Re: [squid-users] Squid3 extremely slow for some website cnn.com
Hey muhammed, Since it's not squid issue but another network level thing I was wondering if you have tried to test something about MSS\MTU? Some ISP use hardware that can cause there kind of issues and can make it very difficult to find. Hope it will help you. Regards, Eliezer On 12/25/2012 2:38 PM, Muhammed Shehata wrote: Dear Amos, Is there any Ideas can help me in Java script issue Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/19/2012 01:02 PM, Amos Jeffries wrote: On 19/12/2012 7:24 a.m., Muhammad Shehata wrote: Dear amos, Is there any update Hi, I am currently in the process of moving house. So the work I can do on Squid is rather limited for 3-4 weeks. I hope to get to this soon, but cannot promise anything. Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Amos, Is there any Ideas can help me in Java script issue Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/19/2012 01:02 PM, Amos Jeffries wrote: On 19/12/2012 7:24 a.m., Muhammad Shehata wrote: Dear amos, Is there any update Hi, I am currently in the process of moving house. So the work I can do on Squid is rather limited for 3-4 weeks. I hope to get to this soon, but cannot promise anything. Amos
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear amos, Is there any update From: Muhammed Shehata [m.sheh...@tedata.net] Sent: Monday, December 17, 2012 10:24 AM To: Amos Jeffries Cc: squid-users@squid-cache.org; IT Network Security Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com 2nd file for large attach size Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/13/2012 11:58 PM, Amos Jeffries wrote: On 13/12/2012 9:41 p.m., Muhammed Shehata wrote: Dear Amos, -the interrelation: the logs are from two squid similar servers that only differ in version and client at both request doesn't disconnect or anything the aborted maybe mean that squid can't get this url contains java script but what I wonder of why squid can get it successfully -here is the logs with time : squid2 on Centos5.2 1355387935.418 7 x.x.x.x TCP_MISS/304 324 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript squid3 on Centos 6.3 13/Dec/2012:10:39:05 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - 13/Dec/2012:10:39:25 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - Aha. Thanks this makes more sense. 7ms with a response versus 20 seconds with nothing returned. Although for better debug you should get the squid-3 to leave upstream server IP address in the log. It could be some problem of which IP is being connected to by Squid. With 3.2 at debugs_options 11,2 you get a cache.log HTTP trace of what is going between Squid and optimizely and client. I suspect optimizely is not responding when a request is delivered to them - but you need to track that down. Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
1st file for large attach size Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/13/2012 11:58 PM, Amos Jeffries wrote: On 13/12/2012 9:41 p.m., Muhammed Shehata wrote: Dear Amos, -the interrelation: the logs are from two squid similar servers that only differ in version and client at both request doesn't disconnect or anything the aborted maybe mean that squid can't get this url contains java script but what I wonder of why squid can get it successfully -here is the logs with time : squid2 on Centos5.2 1355387935.418 7 x.x.x.x TCP_MISS/304 324 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript squid3 on Centos 6.3 13/Dec/2012:10:39:05 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - 13/Dec/2012:10:39:25 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - Aha. Thanks this makes more sense. 7ms with a response versus 20 seconds with nothing returned. Although for better debug you should get the squid-3 to leave upstream server IP address in the log. It could be some problem of which IP is being connected to by Squid. With 3.2 at debugs_options 11,2 you get a cache.log HTTP trace of what is going between Squid and optimizely and client. I suspect optimizely is not responding when a request is delivered to them - but you need to track that down. Amos squid3.2.4 when accept js urls which make slowness.tar.gz Description: squid3.2.4 when accept js urls which make slowness.tar.gz
Re: [squid-users] Squid3 extremely slow for some website cnn.com
