Re: [squid-users] Squid is Not Caching Downloads, only web content

2011-01-11 Thread Amos Jeffries

On 11/01/11 20:48, fix wrote:

Squid is Not Caching Downloads, only web content, how can I configure it
to also cache my downloaded files?



There is no difference between downloads and web content in HTTP. 
Its all just objects.


Most likely that you have configured a maximum object size cacheable or 
something like that. What version of Squid and what does squid.conf contain?


Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.10
  Beta testers wanted for 3.2.0.4


[squid-users] Squid is not caching downloads

2011-01-11 Thread fix

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  squ...@treenet.co.nz
SMTP error from remote mail server after RCPT
TO:squ...@treenet.co.nz:
host mail.treenet.co.nz [58.28.153.233]: 554 5.7.1 Service
unavailable; Client host [173.242.114.152] blocked using dnsbl.ahbl.org;
NewIPNow.com/Anonymous proxy IPs used for harassment

-- This is a copy of the message, including all the headers. --

Return-path: thefi...@electroniktribulationarmy.com
Received: from pool-71-243-203-231.lax.dsl-w.verizon.net
([71.243.203.231] helo=[192.168.5.8])
by erion.jollyworkshosting.com with esmtpsa
(SSLv3:AES256-SHA:256)
(Exim 4.69)
(envelope-from thefi...@electroniktribulationarmy.com)
id 1PcZn1-0003Gl-9u
for squ...@treenet.co.nz; Tue, 11 Jan 2011 16:41:15 +0800
Subject: Re: [squid-users] Squid is Not Caching Downloads, only web
content
From: fix thefi...@electroniktribulationarmy.com
To: Amos Jeffries squ...@treenet.co.nz
In-Reply-To: 4d2c1292.1040...@treenet.co.nz
References: 1294732087.8513.5.ca...@fixjack-desktop
 4d2c1292.1040...@treenet.co.nz
Content-Type: text/plain; charset=UTF-8
Organization: Electronik Tribulation Army
Date: Tue, 11 Jan 2011 00:41:13 -0800
Message-ID: 1294735273.8513.11.ca...@fixjack-desktop
Mime-Version: 1.0
X-Mailer: Evolution 2.28.3 
Content-Transfer-Encoding: 7bit

I am currently using Squid 2.7 that I got on Ubuntu 9.10 karmic Server,
headless.

Heres my conf. Also I suspect it may not be caching at all, because my
memory usage never goes about 150mb and I have it set to 400 max.
But it is saving stuff to my disk because I can see my drive usage is
high, but its clearly not serving downloads back to me. Im not an expert
at squid, this is just a bunch of stuff I put together from various
tutorials I found online, so if theres anything wrong please tell me,
and thank you for your courteous assistance.

Squid.conf

visible_hostname evil.ubuntu
http_port 3128 transparent
icp_port0

refresh_pattern ^ftp:   144020% 10080
refresh_pattern ^gopher:14400%  1440
refresh_pattern -i (/cgi-bin/|\?) 0 0%  0
refresh_pattern .   0   20% 4320


dns_nameservers 127.0.0.1
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid3 5000 32 256
access_log /var/log/squid/access.log
cache_mem 400 MB
client_lifetime 300 minute
memory_pools off
half_closed_clients off
pconn_timeout 120 second
maximum_object_size 100 MB
maximum_object_size_in_memory 5 MB
log_icp_queries off
cache_mgr r...@ubuntu

acl localhost src 127.0.0.1/32
acl manager proto cache_object
acl our_networks src 192.168.5.0/24
acl localnet src 127.0.0.1/255.255.255.255
acl all src all
acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com
acl windowsupdate dstdomain sls.microsoft.com
acl windowsupdate dstdomain productactivation.one.microsoft.com
acl windowsupdate dstdomain ntservicepack.microsoft.com
acl SSL_ports port 443
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70  # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl wuCONNECT dstdomain www.update.microsoft.com

http_access allow our_networks
http_access allow localnet
http_access allow CONNECT wuCONNECT our_networks
http_access allow windowsupdate our_networks
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow manager localhost
http_access deny manager
http_access deny all





On Tue, 2011-01-11 at 21:19 +1300, Amos Jeffries wrote:
 On 11/01/11 20:48, fix wrote:
  Squid is Not Caching Downloads, only web content, how can I
configure it
  to also cache my downloaded files?
 
