Re: [squid-users] squid slow --- don't know why

From: Joseph Rinckey <jrinckey@dont-contact.us>
Date: Thu, 09 Sep 2004 19:34:19 -0400

My squid.conf file is below. I also commented out the delay pool lines
and restarted squid to see what kind of speeds I got. They were faster
than with the delay pools, but still slower than without the proxy all
together. The speeds were around the 315 Kbps. Much better than 16Kbps:)

If the delay pools are in fact my problem I guess I don't know how to
set them up. I just want to slow everyone down who downloads files
bigger than 2Mb. But I do not want to slow everything down.

squid.conf:
------------

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 256 MB
cache_swap_low 95
cache_swap_high 98
cache_dir ufs /cache 25000 32 512
auth_param basic program /usr/lib/squid/ldap_auth -b
ou=people,dc=pineriver,dc=k12,dc=mi,dc=us -s sub -h 192.168.0.13 -p 389
-v 3 -f uid=%s
auth_param basic children 10
auth_param basic realm Pine River Area Schools (proxy/cache server)
auth_param basic credentialsttl 1 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_portshttp_access deny to_localhost
acl ldapauth proxy_auth REQUIRED
acl mail-server dstdomain .pineriver.k12.mi.us
acl tech-laptop src 172.20.20.254
no_cache deny mail-server
always_direct allow mail-server
http_access allow ldapauth
http_access allow localhost
http_access allow tech-laptop
http_access deny all
http_reply_access allow all
icp_access allow all
cache_mgr cache@pineriver.k12.mi.us
visible_hostname pr-cache.pineriver.k12.mi.us
delay_pools 1
delay_class 1 1
delay_parameters 1 12500/24000
delay_access 1 allow all
coredump_dir /var/spool/squid