2nd file for large attach size Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/13/2012 11:58 PM, Amos Jeffries wrote: On 13/12/2012 9:41 p.m., Muhammed Shehata wrote: Dear Amos, -the interrelation: the logs are from two squid similar servers that only differ in version and client at both request doesn't disconnect or anything the aborted maybe mean that squid can't get this url contains java script but what I wonder of why squid can get it successfully -here is the logs with time : squid2 on Centos5.2 1355387935.418 7 x.x.x.x TCP_MISS/304 324 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript squid3 on Centos 6.3 13/Dec/2012:10:39:05 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - 13/Dec/2012:10:39:25 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - Aha. Thanks this makes more sense. 7ms with a response versus 20 seconds with nothing returned. Although for better debug you should get the squid-3 to leave upstream server IP address in the log. It could be some problem of which IP is being connected to by Squid. With 3.2 at debugs_options 11,2 you get a cache.log HTTP trace of what is going between Squid and optimizely and client. I suspect optimizely is not responding when a request is delivered to them - but you need to track that down. Amos squid3.2.4 when deny js urls.tar.gz Description: squid3.2.4 when deny js urls.tar.gz
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Amos, -the interrelation: the logs are from two squid similar servers that only differ in version and client at both request doesn't disconnect or anything the aborted maybe mean that squid can't get this url contains java script but what I wonder of why squid can get it successfully -here is the logs with time : squid2 on Centos5.2 1355387935.418 7 x.x.x.x TCP_MISS/304 324 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript squid3 on Centos 6.3 13/Dec/2012:10:39:05 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - 13/Dec/2012:10:39:25 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - N.B x.x.x.x is the ip of the same host getting the website at same time without disconnect Mshehata IT NS On 12/13/2012 09:56 AM, Amos Jeffries wrote: On 13/12/2012 8:04 p.m., Muhammed Shehata wrote: Dear Eliezer, I tried to remove dans from the setup already and I'm pretty sure that the issue in squid itself as per its logs declare Your logs presented in that first post declare that out of two requests: * a client connected, delivered a request and disconnected before anything was returned. * a client connected and requested the same URL which was delivered successfully. The log lines were incomplete, so we don't know anything about timing and interrelations. Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Hey Muhammed, From my point of view if it's squid fault of making this error you are having, I and anyone else using the same version and build will have, am I right? So I am using squid 3.2.1-3 and 3.3.0.1 and I dont have any of the issues you are talking about. If you can come up with a clean centos 6.3 setup that has the same side effect you are talking about in a VM and I can get the same result and see it in my own eyes on my network line I would assume we are having an issue related to squid or specific build of squid with specific things. Unless you will provide enough data that will make it a fact nobody can help you with it. If it's centos 6.3 you can probably run a small VM on a desktop and get the same results. Regards, Eliezer On 12/13/2012 9:56 AM, Amos Jeffries wrote: On 13/12/2012 8:04 p.m., Muhammed Shehata wrote: Dear Eliezer, I tried to remove dans from the setup already and I'm pretty sure that the issue in squid itself as per its logs declare Your logs presented in that first post declare that out of two requests: * a client connected, delivered a request and disconnected before anything was returned. * a client connected and requested the same URL which was delivered successfully. The log lines were incomplete, so we don't know anything about timing and interrelations. Amos -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
On 13/12/2012 9:41 p.m., Muhammed Shehata wrote: Dear Amos, -the interrelation: the logs are from two squid similar servers that only differ in version and client at both request doesn't disconnect or anything the aborted maybe mean that squid can't get this url contains java script but what I wonder of why squid can get it successfully -here is the logs with time : squid2 on Centos5.2 1355387935.418 7 x.x.x.x TCP_MISS/304 324 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript squid3 on Centos 6.3 13/Dec/2012:10:39:05 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - 13/Dec/2012:10:39:25 +0200 20020 x.x.x.x TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js - HIER_DIRECT/cdn.optimizely.com - Aha. Thanks this makes more sense. 7ms with a response versus 20 seconds with nothing returned. Although for better debug you should get the squid-3 to leave upstream server IP address in the log. It could be some problem of which IP is being connected to by Squid. With 3.2 at debugs_options 11,2 you get a cache.log HTTP trace of what is going between Squid and optimizely and client. I suspect optimizely is not responding when a request is delivered to them - but you need to track that down. Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dears, Is there any on can help Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/12/2012 09:08 AM, Muhammed Shehata wrote: Eliezer, squid2 centos 5.2 final squid3 centos 6.3 final Mshehata IT NS On 12/11/2012 10:03 PM, Eliezer Croitoru wrote: What linux? RH ? On 12/11/2012 10:00 PM, Muhammad Shehata wrote: Dear Eliezer, Thanks for your replay But actually it is the same user behavior (me only trying request cnn.com and waiting to get it on my browser ) using the same browser through the same squid proxy with the same configuration and same network devices before and after them the only difference is th squid version one is squid2.6stable20 and other is squid3.2.4 which result the aborted of some urls contains java script M Shehata IT NS From: Eliezer Croitoru [elie...@ngtech.co.il] Sent: Tuesday, December 11, 2012 7:24 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com Hey Muhammad, I do understand your problem but the issue you are having is most likely not due to any squid preferences. In most cases squid handles the request in the basic level of headers and then pipe the request to the client directly(maybe using a buffer). The only case which squid will inspect the content in a deeper level is when using ESI. Since you are using it as a forward proxy I suppose it's disabled in your setup. All the above takes you back to the lower level of networking troubleshooting. The TCP_MISS_ABORTED is basically the client aborted the request. Try to be more informative on the tests you have done and what tweaks have you tried to apply? More about the setup etc.. If by any way other systems on the way between your squid to the source are doing nasty things to the traffic you will have troubles. If you want to look for the source of the problem use curl wget or other tools. You will might want to tweak your refresh_pattern to match this specific site. If you need more assistance then just plain mailing list I assume this can also be done. Regards, Eliezer On 12/11/2012 9:32 AM, Muhammad Shehata wrote: Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
W dniu 2012-12-12 11:53, Muhammed Shehata pisze: Dears, Is there any on can help [...] Hi; Could you please tell me what is your deployment scenario? Regards; Pawel Mojski
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Pawel, thanks for your replay, I have two similar implementations client dans squid Internet the only difference between them is the squid version and centos version 1. squid2.6stable20 with centos 5.2 final 2. squid3.2.4 with centos 6.3 final Mshehata IT NS From: Paweł Mojski [paw...@pawcio.net] Sent: Wednesday, December 12, 2012 5:44 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com W dniu 2012-12-12 11:53, Muhammed Shehata pisze: Dears, Is there any on can help [...] Hi; Could you please tell me what is your deployment scenario? Regards; Pawel Mojski
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Remove the Danshguardian and try again. On 12/12/2012 6:24 PM, Muhammad Shehata wrote: Dear Pawel, thanks for your replay, I have two similar implementations client dans squid Internet the only difference between them is the squid version and centos version 1. squid2.6stable20 with centos 5.2 final 2. squid3.2.4 with centos 6.3 final Mshehata IT NS -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Eliezer, I tried to remove dans from the setup already and I'm pretty sure that the issue in squid itself as per its logs declare Mshehata IT NS On 12/13/2012 12:58 AM, Eliezer Croitoru wrote: Remove the Danshguardian and try again. On 12/12/2012 6:24 PM, Muhammad Shehata wrote: Dear Pawel, thanks for your replay, I have two similar implementations client dans squid Internet the only difference between them is the squid version and centos version 1. squid2.6stable20 with centos 5.2 final 2. squid3.2.4 with centos 6.3 final Mshehata IT NS
Re: [squid-users] Squid3 extremely slow for some website cnn.com
On 13/12/2012 8:04 p.m., Muhammed Shehata wrote: Dear Eliezer, I tried to remove dans from the setup already and I'm pretty sure that the issue in squid itself as per its logs declare Your logs presented in that first post declare that out of two requests: * a client connected, delivered a request and disconnected before anything was returned. * a client connected and requested the same URL which was delivered successfully. The log lines were incomplete, so we don't know anything about timing and interrelations. Amos
RE: RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