 
 There is no difference between downloads and web content in HTTP. 
 Its all just objects.
 
 Most likely that you have configured a maximum object size cacheable
or 
 something like that. What version of Squid and what does squid.conf
contain?
 
 Amos




Re: [squid-users] Squid is Not Caching Downloads, only web content

2011-01-11 Thread pyh
Amos Jeffries writes: 



Most likely that you have configured a maximum object size cacheable or 
something like that.


Or maybe videos? Caching them may need some special setups. 


Regards.


Re: [squid-users] Monitoring multiple squid instances with snmp

2011-01-11 Thread Artemis BRAJA

Thanks Amos!
But now I'm facing another problem while trying to monitor the 
percentage use of the CPU with the 1.3.6.1.4.1.3495.1.3.1.5.0 OID.
While polling (v1 or v2), it keeps returning only the value 1 (each 
instance).
As I saw on the wiki http://wiki.squid-cache.org/Features/Snmp, this OID 
is for squid version 2.2+, and I'm currently experimenting with version 
3.2.0.4.

Is this related to the version, or am I doing something wrong?

snmpwalk -c community -v 1 localhost:3401 1.3.6.1.4.1.3495.1.3.1.5.0
SNMPv2-SMI::enterprises.3495.1.3.1.5.0 = INTEGER: 1

Artemis

On 01/11/2011 01:58 AM, Amos Jeffries wrote:

On 11/01/11 01:25, Artemis BRAJA wrote:

Hello everyone!

Can squid be directly polled on port 3401, so we don't have to configure
snmpd.conf with :
view systemview included .1.3.6.1.4.1.3495
proxy -v 1 -c communitystring localhost:3401 .1.3.6.1.4.1.3495.1
Because it seems impossible to monitor multiple squid instances on
different snmp ports this way.

Artemis


It is both possible and routinely done.

* check that snmp_port is configured in your squid.conf
* check that snmp_community matches the one requested
* check that snmp_access is configured to allow your probes (src ACL 
is the only type that works reliably)


Also, use SNMP v2 to get any details in the peer or client tables. v1 
or v2 is fine for other details.


Amos


[squid-users] Squid HTTP compression

2011-01-11 Thread karj
Hello everyone,

I have a small problem with squid (Squid 2.7.STABLE9).

I'm trying to optimize our IIS6 web portal. I activated HTTP compression
both for static and dynamic content, and this works OK when the browser asks
for content directly to the IIS server ...

BUT, when the browser asks for content thru Squid.
Content is effectively served by IIS but as the Content-Encoding
header is missing, so nor IE or FireFox can handle it !


The output from firebug
1) Direct IIS (page size 6.5 KB)
Cache-Control   private
DateTue, 11 Jan 2011 15:55:19 GMT
Content-Typetext/html
Expires Tue, 11 Jan 2011 15:55:19 GMT
Server  Microsoft-IIS/6.0
Set-Cookie  mId=%2D2; path=/ mKey=; path=/ mName=; path=/ mEmail=;
path=/
Content-Encodinggzip
VaryAccept-Encoding
Transfer-Encoding   chunked

2) thru Squid (page size 29KB)
DateTue, 11 Jan 2011 15:58:21 GMT
Server  Microsoft-IIS/6.0
Cache-Control   private
Content-Length  30016
Content-Typetext/html
Expires Tue, 11 Jan 2011 15:58:21 GMT
Age 90
X-Cache HIT from xxx.xx.xx
X-Cache-Lookup  HIT from xxx.xx.xx
Via 1.1 xxx.xxx.xx:80 (squid)
Connection  keep-alive

Any help would be much appreciated.

Best regards,




[squid-users] ICAP within KVM - Transport Endpoint is Not Connected

2011-01-11 Thread Chris Palmer
I have squid and c-icap running ok in a normal server. I am now trying
to migrate them into a KVM virtual machine. However squid appears to be
misbehaving and I have absolutely no idea why.

