Unable to open some sites using Squid

cooljai · 05-16-2008, 04:36 AM

Hi,

There are 2 squid(2.5.STABLE12 )servers with identical config but on different Servers. One is running on RHEL 4 machine and other is running on FreeBSD 6.3.

We are facing two problems:

1. When browsing Internet through Squid (RHEL 4), few websites are not opening, browser keep "Transferring data from example.com...." or "Read example.com..." in status bar and display nothing, for example one of such website is howtoforge.com.
On the other hand with same squid.conf file, all sites are opening fine using Squid of FreeBSD Server.

2. While downloading data (say 100 MB) from net, oftenly speed degrade rapidly and download get stalled or continue with very poor speed. We didnt have any dealy pools or any such restrictions but facing the same problem using both squid servers. If bypass squid, download complete fine.

Here is squid.conf from FreeBSD machine (though both are identical except paths):

Code:

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 512 MB
cache_dir ufs /usr/local/squid/cache 15360 16 256
cache_access_log /usr/local/squid/logs/access.log
cache_log /dev/null
cache_store_log none
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl CONNECT method CONNECT
acl ournet src 192.168.0.0/255.255.0.0
acl except src 192.168.50.199/255.255.255.255
acl vpn src 10.0.0.0/255.0.0.0
acl block_url url_regex "/etc/sites.txt"
acl nocachedomains dstdomain .mysite.com
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow except
http_access deny ournet block_url
http_access allow ournet
http_access allow vpn
http_access deny all
always_direct allow nocachedomains
no_cache deny nocachedomains
http_reply_access allow all
icp_access allow all
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
logfile_rotate 7
coredump_dir /usr/local/squid/cache

Any idea regarding above is highly appreciated.

Regards,