------------------

Joseph Rinckey

Angela Burrell wrote:
> Here are my results, measuring my speed to servers within my own country,
> using an ADSL connection via LAN on two clients. These two clients are the
> only two active on the LAN right now.
>
> With squid: (Windows client)
> 1. 327 Kbps
> 2. 370 Kbps
>
> Without squid: (Windows client)
> 1. 286 Kbps
> 2. 338 Kbps
> 3. 324 Kbps
>
> Without squid: (Linux client)
> 1. 61 Kbps
> 2. 271 Kbps
> 3. 293 Kbps
>
> With squid: (Linux client)
> 1. 289 Kbps
> 2. 291 Kbps
> 3. 296 Kbps
>
> As you can see, with squid configuration, there should not be a slowdown to
> your Internet access. Yours is quite drastic. There might be a configuration
> problem: could you please post your squid.conf file? Use this command:
> grep "^[a-z]" squid.conf > squid.conf.org
> to remove comments.
>
> -----Original Message-----
> From: Joseph Rinckey [mailto:jrinckey@pineriver.k12.mi.us]
> Sent: September 9, 2004 2:45 PM
> To: Angela Burrell
> Cc: squid-users@squid-cache.org
> Subject: Re: [squid-users] squid slow --- don't know why
>
>
> Wow! I didn't know it was that bad. I ran each test twice. I didn't
> know if you wantted all the stats, or just the speeds. Below are the
> speeds:
>
> Without the proxy -
> 482 Kbits (I have a T1, I was shocked. But that's not a squid issue)
> 499 Kbits
>
> With the proxy -
> 98 Kbits
> 16 Kbits
>
> I kept an eye on top while doing the tests with the proxy set, and squid
> did not take anymore than 2% of the CPU. The load average is 0.04 right
> now.
>
> Anything else?
>
>
> Joseph Rinckey
>
> Angela Burrell wrote:
>
>>Hi Joseph
>>
>>Here is an interesting link that a list member posted a while back with
>
> the
>
>>same problem. This is a link to a website where you can do speed tests.
>>
>>http://www.numion.com/yourspeed/
>>
>>Please try the test with your squid on, then again with your squid off.
>
> and
>
>>post the results.
>>
>>Thanks
>>
>>AB
>>
>>-----Original Message-----
>>From: Joseph Rinckey [mailto:jrinckey@pineriver.k12.mi.us]
>>Sent: September 9, 2004 12:25 PM
>>To: squid-users@squid-cache.org
>>Subject: [squid-users] squid slow --- don't know why
>>
>>
>>Hello List,
>>
>>I am new to this list and new to squid. I am having some trouble with
>>my proxy (squid) running really slow. I have searched the Internet and
>>I have also looked in the archives of this list. I found that some
>>threads in the archives suggest not enough memory and squid having to
>>use swap. I've also found some treads on dns quieries slowing things
>>down. I don't think either of these are reasons why my squid is running
>>slow.
>>
>>Here are some details:
>>
>>Computer Specs:
>>---------------
>>- dual 400Mhz CPU
>>- 1 G RAM
>>- 31G SCSI hard drive
>>- running debian linux (sarge)
>>
>>When I ps -aux and look at how much memory squid is using it only uses
>>about 32M. It looks as though I have plenty of memory. I installed a
>>caching-only version of bind, and everything seems to be resolving fast.
>>
>>If I browse the Internet without the proxy everything goes really fast
>>(T1 connection). Once I have my browser use the proxy though, it still
>>works, but really slow 5-30 sec/page.
>>
>>Oh, one more detail. I have squid setup to authenticate via ldap_auth.
>>
>>Below is my cache.log file. I do not know what else you might need me
>>to give you to help me, so if there is something else please let me know.
>>
>>cache.log:
>>------------
>>2004/09/09 12:01:01| Starting Squid Cache version 2.5.STABLE6 for
>>i386-debian-linux-gnu...
>>2004/09/09 12:01:01| Process ID 10378
>>2004/09/09 12:01:01| With 1024 file descriptors available
>>2004/09/09 12:01:01| DNS Socket created at 0.0.0.0, port 32934, FD 5
>>2004/09/09 12:01:01| Adding nameserver 127.0.0.1 from /etc/resolv.conf
>>2004/09/09 12:01:01| helperOpenServers: Starting 10 'ldap_auth' processes
>>2004/09/09 12:01:01| User-Agent logging is disabled.
>>2004/09/09 12:01:01| Referer logging is disabled.
>>2004/09/09 12:01:01| Unlinkd pipe opened on FD 20
>>2004/09/09 12:01:01| Swap maxSize 25600000 KB, estimated 1969230 objects
>>2004/09/09 12:01:01| Target number of buckets: 98461
>>2004/09/09 12:01:01| Using 131072 Store buckets
>>2004/09/09 12:01:01| Max Mem size: 262144 KB
>>2004/09/09 12:01:01| Max Swap size: 25600000 KB
>>2004/09/09 12:01:01| Local cache digest enabled; rebuild/rewrite every
>>3600/3600 sec
>>2004/09/09 12:01:01| Rebuilding storage in /cache (CLEAN)
>>2004/09/09 12:01:01| Using Least Load store dir selection
>>2004/09/09 12:01:01| Set Current Directory to /var/spool/squid
>>2004/09/09 12:01:01| Loaded Icons.
>>2004/09/09 12:01:01| Accepting HTTP connections at 0.0.0.0, port 3128,
>>FD 22.
>>2004/09/09 12:01:01| Accepting ICP messages at 0.0.0.0, port 3130, FD 23.
>>2004/09/09 12:01:01| HTCP Disabled.
>>2004/09/09 12:01:01| WCCP Disabled.
>>2004/09/09 12:01:01| Ready to serve requests.
>>2004/09/09 12:01:02| Store rebuilding is 3.0% complete
>>2004/09/09 12:01:06| Done reading /cache swaplog (135414 entries)
>>2004/09/09 12:01:06| Finished rebuilding storage from disk.
>>2004/09/09 12:01:06| 135414 Entries scanned
>>2004/09/09 12:01:06| 0 Invalid entries.
>>2004/09/09 12:01:06| 0 With invalid flags.
>>2004/09/09 12:01:06| 135414 Objects loaded.
>>2004/09/09 12:01:06| 0 Objects expired.
>>2004/09/09 12:01:06| 0 Objects cancelled.
>>2004/09/09 12:01:06| 0 Duplicate URLs purged.
>>2004/09/09 12:01:06| 0 Swapfile clashes avoided.
>>2004/09/09 12:01:06| Took 4.8 seconds (28048.1 objects/sec).
>>2004/09/09 12:01:06| Beginning Validation Procedure
>>2004/09/09 12:01:06| Completed Validation Procedure
>>2004/09/09 12:01:06| Validated 135414 Entries
>>2004/09/09 12:01:06| store_swap_size = 1076212k
>>2004/09/09 12:01:06| storeLateRelease: released 0 objects
>>
>>
>>Thank You for your help,
>>
>>
>>Joseph Rinckey
>>
>
>
Received on Thu Sep 09 2004 - 17:45:45 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Oct 01 2004 - 12:00:02 MDT