Strace on squid reveals that in the KVM, as squid tries to access the
ICAP server, it doesn't do a connect. Instead there is a futex call
followed by a read which of course fails with ENOTCONN (Transport
Endpoint is Not Connected).

The host machine is Fedora 14 64-bit + updates + custom 2.6.37 kernel.
Squid 3.1.10 +ICAP (both built from source) runs ok there. Within this
host is a guest under KVM - same 64-bit distribution  updates  kernel
as the host, just rather less installed, with squid  icap built in the
same way on the guest and with identical config.

On the guest - squid without icap works fine. The icap-client shows icap
is working, although the squid strace suggests that isn't relevant.

Two squid straces are below - the first on the host (works) and the
second on the guest (fails). In both cases the squid cache was freshly
initialised, squid started and one request run through. Up until the
line of * the straces are very similar. Then the guest one goes
horribly wrong.

Please - can anyone throw any light on how to resolve? I'm running right
out of ideas

TIA
Chris



TRACE 1 - HOST
=


Process 20494 attached - interrupt to quit
epoll_wait(6, {}, 8192, 946)= 0
epoll_wait(6, {}, 8192, 1000)   = 0
epoll_wait(6, {}, 8192, 979)= 0
epoll_wait(6, {}, 8192, 19) = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 0)  = 0
epoll_wait(6, {}, 8192, 1000)   = 0
epoll_wait(6, {{EPOLLIN, {u32=15, u64=191441432710479887}}}, 8192, 1000) = 1
accept(15, {sa_family=AF_INET, sin_port=htons(42358),
sin_addr=inet_addr(192.168.80.1)}, [16]) = 11
getsockname(11, {sa_family=AF_INET, sin_port=htons(3128),
sin_addr=inet_addr(192.168.80.1)}, [16]) = 0
fcntl(11, F_GETFD)  = 0
fcntl(11, F_SETFD, FD_CLOEXEC)  = 0
fcntl(11, F_GETFL)  = 0x2 (flags O_RDWR)
fcntl(11, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
accept(15, 0x29f8350, [28]) = -1 EAGAIN (Resource
temporarily unavailable)
getsockname(11, {sa_family=AF_INET, sin_port=htons(3128),
sin_addr=inet_addr(192.168.80.1)}, [16]) = 0
epoll_ctl(6, EPOLL_CTL_ADD, 11, {EPOLLIN|EPOLLERR|EPOLLHUP, {u32=11,
u64=7028459065005047819}}) = 0
epoll_wait(6, {{EPOLLIN, {u32=11, u64=7028459065005047819}}}, 8192, 257) = 1
read(11, GET http://www.google.co.uk/ HTT..., 4095) = 658
socket(PF_NETLINK, SOCK_RAW, 0) = 13
bind(13, {sa_family=AF_NETLINK, pid=0, groups=}, 12) = 0
getsockname(13, {sa_family=AF_NETLINK, pid=20494, groups=},
[12]) = 0
sendto(13, \24\0\0\0\26\0\1\3\251\222)M\0\0\0\0\0\0\0\0, 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=}, 12) = 20
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},
msg_iov(1)=[{8\0\0\0\24\0\2\0\251\222)M\16P\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 408
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},
msg_iov(1)=[{\24\0\0\0\3\0\2\0\251\222)M\16P\0\0\0\0\0\0\1\0\0\0\10\0\1\0\177\0\0\1...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(13)   = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 13
bind(13, {sa_family=AF_NETLINK, pid=0, groups=}, 12) = 0
getsockname(13, {sa_family=AF_NETLINK, pid=20494, groups=},
[12]) = 0
sendto(13, \24\0\0\0\26\0\1\3\251\222)M\0\0\0\0\0\0\0\0, 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=}, 12) = 20
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},
msg_iov(1)=[{8\0\0\0\24\0\2\0\251\222)M\16P\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 408
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},
msg_iov(1)=[{\24\0\0\0\3\0\2\0\251\222)M\16P\0\0\0\0\0\0\1\0\0\0\10\0\1\0\177\0\0\1...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(13)   = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 13
bind(13, {sa_family=AF_NETLINK, pid=0, groups=}, 12) = 0
getsockname(13, {sa_family=AF_NETLINK, pid=20494, groups=},
[12]) = 0
sendto(13, \24\0\0\0\26\0\1\3\251\222)M\0\0\0\0\0\0\0\0, 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=}, 12) = 20
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},
msg_iov(1)=[{8\0\0\0\24\0\2\0\251\222)M\16P\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 408
recvmsg(13, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=},

