Re: [squid-users] Running squid -k reconfigure frequently

[Robert Collins]

On Sat, 2003-07-19 at 14:31, Steve Cody wrote:
> Hello all,
> 
> I would like to know if there is a negative impact on a system, or on Squid, 
> if the squid -k reconfigure command is ran at a frequent interval.  For 
> example, I would like to run it about every 2 minutes to make user changes 
> take effect rapidly.
> 
> Is that going to be a problem?  If so, is there a better interval to use, or 
> a better way to make user changes take effect?  I'm using user authentication 
> and the changes I'm talking about are user creation, enabling, disabling, and 
> deleting.  The changes don't take effect until the squid -k reconfigure 
> command is ran.

Well, this will negatively impact squid. There is a slight delay in all
requests every time reconfigure is run.

If you are using file-based back end authenticators, then you would be
best served by switching to a different backend authenticator - i.e. yp,
ldap, etc which will dynamically notice new users and the like. Squid
itself will notice such alterations when the backend helper does (modulo
it's caching, which can be tuned in squid.conf).

Cheers,
Rob

-- 
GPG key available at: .


signature.asc
Description: This is a digitally signed message part

Re: [squid-users] Running squid -k reconfigure frequently

[Peter Koinange]

Something wrong here, why would you really need to ran squid -k so often, I
believe you problem here is administration I find it impossible see why you
are making changes every 2 minutes. Come up with a admin policy on how often
changes are done and whn they should take effect

Peter
- Original Message -
From: "Steve Cody" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, July 19, 2003 7:31 AM
Subject: [squid-users] Running squid -k reconfigure frequently


> Hello all,
>
> I would like to know if there is a negative impact on a system, or on
Squid,
> if the squid -k reconfigure command is ran at a frequent interval.  For
> example, I would like to run it about every 2 minutes to make user changes
> take effect rapidly.
>
> Is that going to be a problem?  If so, is there a better interval to use,
or
> a better way to make user changes take effect?  I'm using user
authentication
> and the changes I'm talking about are user creation, enabling, disabling,
and
> deleting.  The changes don't take effect until the squid -k reconfigure
> command is ran.
>
> Thanks in advance!
> Steve Cody
>
> --
> Open WebMail Project (http://openwebmail.org)
>
>

Re: [squid-users] Running squid -k reconfigure frequently

[Henrik Nordstrom]

On Saturday 19 July 2003 06.44, Robert Collins wrote:

> Well, this will negatively impact squid. There is a slight delay in
> all requests every time reconfigure is run.

And it is also a thing which is not very much tested. It is quite 
likely you will uncover several yet unknown Squid bugs/problems if 
doing this.

What kind of changes is the reason to needing this?

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] Running squid -k reconfigure frequently

[Steve Cody]

I have Squid running in a cybercafe environment.  Frequently, new users
will be added, and existing user's accounts will be disabled.  This is
to enable and disable Internet access for people.

I'm currently using access with a password file that gets modified
whenever there is a user change.  The changes don't take effect until I
restart squid, or do a squid -k reconfigure.

Someone else suggested that I use LDAP to avoid this issue, and I'm
looking into that option right now.

Steve


On Sat, 2003-07-19 at 02:30, Peter Koinange wrote:
> Something wrong here, why would you really need to ran squid -k so often, I
> believe you problem here is administration I find it impossible see why you
> are making changes every 2 minutes. Come up with a admin policy on how often
> changes are done and whn they should take effect
> 
> Peter
> - Original Message -
> From: "Steve Cody" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, July 19, 2003 7:31 AM
> Subject: [squid-users] Running squid -k reconfigure frequently
> 
> 
> > Hello all,
> >
> > I would like to know if there is a negative impact on a system, or on
> Squid,
> > if the squid -k reconfigure command is ran at a frequent interval.  For
> > example, I would like to run it about every 2 minutes to make user changes
> > take effect rapidly.
> >
> > Is that going to be a problem?  If so, is there a better interval to use,
> or
> > a better way to make user changes take effect?  I'm using user
> authentication
> > and the changes I'm talking about are user creation, enabling, disabling,
> and
> > deleting.  The changes don't take effect until the squid -k reconfigure
> > command is ran.
> >
> > Thanks in advance!
> > Steve Cody
> >
> > --
> > Open WebMail Project (http://openwebmail.org)
> >
> >

Re: [squid-users] Running squid -k reconfigure frequently

[Schelstraete Bart]

Steve,

We're also using LDAP for authentication , using the pam_ldap 
autheticator (using ldap group)
And I never restarted Squid. So it works perfect!



