Slow Squid after upgrade
Hello All,
Sorry to post another message about squid but I can't find a solution to my problem so far. Here goes:
I built a Squid caching-proxy server for the school that I work at. The hardware was PIII-800, 256MB ram, 20 GB hard drive . The OS was Redhat 8 webdownload version. The box ran lightening fast for over a year until it recently crashed big time and I had to rebuld it.
When I decided to rebuild, I couldn't find my RH8 disks, so decided to use my Redhat9 webdownload version.
The box is rebuilt any the internet is being served, but it is like syrup. Nothing is loading very quick at all and people are starting to complain ...
Below is my Squid.conf from the original machine:
http_port 8080
cache_peer 10.230.1.253 parent 8080 0 no-query default
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 40 MB
cache_dir ufs /var/spool/squid 6000 16 256
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
authenticate_program /usr/local/bin/smb_auth -W RMNETNT
acl domainusers proxy_auth REQUIRED
http_access allow domainusers
http_access allow all
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
icp_access allow all
Below is my new squid.conf:
http_port 8080
cache_peer 10.230.1.253 parent 8080 0 no-query default
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 40 MB
cache_dir ufs /var/spool/squid 6000 16 256
auth_param basic children 5
auth_param basic realm Thomas Lord Audley Caching-Proxy Server
auth_param basic credentialsttl 2 hours
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
acl our_networks src 192.168.1.0/24 127.0.0.1
http_access allow our_networks
http_access allow localhost
http_access deny all
http_access allow all !all
http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid
Can anyone tell me if I've made a big mistake somewhere or offer advice as to why there should be such poor performance in the newer setup ??
any help would be greatfully recieved..
|