[squid-users] Re: negotiate auth scheme confusing windows users

2011-01-11 Thread Markus Moeller
To get more debug use squid_kerb_auth -d.  If it is a Windows 7 client it 
might be an encryption type issue. Windows 7 may use AES which is not 
configured on your Unix squid server.


Markus

Brian J. Murrell br...@interlinx.bc.ca wrote in message 
news:loom.20110110t195547-...@post.gmane.org...
I have the following configured for authentication in my squid 3.1.1 
server:


auth_param negotiate program /usr/lib/squid3/squid_kerb_auth
auth_param negotiate children 10
auth_param negotiate keep_alive on
auth_param basic program /usr/lib/squid3/pam_auth
auth_param basic children 3
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

Which works just fine in my all-linux-and-firefox-and-chromium network.

Every now and then though a Windows (7) user comes into the network and 
for

whatever reason proxy authentication doesn't work on those nodes.

My guess is that windows is trying to do Negotiate authentication but 
squid is

not able to understand what it's sending.  Am I close?  Any solutions?

Cheers,
b.








[squid-users] Need a good basic config for SOHO environment

2011-01-11 Thread fix
I have a nix box setup as a gateway with dhcp and I allready have my
firewall rules in place, using webmin, I just need a standard conf for
my little network, anyone have one that I can start with?



Re: [squid-users] Squid HTTP compression

2011-01-11 Thread Leonardo Rodrigues


squid 2.7 cannot handle HTTP/1.1 which is needed for, among other 
things, the chunk encoding (compression) one. You'll simply not be able 
to get it working with squid 2.7.


i know squid 3.1 has made great improvements on HTTP/1.1 support, 
but as i dont use it, i cannot guarantee you what's working and what's not.


check squid 3.1 changelogs looking for HTTP/1.1 related things. 
Also i'd suggest you to search this mailing list archives, as HTTP/1.1 
support on squid was vastly discused here by other users.



Em 11/01/11 14:07, karj escreveu:

Hello everyone,

I have a small problem with squid (Squid 2.7.STABLE9).

I'm trying to optimize our IIS6 web portal. I activated HTTP compression
both for static and dynamic content, and this works OK when the browser asks
for content directly to the IIS server ...

BUT, when the browser asks for content thru Squid.
Content is effectively served by IIS but as the Content-Encoding
header is missing, so nor IE or FireFox can handle it !



--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
gertru...@solutti.com.br
My SPAMTRAP, do not email it






[squid-users] a large number of outgoing addresses and interfaces

2011-01-11 Thread Robert Keyes


Hello squids,
I am working on a project which will require squid to use a large number
(hundreds) of IP addresses for outgoing connections. My plan is to use
squid_mysql and tcp_outgoing_address to handle this, binding an interface to a
user. However, I am wondering if there is a more efficient way to handle the
large number of interfaces I'll be using, instead if using the Linux tools
(ifconfig or ip) to accomplish this. Load on the machine is a concern, as it's
only a P4-2.4ghz with 1G of ram. Even if I can't get around having to use an
interface for each address, I am wondering if anyone has any experience dealing
with a high number of interfaces like this, and can advise me on what problems
will surface first and how each one might be dealt with. For instance, am I
better off using 'ip' or 'ifconfig'? How many virtual interfaces can I have on
single physical one? Is there a way for me to efficiently have squid bind to
and accept a new interface when it is created, or would I have to restart squid
each time?