   Bart
Steve Cody wrote:
I have Squid running in a cybercafe environment.  Frequently, new users
will be added, and existing user's accounts will be disabled.  This is
to enable and disable Internet access for people.
I'm currently using access with a password file that gets modified
whenever there is a user change.  The changes don't take effect until I
restart squid, or do a squid -k reconfigure.
Someone else suggested that I use LDAP to avoid this issue, and I'm
looking into that option right now.
Steve

On Sat, 2003-07-19 at 02:30, Peter Koinange wrote:
 

Something wrong here, why would you really need to ran squid -k so often, I
believe you problem here is administration I find it impossible see why you
are making changes every 2 minutes. Come up with a admin policy on how often
changes are done and whn they should take effect
Peter
- Original Message -
From: "Steve Cody" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, July 19, 2003 7:31 AM
Subject: [squid-users] Running squid -k reconfigure frequently
   

Hello all,

I would like to know if there is a negative impact on a system, or on
 

Squid,
   

if the squid -k reconfigure command is ran at a frequent interval.  For
example, I would like to run it about every 2 minutes to make user changes
take effect rapidly.
Is that going to be a problem?  If so, is there a better interval to use,
 

or
   

a better way to make user changes take effect?  I'm using user
 

authentication
   

and the changes I'm talking about are user creation, enabling, disabling,
 

and
   

deleting.  The changes don't take effect until the squid -k reconfigure
command is ran.
Thanks in advance!
Steve Cody
--
Open WebMail Project (http://openwebmail.org)
 



 

RE: [squid-users] Running squid -k reconfigure frequently

[Jay Turner]

I have been running Squid versions 2.4 STABLE6 - 2.5 STABLE2 and I have a
system that also uses reconfigure frequently to update blocking lists
automatically for squidGuard.

I generally use a 5 minute interval scheduled in cron but I use a token file
that is checked  for before I issue a reconfigure. That is, reconfigure is
only called if changes have been made (which is infrequent, but could occur
at any time). I have found this system to work quite well for our systems.
During testing, I have even gone down to once a minute, but again,
reconfigure will only be triggered if it is required.

There is a slight disruption to service during a reconfigure, but it is
negligible and generally unnoticeable by end-users in my experience.

Regards
Jay

-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Saturday, 19 July 2003 4:53 PM
To: Steve Cody
Cc: [EMAIL PROTECTED]
Subject: Re: [squid-users] Running squid -k reconfigure frequently


On Saturday 19 July 2003 06.44, Robert Collins wrote:

> Well, this will negatively impact squid. There is a slight delay in
> all requests every time reconfigure is run.

And it is also a thing which is not very much tested. It is quite
likely you will uncover several yet unknown Squid bugs/problems if
doing this.

What kind of changes is the reason to needing this?

--
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] Running squid -k reconfigure frequently

[Henrik Nordstrom]

On Monday 21 July 2003 03.03, Jay Turner wrote:
> I have been running Squid versions 2.4 STABLE6 - 2.5 STABLE2 and I
> have a system that also uses reconfigure frequently to update
> blocking lists automatically for squidGuard.

You don't need to reconfigure to have squidguard reread it's 
configuration. A "squid -k rotate" is sufficient.

If you build access controls using an external database such as LDAP 
etc then you will not need to ever reconfigure Squid due to access 
control changes.

> I generally use a 5 minute interval scheduled in cron but I use a
> token file that is checked  for before I issue a reconfigure. That
> is, reconfigure is only called if changes have been made (which is
> infrequent, but could occur at any time).

Good idea to limit the "squid -k reconfigure" calls.

Regards
Henrik