Re: RE: [squid-users] Squid3 extremely slow for some website cnn.com
Try lowering MTU to 1400 on squid's system , sometime that's a non-obvious problem. On Tue, Dec 11, 2012 at 1:58 AM, Muhammad Shehata m.sheh...@tedata.net wrote: Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
Re: [squid-users] Squid3 extremely slow for some website cnn.com
I have problems with optimizely.com for a long time. When I use a proxy in the USA, retrieving websites is OK but when I stop using the proxy in the USA it fails to load. I live in Brazil and you have a problem being in Egypt so my guess is that optimizely.com hangs when you are in a country for which it has no configuration. You can safely block optimizely.com and the websites that use it, have no problems. Marcus On 12/11/2012 07:58 AM, Muhammad Shehata wrote: Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
RE: RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Sunyconq, Thanks for your update, but actually I modified the MTU and there is no diferrence at all I think it's related to java script handling method in squid2 and squid3 as the squid2 get it but squid 3 abort it which cause the slowness Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -Original Message- From: 叶雨飞 [mailto:sunyuc...@gmail.com] Sent: Tuesday, December 11, 2012 12:09 PM To: Muhammad Shehata Cc: Eliezer Croitoru; squ...@treenet.co.nz; squid-users@squid-cache.org Subject: Re: RE: [squid-users] Squid3 extremely slow for some website cnn.com Try lowering MTU to 1400 on squid's system , sometime that's a non-obvious problem. On Tue, Dec 11, 2012 at 1:58 AM, Muhammad Shehata m.sheh...@tedata.net wrote: Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Macus, Actually I don't think so as It being get on squid2 as below TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 /javascript Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -Original Message- From: Marcus Kool [mailto:marcus.k...@urlfilterdb.com] Sent: Tuesday, December 11, 2012 1:09 PM To: Muhammad Shehata Cc: Eliezer Croitoru; squ...@treenet.co.nz; squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com I have problems with optimizely.com for a long time. When I use a proxy in the USA, retrieving websites is OK but when I stop using the proxy in the USA it fails to load. I live in Brazil and you have a problem being in Egypt so my guess is that optimizely.com hangs when you are in a country for which it has no configuration. You can safely block optimizely.com and the websites that use it, have no problems. Marcus On 12/11/2012 07:58 AM, Muhammad Shehata wrote: Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Macus, Actually I don't think so as It being get on squid2 as below TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 /javascript Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -Original Message- From: Marcus Kool [mailto:marcus.k...@urlfilterdb.com] Sent: Tuesday, December 11, 2012 1:09 PM To: Muhammad Shehata Cc: Eliezer Croitoru; squ...@treenet.co.nz; squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com I have problems with optimizely.com for a long time. When I use a proxy in the USA, retrieving websites is OK but when I stop using the proxy in the USA it fails to load. I live in Brazil and you have a problem being in Egypt so my guess is that optimizely.com hangs when you are in a country for which it has no configuration. You can safely block optimizely.com and the websites that use it, have no problems. Marcus On 12/11/2012 07:58 AM, Muhammad Shehata wrote: Dears, sorry but I've an urgent case, is there any Ideas about the JS issues in squid3 From: Muhammad Shehata Sent: Tuesday, December 11, 2012 9:32 AM To: Eliezer Croitoru; squ...@treenet.co.nz Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid3 extremely slow for some website cnn.com Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Hey Muhammad, I do understand your problem but the issue you are having is most likely not due to any squid preferences. In most cases squid handles the request in the basic level of headers and then pipe the request to the client directly(maybe using a buffer). The only case which squid will inspect the content in a deeper level is when using ESI. Since you are using it as a forward proxy I suppose it's disabled in your setup. All the above takes you back to the lower level of networking troubleshooting. The TCP_MISS_ABORTED is basically the client aborted the request. Try to be more informative on the tests you have done and what tweaks have you tried to apply? More about the setup etc.. If by any way other systems on the way between your squid to the source are doing nasty things to the traffic you will have troubles. If you want to look for the source of the problem use curl wget