Re: [squid-users] Very slow initial reply
Hello. Thanks for your reply. DNS was also my first thought, but what surprises me is that on the same server, nginx or direct are ok, but squid takes almost a minute. Also nslookup and dig work fast. And this happens everytime. But i'll look for DNS failures on the server Anyone has any other idea? Bruno Guerreiro DMSI/IT Instituto Nacional de Estatística Tel: 218440448 - Ext: 1657 - Original Message - From: Eliezer Croitoru elie...@ngtech.co.il To: squid-users@squid-cache.org Sent: Wednesday, 27 August, 2014 7:28:57 AM Subject: Re: [squid-users] Very slow initial reply I have looked at the domain NS and it seems that 2 out of 4 are not responsive at all. If you are interested in clearing out the issue and more advanced dns related issues you can try bind-us...@lists.isc.org list. In the above list there are many dns administrators that can help and consult you on the next step to make the issue one of two: - gone(fixed locally) - fixed(fixed by the ns servers admins) Eliezer On 08/26/2014 09:20 PM, Cassiano Martin wrote: On my squid box it shows DNS failure. 014/08/26 15:15:09.243 kid1| ModEpoll.cc(139) SetSelect: FD 8, type=1, handler=1, client_data=0, timeout=0 2014/08/26 15:15:09.243 kid1| dns_internal.cc(1362) idnsRead: idnsRead: FD 8: received 55 bytes from 127.0.0.1:53 2014/08/26 15:15:09.243 kid1| dns_internal.cc(1169) idnsGrokReply: idnsGrokReply: QID 0xf689, -2 answers 2014/08/26 15:15:09.244 kid1| dns_internal.cc(1234) idnsGrokReply: idnsGrokReply: error Server Failure: The name server was unable to process this query. (2) 2014/08/26 15:15:09.244 kid1| dns_internal.cc(1092) idnsCallback: Merging DNS results www.lusitania.pt A has 3 RR, has -2 RR 2014/08/26 15:15:09.244 kid1| dns_internal.cc(1125) idnsCallback: Sending 3 (OK) DNS results to caller. 2014/08/26 15:15:09.244 kid1| ipcache.cc(498) ipcacheParse: ipcacheParse: 3 answers for 'www.lusitania.pt' 2014/08/26 15:15:09.244 kid1| ipcache.cc(556) ipcacheParse: ipcacheParse: www.lusitania.pt #0 212.55.134.4 2014/08/26 15:15:09.244 kid1| ipcache.cc(556) ipcacheParse: ipcacheParse: www.lusitania.pt #1 62.28.187.7 2014/08/26 15:15:09.245 kid1| client_side_request.cc(546) hostHeaderIpVerify: validate IP 62.28.187.7:80 non-match from Host: IP 212.55.134.4 2014/08/26 15:15:09.245 kid1| client_side_request.cc(541) hostHeaderIpVerify: validate IP 62.28.187.7:80 possible from Host: Thanks 2014-08-26 14:32 GMT-03:00 Bruno Guerreiro bruno.guerre...@ine.pt: Hello. Some of our user are complaning about very slow access to some sites. After some tests i've noticed that the time between squid receiving the request, and actually connecting to the site itself is very high. After this wait all the objects in the page are fetch rather quickly. I've tried upgrading to 3.4 but the issue persists. No auth in place, and the Squid server is connected to internet via full nat. Connecting directly from the server ou via some other proxy software, like nginx, works perfectly. Here are some of the sites (this are portuguese insurance companies): www.nseguros.pt www.lusitania.pt www.logo.pt Any ideas? Thanks in advance. Bruno Guerreiro DMSI/IT Instituto Nacional de Estatística Tel: 218440448 - Ext: 1657 Bruno Guerreiro DMSI/IT Instituto Nacional de Estatística Tel: 218440448 - Ext: 1657 Confidencialidade: Esta mensagem (e eventuais ficheiros anexos) é destinada exclusivamente às pessoas nela indicadas e tem natureza confidencial. Se receber esta mensagem por engano, por favor contacte o remetente e elimine a mensagem e ficheiros, sem tomar conhecimento do respectivo conteúdo e sem reproduzi-la ou divulgá-la. Confidentiality Warning: This e-mail message (and any attached files) is confidential and is intended solely for the use of the individual or entity to whom it is addressed. lf you are not the intended recipient of this message please notify the sender and delete and destroy all copies immediately. Confidencialidade: Esta mensagem (e eventuais ficheiros anexos) � destinada exclusivamente �s pessoas nela indicadas e tem natureza confidencial. Se receber esta mensagem por engano, por favor contacte o remetente e elimine a mensagem e ficheiros, sem tomar conhecimento do respectivo conte�do e sem reproduzi-la ou divulg�-la. Confidentiality Warning: This e-mail message (and any attached files) is confidential and is intended solely for the use of the individual or entity to whom it is addressed. lf you are not the intended recipient of this message please notify the sender and delete and destroy all copies immediately.
