Re: [squid-users] squid 2.5 and large acl

From: Paweł Staszewski <pstaszewski@dont-contact.us>
Date: Fri, 06 Jan 2006 09:25:47 +0100

Matus UHLAR - fantomas wrote:

>On 04.02 13:54, Paweł Staszewski wrote:
>
>
>>does anybody have experiences with squid and large number (10000 lines)
>>of acl-s like:
>>
>>acl user1 src xxx.xxx.xxx.xxx/255.255.255.255
>>tcp_outgoing_address xxx.xxx.xxx.xxx user1
>>
>>
>
>I doubt so, but is would be imho very ineffective. Also, I don't know what
>OS will allow you to have 10000 IP addresses on local interface.
>
>Why do you want to do this? so you want to get this result?
>http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.13
>
>
>
thanks for your reply/

curently i have :
ip addr show | grep vlan0891 | wc -l
7689

And that is also number of users in our network.
In network users have 10/8 subnet and for http traffic I use squid-proxy
and want to assign to every user uniq ip ...with squid so every user
will be see as his nated ip on www-servers.
Squid proxy is not a nat for network , nat is doing another linux based
machine.

So question was about performance of that large acl list in squid.conf ,
and any experiences with that many acl-s in squid.conf :)

 
Received on Fri Jan 06 2006 - 01:25:47 MST

This archive was generated by hypermail pre-2.1.9 : Wed Feb 01 2006 - 12:00:01 MST