or other tools. You will might want to tweak your refresh_pattern to match this specific site. If you need more assistance then just plain mailing list I assume this can also be done. Regards, Eliezer On 12/11/2012 9:32 AM, Muhammad Shehata wrote: Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Eliezer, Thanks for your replay But actually it is the same user behavior (me only trying request cnn.com and waiting to get it on my browser ) using the same browser through the same squid proxy with the same configuration and same network devices before and after them the only difference is th squid version one is squid2.6stable20 and other is squid3.2.4 which result the aborted of some urls contains java script M Shehata IT NS From: Eliezer Croitoru [elie...@ngtech.co.il] Sent: Tuesday, December 11, 2012 7:24 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com Hey Muhammad, I do understand your problem but the issue you are having is most likely not due to any squid preferences. In most cases squid handles the request in the basic level of headers and then pipe the request to the client directly(maybe using a buffer). The only case which squid will inspect the content in a deeper level is when using ESI. Since you are using it as a forward proxy I suppose it's disabled in your setup. All the above takes you back to the lower level of networking troubleshooting. The TCP_MISS_ABORTED is basically the client aborted the request. Try to be more informative on the tests you have done and what tweaks have you tried to apply? More about the setup etc.. If by any way other systems on the way between your squid to the source are doing nasty things to the traffic you will have troubles. If you want to look for the source of the problem use curl wget or other tools. You will might want to tweak your refresh_pattern to match this specific site. If you need more assistance then just plain mailing list I assume this can also be done. Regards, Eliezer On 12/11/2012 9:32 AM, Muhammad Shehata wrote: Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
What linux? RH ? On 12/11/2012 10:00 PM, Muhammad Shehata wrote: Dear Eliezer, Thanks for your replay But actually it is the same user behavior (me only trying request cnn.com and waiting to get it on my browser ) using the same browser through the same squid proxy with the same configuration and same network devices before and after them the only difference is th squid version one is squid2.6stable20 and other is squid3.2.4 which result the aborted of some urls contains java script M Shehata IT NS From: Eliezer Croitoru [elie...@ngtech.co.il] Sent: Tuesday, December 11, 2012 7:24 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com Hey Muhammad, I do understand your problem but the issue you are having is most likely not due to any squid preferences. In most cases squid handles the request in the basic level of headers and then pipe the request to the client directly(maybe using a buffer). The only case which squid will inspect the content in a deeper level is when using ESI. Since you are using it as a forward proxy I suppose it's disabled in your setup. All the above takes you back to the lower level of networking troubleshooting. The TCP_MISS_ABORTED is basically the client aborted the request. Try to be more informative on the tests you have done and what tweaks have you tried to apply? More about the setup etc.. If by any way other systems on the way between your squid to the source are doing nasty things to the traffic you will have troubles. If you want to look for the source of the problem use curl wget or other tools. You will might want to tweak your refresh_pattern to match this specific site. If you need more assistance then just plain mailing list I assume this can also be done. Regards, Eliezer On 12/11/2012 9:32 AM, Muhammad Shehata wrote: Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Eliezer, squid2 centos 5.2 final squid3 centos 6.3 final Mshehata IT NS On 12/11/2012 10:03 PM, Eliezer Croitoru wrote: What linux? RH ? On 12/11/2012 10:00 PM, Muhammad Shehata wrote: Dear Eliezer, Thanks for your replay But actually it is the same user behavior (me only trying request cnn.com and waiting to get it on my browser ) using the same browser through the same squid proxy with the same configuration and same network devices before and after them the only difference is th squid version one is squid2.6stable20 and other is squid3.2.4 which result the aborted of some urls contains java script M Shehata IT NS From: Eliezer Croitoru [elie...