Re: [squid-users] Abandoning messages

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 29 May 2014 15:13:30 +1200

On 29/05/2014 7:04 a.m., Michael Graham wrote:
> Hi all,
>
> Rather than resurrecting an ancient thread, I thought I'd start a new
> one.
>
> We are see loads of messages of the type:
>
> abandoning local=127.0.0.1:6065 remote=127.0.0.1:45583 FD 18553 flags=1
>
> and by loads I mean 800k in the last 10 days.
>
> This causes our squid process to run out of file descriptors or to do
> some other odd things when we start to run out but haven't completely
> ran out.

You have a forwarding loop.

These messages are logged for CONNECT requests and 127.* being on both
local/remote ends of the TCP cnnection is bad news.

>
> In order to try and limit the impact of this issue we have added:
>
> conn->clientConnection->close();
>
> After the log message in client_side.cc. It resolves the obvious issue
> of running out of FDs but will it have any other impact on squid?

Look in you squid.conf for the default security rule:

  #http_access deny to_localhost

and remove the #.

Amos
Received on Thu May 29 2014 - 03:13:38 MDT

This archive was generated by hypermail 2.2.0 : Thu May 29 2014 - 12:00:07 MDT