Re: [squid-users] process load

From: s f <sf@dont-contact.us>
Date: Wed, 5 Dec 2007 18:40:37 +0545

Hi,

Adrian though being a newbie I know about that though not perfect :D.

I basically have 2.5 Ghz computer with 512 MB ram. With those number
of users hunting squid, how many DSTDOMAIN ACL are considered safe.

I know I can check the process load by adding few ACL at a time. But I
can't complain management each week to replace the CUP or memory.

So I am here for the help. You guys must have hell lot of experience
to tell me that in rough figures.

Regards
Rishav Upadhaya
Future System Administrator
Current Support Officer

On 12/5/07, Amos Jeffries <squid3@treenet.co.nz> wrote:
> Adrian Chadd wrote:
> > ACLs are evaluated short-circuit. If you have this:
> >
> > acl clientA src 1.2.3.0/24
> > acl clientB src 1.2.4.0/24
> > acl youtube (expensive regexp)
> > acl microsoft (expensive regexp)
> >
> > http_access deny clientA youtube
> > http_access deny clientB microsoft
> >
> > the http_access lines are evaluated in order from top to bottom, and stop being
> > evaluated across each http_access line if one of the ACLs fails.
> >
> > So the expensive youtube regexp ACL will only be processed by requests from clientA.
> > Requests from clientB won't ever hit the youtube ACL lookup.
> >
> > If you know how to craft ACLs then you can avoid almost all of the penalties.
> >
> > Adrian
>
> Adrian! stop encouraging the regexp-addicts. :-)
>
> We're trying to wean them off the unnecessary use of slow ACL remember? ;)
>
> Amos
>
Received on Wed Dec 05 2007 - 05:55:44 MST

This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:01 MST