@ngtech.co.il] Sent: Tuesday, December 11, 2012 7:24 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid3 extremely slow for some website cnn.com Hey Muhammad, I do understand your problem but the issue you are having is most likely not due to any squid preferences. In most cases squid handles the request in the basic level of headers and then pipe the request to the client directly(maybe using a buffer). The only case which squid will inspect the content in a deeper level is when using ESI. Since you are using it as a forward proxy I suppose it's disabled in your setup. All the above takes you back to the lower level of networking troubleshooting. The TCP_MISS_ABORTED is basically the client aborted the request. Try to be more informative on the tests you have done and what tweaks have you tried to apply? More about the setup etc.. If by any way other systems on the way between your squid to the source are doing nasty things to the traffic you will have troubles. If you want to look for the source of the problem use curl wget or other tools. You will might want to tweak your refresh_pattern to match this specific site. If you need more assistance then just plain mailing list I assume this can also be done. Regards, Eliezer On 12/11/2012 9:32 AM, Muhammad Shehata wrote: Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
RE: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Amos,Eliezer Could you help me in that, I found squid3 failed to get some Java script pages in some websites squid3 logs : TCP_MISS_ABORTED/000 0 GET http://cdn.optimizely.com/js/128727546.js squid3 logs :TCP_MISS/200 17298 GET http://cdn.optimizely.com/js/128727546.js - DIRECT/23.50.196.211 text/javascript Is there any patch to solve such issue in squid3 and if there any configuration option to speed up the response time without affecting badly Mshehata IT NS Best regards, Muhammed Shehata IT Network Security Engineer TE Data Building A11- B90, 2nd floor Smart Village, Cairo, Alex Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net
Re: [squid-users] Squid3 extremely slow for some website cnn.com
On 6/12/2012 8:49 p.m., Muhammed Shehata wrote: Dear Amos, I tried latest one 3.2.4 however brighttalk doesn't open issue still here, one more thing I noticed every website has the slowness issue call the sub url cdn.optimizely.com Ah. None of the websites you mentioned having problems with so far use cdn.optimizely.com as a distributor. Perhapse you are sitting behind some traffic hijacking? Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
I will post it later since I am working on something right now. Eliezer On 12/5/2012 11:49 AM, Muhammed Shehata wrote: Do you have spec file for this version to build on Centos 6 X86_64 Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 02:08 PM, Eliezer Croitoru wrote: For me it works fine on both 3.2.1-3 and others. Try to check the headers that is being sent from you proxy such as X-Forward etc. Regards, Eliezer On 12/4/2012 12:37 PM, Muhammed Shehata wrote: Dear Amos, I downgraded to 2.6stable21 and it still the same issue with same websites Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 09:27 AM, Muhammed Shehata wrote: the attach Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 08:46 AM, Muhammed Shehata wrote: Dear Amos, Kindly find wireshark of the squid behaviour when access cnn it takes 4 minutes to load the site, is there any workaround to avoid such slowness or any version of squid3 can handle efficiently such websites contains ETag Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/03/2012 01:30 PM, Amos Jeffries wrote: On 3/12/2012 9:12 p.m., Muhammed Shehata wrote: I notice brighttalk is an HTTPS site, so the issue there is likely to be bug 3659 which was resolved in 3.2.4. CNN problem is not obvious. It has a great many objects in its pages, all of which have ETag and Vary problems which could do some very strange things to the responses. Since it is HTTP site only there is no reason Squid should be sending (FIN,ACK). Amos Dear Amos, I have serious problem after upgrading to Squid3 it response extremely slow to some specific websites(www.cnn.com, www.brighttalk.com) I've tried squid-3.0.STABLE20,3.1.20,3.1.21,3.2.1 and all of them have the same slowness problem however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Amos, I downgraded to 2.6stable21 and it still the same issue with same websites Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 09:27 AM, Muhammed Shehata wrote: the attach Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 08:46 AM, Muhammed Shehata wrote: Dear Amos, Kindly find wireshark of the squid behaviour when access cnn it takes 4 minutes to load the site, is there any workaround to avoid such slowness or any version of squid3 can handle efficiently such websites contains ETag Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/03/2012 01:30 PM, Amos Jeffries wrote: On 3/12/2012 9:12 p.m., Muhammed Shehata wrote: I notice brighttalk is an HTTPS site, so the issue there is likely to be bug 3659 which was resolved in 3.2.4. CNN problem is not obvious. It has a great many objects in its pages, all of which have ETag and Vary problems which could do some very strange things to the responses. Since it is HTTP site only there is no reason Squid should be sending (FIN,ACK). Amos Dear Amos, I have serious problem after upgrading to Squid3 it response extremely slow to some specific websites(www.cnn.com, www.brighttalk.com) I've tried squid-3.0.STABLE20,3.1.20,3.1.21,3.2.1 and all of them have the same slowness problem however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h