[squid-users] Very slow initial reply
Hello. Some of our user are complaning about very slow access to some sites. After some tests i've noticed that the time between squid receiving the request, and actually connecting to the site itself is very high. After this wait all the objects in the page are fetch rather quickly. I've tried upgrading to 3.4 but the issue persists. No auth in place, and the Squid server is connected to internet via full nat. Connecting directly from the server ou via some other proxy software, like nginx, works perfectly. Here are some of the sites (this are portuguese insurance companies): www.nseguros.pt www.lusitania.pt www.logo.pt Any ideas? Thanks in advance. Bruno Guerreiro DMSI/IT Instituto Nacional de Estatística Tel: 218440448 - Ext: 1657 Bruno Guerreiro DMSI/IT Instituto Nacional de Estatística Tel: 218440448 - Ext: 1657 Confidencialidade: Esta mensagem (e eventuais ficheiros anexos) � destinada exclusivamente �s pessoas nela indicadas e tem natureza confidencial. Se receber esta mensagem por engano, por favor contacte o remetente e elimine a mensagem e ficheiros, sem tomar conhecimento do respectivo conte�do e sem reproduzi-la ou divulg�-la. Confidentiality Warning: This e-mail message (and any attached files) is confidential and is intended solely for the use of the individual or entity to whom it is addressed. lf you are not the intended recipient of this message please notify the sender and delete and destroy all copies immediately.
RE: [squid-users] Invalid Response/Malformed
Hi Amos, -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: quarta-feira, 1 de Abril de 2009 2:38 To: Bruno Guerreiro Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Invalid Response/Malformed snip By all appearances you are getting a unspecified length object back, with probably no data length. This is an invalid HTTP reply exactly as the error message said. From this info I have no idea at present why the server would be generating such replies. Amos Hmm, but then how can I Access other sites also send a unspecified length back? Or am I missing something? wget --server-response http://www.google.pt --2009-04-01 11:11:39-- http://www.google.pt/ Resolving www.google.pt... 74.125.43.99, 74.125.43.103, 74.125.43.104, ... Connecting to www.google.pt|74.125.43.99|:80... connected. HTTP request sent, awaiting response... HTTP/1.0 200 OK Cache-Control: private, max-age=0 Date: Wed, 01 Apr 2009 10:11:39 GMT Expires: -1 Content-Type: text/html; charset=ISO-8859-1 Server: HAL 9000 Set-Cookie: PREF=ID=473c55dd32d735e5:TM=1238580699:LM=1238580699:S=YTk2s6Pk1NlyJjv6; expires=Fri, 01-Apr-2011 10:11:39 GMT; path=/; domain=.google.pt Length: unspecified [text/html] Saving to: `index.html' TIA, Bruno Guerreiro
[squid-users] Invalid Response/Malformed
Cache-Control: max-age=259200\r\n Connection: keep-alive\r\n \r\n No. TimeSourceDestination Protocol Info 7605 44.717636 w.x.y.z 85.88.134.195 HTTP GET / HTTP/1.0 Frame 7605 (742 bytes on wire, 742 bytes captured) Ethernet II, Src: Micro-St_41:bf:60 (00:19:db:41:bf:60), Dst: Nortel_3a:00:43 (00:1c:17:3a:00:43) Internet Protocol, Src: w.x.y.z (w.x.y.z), Dst: 85.88.134.195 (85.88.134.195) Transmission Control Protocol, Src Port: 48200 (48200), Dst Port: http (80), Seq: 1, Ack: 1, Len: 676 Source port: 48200 (48200) Destination port: http (80) Sequence number: 1(relative sequence number) [Next sequence number: 677(relative sequence number)] Acknowledgement number: 1(relative ack number) Header length: 32 bytes Flags: 0x18 (PSH, ACK) Window size: 5888 (scaled) Checksum: 0x4c17 [correct] Options: (12 bytes) Hypertext Transfer Protocol GET / HTTP/1.0\r\n Host: www.acp.pt\r\n User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8\r\n Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n Accept-Language: en-us,en;q=0.5\r\n Accept-Encoding: gzip,deflate\r\n Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Cookie: OAID=85d42a4578c83aec5c49fcf529626d18; __utma=10858660.1732473768.1237559664.1237559664.1237559664.1; __utmz=10858660.1237559664.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none)\r\n Via: 1.1 bruno-guerreiro.dsii.ine.pt (squid/3.0.STABLE13)\r\n X-Forwarded-For: a.b.c.d\r\n Cache-Control: max-age=259200\r\n Connection: keep-alive\r\n \r\n Any ideas? Bruno Guerreiro Instituto Nacional de Estatística DMSI Departamento de Metodologia e Sistemas de Informação Tel: +351 21 842 61 00
