; overflow-wrap: break-word; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color="">And the relative part of config is already provided in some other thread of this post. TY<br><br></div><div style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; overflow-wrap: break-word; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><br><br><br><br><br><br></div><div id="signContainer" style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><table id="signTable" style="width:100%;"><tbody><tr><td id="dzmp_table" style="width:480px;font-family:'Microsoft Yahei',verdana,'Simun';float:left;"><div id="signBgContainer" style="background: rgb(250, 250, 250) center center no-repeat; position: relative; min-height: 168px; width: 480px; max-width: 480px; clear: both; border-radius: 12px; --darkreader-inline-bgcolor: var(--darkreader-background-fafafa, #1b1d1e); --darkreader-inline-bgimage: none;" data-darkreader-inline-bgcolor="" data-darkreader-inline-bgimage=""><div style="position:relative;width:480px;max-width: 480px;"><div style="padding:18px 10px 0 10px;float:left"><img name="hideEditorBar" class="avatar-ry avatar-image" src="https://img.zone139.com/Upload/Photo/CommonHeadImage/Ar/Ar_926ec2.gif" style="border-radius:50%;width:48px;height:48px;" onerror="this.onerror=null;this.src='../../m6/images/global/face.png';" data-mark="empty" id="img_0.5731939701548465"></div><div class="addrClass" style="float: left; color: rgb(125, 133, 143); font-size: 12px; width: calc(100% - 90px); padding-bottom: 20px; --darkreader-inline-color: var(--darkreader-text-7d858f, #9c9386);" data-darkreader-inline-color=""><p style="text-align: left; margin: 0px; padding: 18px 0px 5px; line-height: 16px; width: 365px; color: rgb(18, 33, 51); --darkreader-inline-color: var(--darkreader-text-122133, #d2cec8);" data-darkreader-inline-color=""><span style="font-size: 16px;padding-right: 8px;display: inline-block;line-height: 14px;font-weight: bold;">Archer</span><span style="font-size: 14px;"></span></p><p class="otherInfo" style="text-align:left;margin:0;padding:0;line-height:20px;width:365px;overflow:hidden;"><i style="display:inline-flex;float:left;margin-right:5px;font-size:14px;width:14px;height:20px;align-items:center;padding-top:1px;"><img src="cid:59819330161365221" style="width:14px;height:14px;" alt="邮件" data-mark="empty" id="img_0.4141393720156129"></i><span style="font-size:12px;margin: 0;padding: 0;line-height:20px;width:91%;display:block;float:left;">the-archer@139.com<i class=""></i></span></p></div><div style="clear:both;"></div></div></div><div contenteditable="false" class="v-hidden" style="margin:0;padding: 0;line-height: 24px;" id="openSign"><a href="javascript:;" style="display: none; float: right; font-size: 12px; color: rgb(26, 138, 216); text-decoration: none; --darkreader-inline-color: var(--darkreader-text-1a8ad8, #3aa0e7);" data-darkreader-inline-color="">我也要制作一个</a></div></td><td id="signInfoCode" style="margin-left:8px;float:left;"><div style="padding: 16px; background: rgba(255, 255, 255, 0.5); border-radius: 12px; text-align: center; --darkreader-inline-bgcolor: var(--darkreader-background-ffffff80, rgba(24, 26, 27, 0.5)); --darkreader-inline-bgimage: none;" data-darkreader-inline-bgcolor="" data-darkreader-inline-bgimage=""><div style="display: inline-block; padding: 11px; border-radius: 12px; background: rgb(236, 243, 252); --darkreader-inline-bgcolor: var(--darkreader-background-ecf3fc, #1e2122); --darkreader-inline-bgimage: none;" data-darkreader-inline-bgcolor="" data-darkreader-inline-bgimage=""><div style="padding: 10px 12px; border-radius: 12px; background: rgb(255, 255, 255); --darkreader-inline-bgcolor: var(--darkreader-background-ffffff, #181a1b); --darkreader-inline-bgimage: none;" data-darkreader-inline-bgcolor="" data-darkreader-inline-bgimage=""><img rel="signImg_qcode" name="hideEditorBar" src="https://smsrebuild1.mail.10086.cn/addr_p3_gw/qrcode/ContactsServlet?type=3&name2=QXJjaGVy&email2=dGhlLWFyY2hlciU0MDEzOS5jb20=" alt="扫描二维码添加名片到手机" style="width:68px;height:68px;" data-mark="empty" id="img_0.4243208679762853"></div></div><div style="margin-top:12px;"><p style="font-size: 12px; color: rgb(61, 61, 61); text-align: center; line-height: 14px; margin: 0px; --darkreader-inline-color: var(--darkreader-text-3d3d3d, #c1bcb4);" data-darkreader-inline-color="">扫一扫,快速添加名片到手机</p></div></div></td></tr></tbody></table></div><div style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><br><br></div><hr id="replySplit" style="font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" data-darkreader-inline-color=""><div id="reply139content" style="position: relative; font-family: 微软雅黑; font-size: 16px; color: rgb(0, 0, 0); line-height: 1.5; --darkreader-inline-color: var(--darkreader-text-000000, #e8e6e3);" "="" data-darkreader-inline-color=""><div id="mainReplyContent">----The following is the content of the forwarded email----
From：Alex Rousskov <rousskov@measurement-factory.com>
To：squid-users <squid-users@lists.squid-cache.org>
Date：2026-01-13 04:02:09
Subject：Re: [squid-users] peer-select.cc, cache_peer and dns queries
On 2026-01-09 17:19, archer wrote:
> cache_peer a.b.c.d parent ... name=NodeNG
> always_direct extranet_whitelist
> never_direct extranet
> I observed peer-select.cc still conducting DNS
> lookups on an extranet domain , which is a purely domain-based ACL. e.g.
>
> peer_select.cc(833) selectSomeParent: CONNECT www.example.com
> ...
> peer_select.cc(460) resolveSelected: Find IP
> destination for: www.example.com:443 via a.b.c.d
The above debugging log snippet is unrelated to ACLs checking/code.
Squid says that it needs to resolve a.b.c.d to connect to a peer at that
a.b.c.d address. If a.b.c.d is alerady an IP address, then that
resolution is going to be a no-op -- no actual DNS queries will be sent.
I do not know what triggers other DNS queries in your case. If I have to
guess, I would guess that peer selection algorithm finds multiple ways
to satisfy that CONNECT-to-X request and some of those ways include a
direct connection to X, triggering X resolution.
> So, what can I do to have extranet DNS handled by the parent proxy,
> while leaving the remainder to the child proxy, with a domain list ?
> Squid Cache: Version 5.7
FWIW, the above version is not supported by the Squid Project.
Alex.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users
</squid-users@lists.squid-cache.org></rousskov@measurement-factory.com></div><div contenteditable="false"></div></div>