Re: [squid-users] Squid3 extremely slow for some website cnn.com
For me it works fine on both 3.2.1-3 and others. Try to check the headers that is being sent from you proxy such as X-Forward etc. Regards, Eliezer On 12/4/2012 12:37 PM, Muhammed Shehata wrote: Dear Amos, I downgraded to 2.6stable21 and it still the same issue with same websites Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 09:27 AM, Muhammed Shehata wrote: the attach Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 08:46 AM, Muhammed Shehata wrote: Dear Amos, Kindly find wireshark of the squid behaviour when access cnn it takes 4 minutes to load the site, is there any workaround to avoid such slowness or any version of squid3 can handle efficiently such websites contains ETag Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/03/2012 01:30 PM, Amos Jeffries wrote: On 3/12/2012 9:12 p.m., Muhammed Shehata wrote: I notice brighttalk is an HTTPS site, so the issue there is likely to be bug 3659 which was resolved in 3.2.4. CNN problem is not obvious. It has a great many objects in its pages, all of which have ETag and Vary problems which could do some very strange things to the responses. Since it is HTTP site only there is no reason Squid should be sending (FIN,ACK). Amos Dear Amos, I have serious problem after upgrading to Squid3 it response extremely slow to some specific websites(www.cnn.com, www.brighttalk.com) I've tried squid-3.0.STABLE20,3.1.20,3.1.21,3.2.1 and all of them have the same slowness problem however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
You will need to disable it for testing. This can cause nasty troubles since many systems relay on that like you yourself. If this is the reason you will be able to check it and see the results instantly. Just make sure this is the problem. from there to find the right solution is another thing. Eliezer On 12/4/2012 2:14 PM, Muhammed Shehata wrote: Dear Eliezer, do you mean disable x-forwader-for as i need it for dansguardian and squid visibility -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il
Re: [squid-users] Squid3 extremely slow for some website cnn.com
On 3/12/2012 9:12 p.m., Muhammed Shehata wrote: Dear Amos, I have serious problem after upgrading to Squid3 it response extremely slow to some specific websites(www.cnn.com, www.brighttalk.com) I've tried squid-3.0.STABLE20,3.1.20,3.1.21,3.2.1 and all of them have the same slowness problem however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h I notice brighttalk is an HTTPS site, so the issue there is likely to be bug 3659 which was resolved in 3.2.4. CNN problem is not obvious. It has a great many objects in its pages, all of which have ETag and Vary problems which could do some very strange things to the responses. Since it is HTTP site only there is no reason Squid should be sending (FIN,ACK). Amos
Re: [squid-users] Squid3 extremely slow for some website cnn.com
Dear Amos, Kindly find wireshark of the squid behaviour when access cnn it takes 4 minutes to load the site, is there any workaround to avoid such slowness or any version of squid3 can handle efficiently such websites contains ETag Best Regards, *Muhammad Shehata* IT Network Security Engineer TEData Building A11- B90, Smart Village Km 28 Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/03/2012 01:30 PM, Amos Jeffries wrote: On 3/12/2012 9:12 p.m., Muhammed Shehata wrote: I notice brighttalk is an HTTPS site, so the issue there is likely to be bug 3659 which was resolved in 3.2.4. CNN problem is not obvious. It has a great many objects in its pages, all of which have ETag and Vary problems which could do some very strange things to the responses. Since it is HTTP site only there is no reason Squid should be sending (FIN,ACK). Amos Dear Amos, I have serious problem after upgrading to Squid3 it response extremely slow to some specific websites(www.cnn.com, www.brighttalk.com) I've tried squid-3.0.STABLE20,3.1.20,3.1.21,3.2.1 and all of them have the same slowness problem however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h
