Squid: too slow for some websites

Discussion in 'Server Operation' started by cooljai, Apr 18, 2008.

  1. cooljai

    cooljai New Member

    Dear members,

    We have two squid servers (2.5.STABLE12), first on RHEL 4 and other on FreeBSD 6.1. Users are connected to Squid Servers, and Squid Servers are connected to Gateway.

    My problem is that our own website.. say mysite.com is opening very slow, every user is complaining.
    If we bypass squid, then its very fine. We also needs to block caching of our website. No page/images should be cached of our website at all because its a dynamic site and we need to view latest contents quickly after uploads.

    Both squid have identical squid.conf (apart from directory paths) and the strange thing is we are unable to open some websites(or extremely slow) like howtoforge.com, mysite.com using when connecting with RHEL but things improves with FreeBSD. There's are 100 users connected with RHEL and around 75 with FreeBSD. Some users are using Linux while others are on Windows but facing the same problem.

    Here is my squid.conf (from bsd squid), I request you to please have a look and advice:

    http_port 3128
    hierarchy_stoplist cgi-bin ?
    acl QUERY urlpath_regex cgi-bin \?
    no_cache deny QUERY
    cache_mem 512 MB
    cache_dir ufs /usr/local/squid/cache 15360 16 256
    cache_access_log /usr/local/squid/logs/access.log
    cache_log /dev/null
    cache_store_log none
    auth_param basic children 5
    auth_param basic realm Squid proxy-caching web server
    auth_param basic credentialsttl 2 hours
    auth_param basic casesensitive off
    refresh_pattern ^ftp:           1440    20%     10080
    refresh_pattern ^gopher:        1440    0%      1440
    refresh_pattern .               0       20%     4320
    acl all src
    acl manager proto cache_object
    acl localhost src
    acl to_localhost dst
    acl SSL_ports port 443 563
    acl CONNECT method CONNECT
    acl ournet src
    acl except src
    acl vpn src
    acl block_url url_regex "/etc/sites.txt"
    acl nocachedomains dstdomain .mysite.com
    http_access allow manager localhost
    http_access deny manager
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow except
    http_access deny ournet block_url
    http_access allow ournet
    http_access allow vpn
    http_access deny all
    always_direct allow nocachedomains
    no_cache deny nocachedomains
    http_reply_access allow all
    icp_access allow all
    httpd_accel_port 80
    httpd_accel_host virtual
    httpd_accel_with_proxy on
    httpd_accel_uses_host_header on
    logfile_rotate 7
    coredump_dir /usr/local/squid/cache
  2. falko

    falko Super Moderator ISPConfig Developer

    Any errors in your logs? did you disable SELinux on RedHat?

Share This Page