Regards,
Bob



[squid-users] Squid sends conflicting headers to origin when If-Unmodified-Since header is present from client

2011-01-11 Thread Guy Bashkansky
I have to modify the behavior of a customized version of Squid 2.4
STABLE6 code, either by configuration or by coding.  Currently I can
not switch to any other Squid version, because of the customizations.


Problem description:

- When a client sends a byte-range request with an If-Unmodified-Since
header AND the object in Squid's cache is stale, then this Squid
version generates a request to origin with both IUMS and IMS headers,
which is conflicting and undefined by RFC2616.  The origin throws an
error.


Proposed solution:

- On an IMS check for a content that was requested with a UIMS header,
Squid should only insert the IMS header, not the IUMS header.  (If
only the IUMS header was added, then the origin would return origin
content unnecessarily, since it hasn't changed from the the cached
version.)

- Once the origin check is complete, then Squid cache should compute
IUMS calculations as defined in RFC2616, returning possibly a 206
Partial or 412 precondition failed.
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html


Questions:

- Is there any possibility to facilitate such behavior using Squid 2.4
STABLE6 configuration?

- If not, then where in the code should I start to look to make the
necessary code change, and approximately how?

- I could not find any notion of If-Unmodified-Since in the Squid 2.4
STABLE6 code.  What's the best way to handle this?


[squid-users] Configuration - Reverse Proxy using internal DNS

2011-01-11 Thread Tim Hill

Hi
	I have been reading through the configuration examples and guides for 
the last week since taking the very rash decision to upgrade Squid to 
version 3 while building a replacement router/firewall box.


The current machine runs happily under squid 2.4 - using squid to 
provide routing to the internal web servers.


	What I am unable to find is a config for Squid 3 that replicates the 
way I have been running squid.


	External connections to the websites are collected in squid, which then 
uses the host header to internal DNS where the web server is. The web 
servers are all on private IP addresses and only accessible from the 
outside world via squid.



The network looks something like this.

Internet = Squid   Internal DNS (private)
|
web01  web02

I have been unable to figure out a configuration that works in this 
manner.
	I'd like to also control access so that only websites that are local IP 
addresses in the internal DNS are proxied.


	At the moment I cannot see a way of getting squid to ask a DNS server 
for host location in reverse proxy mode,  nor of setting up a subnet as 
allowed addresses to proxy  ( eg 192.168.1.0/24 )


	The reasons behind wanting to work this way is to remove the need for 
editing the squid config every time a new website is enabled or the 
server the site is on is changed. When a change is made, all that needs 
updating is the internal private DNS server.



Thanks in advance for the assistance of the list members.


Tim



RE: Re: [squid-users] Squid for personal use...

2011-01-11 Thread Bucci, David G
Another use case on a PC is as part of a parental filter type package.  E.g., I 
use DansGuardian + Squid + Firehol on our Ubuntu boxes at home, having teenage 
kids.

-Original Message-
From: K K [mailto:kka...@gmail.com] 
Sent: Sunday, January 09, 2011 11:35 AM
To: squid-users@squid-cache.org
Subject: EXTERNAL: Re: [squid-users] Squid for personal use...

On Sun, Jan 9, 2011 at 5:42 AM, Helmut Hullen hul...@t-online.de wrote:
 Is there any advantage of using squid on a personal computer?  I can
 see that in a household, running squid on a central server could be
 beneficial.  What if there was only one machine in the home?

 It's a kind of big cache, too. You can choose which program caches - the
 browser(s) or squid.

If there's only one machine in the home, and you only use Firefox, you
would NOT see a lot of advantage from using Squid as compared to
letting Firefox directly use the same amount of cache space.  Sure,
you can use the advanced features of Squid to control what gets cached
or rewrite headers, but for the latter, there are extensions to get
the same benefit.  If you have multiple clients (or maybe multiple
browsers on one machine), or have a central fileserver with lots of
spare disk space, Squid starts to make more sense.   For example, I
have multiple machines on a 1GB network, so on each client I set a
tiny disk cache, and let Squid cache it all centrally instead.


