Re: [squid-users] delay pools

On 26/03/11 10:39, Márcio Luciano Donada wrote:
> I am using version: squid-2.7.9 FreeBSD. I am using Authentication with
> delay pools, as follows:
>
> auth_param basic program /usr/local/libexec/squid/squid_ldap_auth -R -D
> "cn=suporte,dc=xxx,dc=com,dc=br" -w "f34fadsfsdf" -b
> "ou=Usuarios,dc=xxx,dc=com,dc=br" -f "uid=%s" -h 192.168.1.1 -d v3
> auth_param basic children 5
> auth_param basic realm Digite sua senha
>
> acl ldap-auth proxy_auth REQUIRED
> http_access allow ldap-auth
> http_access allow localhost
> http_access deny all
> acl 128kbps proxy_auth "/usr/local/etc/squid/user.txt"
> acl 256kbps proxy_auth "/usr/local/etc/squid/profs.txt"
> acl admin proxy_auth "/usr/local/etc/squid/admin.txt"
>
> delay_pools 3
> delay_class 1 2
> delay_access 1 allow 128kbps
> delay_access 1 deny all
> delay_class 2 2
> delay_access 2 allow 256kbps
> delay_access 2 deny all
> delay_class 3 2
> delay_access 3 allow admin
> delay_access 3 deny all
>
> delay_parameters 1 128000/512000 128000/512000
> delay_parameters 2 512000/1024000 512000/1024000
> delay_parameters 3 -1/-1 -1/-1
>
>
> But initially it works fine, after 5 min, no longer access anything else
> is simply too slow and nothing works. I wanted to make a control of
> 128kbps and 256kbps to stay slow and not having to close the browser and
> restart the operation when

Couple of problems there:

Delay pools are measured in *Bytes*. Those numbers are 8x too big for
Kbps. Did you mean KBps? (upper/lower case matters a *lot* in bps units).

The first A/B parameter limits the entire network segment bandwidth. The
second one limits the individual IP.
   Those limits above allow a single user to max out the connection and
block all other users from getting a single byte through.

Also, the pool #3 is doing relatively expensive traffic accounting in
order to do nothing. You can remove it entirely.

You want something like...

  # pool 1: no network-wide cap, individuals at 128KBps
  delay_parameters 1 -1/-1 131072/131072

  # pool 2: no network-wide cap, individuals at 256KBps
  delay_parameters 2 -1/-1 262144/262144

or, if you did means Kbps instead of KBps ...

  # pool 1: no network-wide cap, individuals at 128Kbps
  delay_parameters 1 -1/-1 16384/16384

  # pool 2: no network-wide cap, individuals at 256Kbps
  delay_parameters 2 -1/-1 32768/32768

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.11
   Beta testers wanted for 3.2.0.5