Re: [squid-users] process load

Rishav Upadhaya wrote:
> Hello,
>
> I am new to squid.
>
> Under the following scenario please throw some lights.
>
> I have a small ISP. I have around 50 clients that are basically
> offices. Each clients shares internet in around 10 computers. Some
> offices doesn't requires windows update while some offices doesn't
> requires anti-virus updates. Similarly some offices don't want their
> staff to browse sites like youtube.com.
>
> Instead of telling them how to turn off windows update or Anitvirus
> update I want to control that in server level. I thought of making
> different ACL in my squid server.
>
> Like deny if clients=xyz and site= windows update
> deny if clients=abc and site= youtube.com
> and so on
>
> But my senior told me that making many ACL will hampers squid process.
>
> So I want to know how many ACL is suitable in a single squid server.
> How many ACL is safe enough so as not to hamper squid's process.
>
> Please help.
>
> Thanks in advance
>
> Regards
> Rishav Upadhaya
>

It depends entirely on what kind of acl you use. Anything with regex is
going to eat resources much more quickly than a dst or dstdomain acl.

That said, if you are only talking a total of 500 computers (50 offices
with 10 computers each) you'd have to have 1) a pretty slow server
running Squid, 2) heavy users at all of the sites AND 3) a massive
number of regex ACLs (hundreds or thousands) to notice a performance hit.

Chris
Received on Tue Dec 04 2007 - 12:48:48 MST