There is one other reason to use Squid in a small household network --
if you pass all home-Internet traffic through a firewall running
something Unix-like, use transparent redirection to route all
household traffic through squid for caching and logging.   Now you can
see/cache some traffic from background programs on your PC, Boxee,
your smart BlueRay player, or your iPad or other WiFi tablet, and also
generate accounting reports (e.g. with Calamaris).

Many household devices have embedded browsers or pull content from the
Internet, but have minimal embedded caching.   If you can use Squid to
cache, for example, the cover art for Netflix movies, you might speed
up browsing Netflix instant queue from Boxee?
 http://forums.boxee.tv/archive/index.php/t-22038.html


Kevin


[squid-users] Resize coss online

2011-01-11 Thread Drunkard Zhang
I'm testing squid-2.7STABLE9 + COSS + ext4 + SSD now.

When enlarge the coss, eg: from 10240 to 20480, I can see success in
cache.log, but the coss file on disk did not change, after 3 times of
squid -k reconfigure the coss file size changed.
But some times later, the squid process exited, with nothing left in
cache.log. Just once in cache.log I found:

2011/01/12 11:10:04| assertion failed: coss/store_io_coss.c:215:
cs-curstripe  (cs-numstripes - 1)

So, I wondering if resize of coss online is supported perfectly, that
we can use it without anxiety.
BTW, is shrink of coss filesystem is supported? If it is, do I have to
do it online, or offline? By online, I means operates without restart
squid process, and the offline means opposite.


With squid-2.7STABLE9 + COSS + btrfs + SSD, reload can cause process
to stuck, with 100% CPU usage per squid process. I caught these info
in cache.log once:

2011/01/09 14:56:44| Killing RunCache, pid 59502
2011/01/09 14:56:44| kill 59502: (1) Operation not permitted

And kill of the process will make the process into a zombie. The
defunct process still using 100% CPU, which wasn't show in ps.

squid75 ~ # ps -eo pid,%cpu,cmd --sort=c
59343  2.7 [squid] defunct
59505  2.8 [squid] defunct
59380  2.9 [squid] defunct
59474  2.9 [squid] defunct
42558  3.4 [btrfs-endio-1]
43717  3.7 (squid) -YC -D -f squid73.conf
43925  4.0 (squid) -YC -D -f squid74.conf
42520  4.3 (squid) -YC -D -f squid75.conf
51532  4.4 (squid) -YC -D -f squid77.conf
18014  5.9 (squid) -YC -D -f squid72.conf
19465  7.9 (squid) -YC -D -f squid76.conf
59833  8.9 (squid) -YC -D -f squid79.conf
59803  9.4 (squid) -YC -D -f squid78.conf
59744  9.7 [squid] defunct
 4511 10.8 (squid) -YC -D -f squid81.conf
 4563 10.9 (squid) -YC -D -f squid85.conf
59705 12.0 [squid] defunct
 4524 12.8 (squid) -YC -D -f squid82.conf
 4550 12.9 (squid) -YC -D -f squid84.conf
 4537 13.2 (squid) -YC -D -f squid83.conf
 4498 29.9 (squid) -YC -D -f squid80.conf
squid75 ~ # ps auwx | grep -e defunct -e COMMAND$
USER   PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
squid59343  2.8  0.0  0 0 ?Zl  Jan07  83:47
[squid] defunct
squid59380  3.0  0.0  0 0 ?ZNl  Jan07  88:37
[squid] defunct
squid59474  3.0  0.0  0 0 ?ZNl  Jan07  89:57
[squid] defunct
squid59505  2.9  0.0  0 0 ?ZNl  Jan07  86:20
[squid] defunct
squid59705 12.0  0.0  0 0 ?Zl  Jan07 355:56
[squid] defunct
squid59744  9.7  0.0  0 0 ?ZNl  Jan07 288:11
[squid] defunct


[squid-users] [OT] finding a good DNS hosting

2011-01-11 Thread pyh
Hi list, 

Though this is somewhat off topic,but since many people on this list are 
network admins, so please let me ask, do you have a suggestion for good dns 
hosting provider? One of our domains has been getting 10+ million dns query 
traffic each day, and we want to find a good provider for hosting it. 


Thanks.