M
M
Maxim2014-09-23 09:56:11
Squid
Maxim, 2014-09-23 09:56:11

Why slows down the Internet through squid?

I can’t understand some sites through the squid come off quickly, others take a very long time, or don’t open at all. for example toster.ru does not open.
bypassing the squid everything is fine.
Centos 6.5
Installed its own bind dns server.
squid transparent
traffic wrap like this

iptables -t nat -A PREROUTING -i eth1 -p tcp -s 192.168.1.0/24 --dport 80 -j REDIRECT --to-port 3128

squid config
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

acl localnet src 10.214.2.128/25
acl localnet src 192.168.1.0/24
acl localnet src 192.168.3.0/24

acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http

http_port 3128 intercept

visible_hostname gateway.onko4.local
dns_nameservers 192.168.1.5

cache_mgr localhost

http_access allow manager localhost
http_access deny manager


acl anonymizers url_regex "/etc/squid/rules/anonymizers.acl"
acl dating url_regex "/etc/squid/rules/dating.acl"
acl fileshare url_regex "/etc/squid/rules/fileshare.acl"
acl porn url_regex "/etc/squid/rules/porn.acl"
acl social url_regex "/etc/squid/rules/social.acl"
acl umor url_regex "/etc/squid/rules/umor.acl"
acl open-win url_regex "/etc/squid/rules/open-win.acl"
acl js url_regex "/etc/squid/rules/js.acl"

http_access deny anonymizers
http_access deny dating
http_access deny fileshare
http_access deny porn
http_access deny social
http_access deny umor
http_access deny open-win
http_access deny js

http_access allow localnet
http_access allow localhost
http_access deny !Safe_ports
http_access deny all

hierarchy_stoplist cgi-bin ?
coredump_dir /var/spool/squid

refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
refresh_pattern .		0	20%	4320

Answer the question

In order to leave comments, you need to log in

1 answer(s)
M
Maxim, 2014-09-23
@maxpointn2point

the problem was solved by tweaking the cache.

cache_dir ufs /var/spool/squid 50249 16 256
maximum_object_size 10240 KB

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question