Re: [squid-users] Re" Defining BL's via acls

From: Henrik K <hege_at_hege.li>
Date: Wed, 7 Jan 2009 20:03:30 +0200

On Wed, Jan 07, 2009 at 09:53:49AM -0800, Chuck Kollars wrote:
> > What kind of performance issues should I expect if I remove squidGuard
> > and simply make a series of acl's pointing to shalla bl files directly
> > then denying them with http_access deny statements?
>
> I have to admit I don't know specific numbers as I don't know anyone
> that's actually tried it. The conventional wisdom in the DansGuardian
> world though is don't do this! While realtime BLs work well for batch
> processes like email exchange, and while realtime BLs have the advantage
> of instant updates, their net effect on interactive processes like web
> browsing is making all the delays visible to users.
>
> Requiring access to some file on some remote site for every web request
> can double or triple the load on your Internet drop.

I think it's pretty clear he meant using the files downloaded from shalla on
his server. I know of no system that queries "remote files". BLs mean DNS
based lookups, which shalla does not have.
Received on Wed Jan 07 2009 - 18:03:42 MST

This archive was generated by hypermail 2.2.0 : Wed Jan 07 2009 - 12:00:02 MST