On 08/16/2016 11:03 PM, Omid Kosari wrote:
> Even one ip address with less than 5 requests per second can grow squid cpu
> usage up to 30% . And 10 requests per second made 100% cpu usage . While
> there is nothing other than that client goes through squid . The client
> bandwidth is less than
Aha . We have found that this request belongs to a cheap popular satellite
receiver www.starmax.co . Maybe it has been infected and becomes zombie of a
btnet . Maybe you should buy one device from them
--
View this message in context:
Of Antony Stone
Sent: Wednesday, August 17, 2016 12:04 PM
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Squid cpu usage 100% from few days ago !!
On Wednesday 17 August 2016 at 11:01:40, Eliezer Croitoru wrote:
> Hey Omid,
>
> Just to understand, are you interceptin
Matus UHLAR - fantomas wrote
> are you intercepting traffic for port 80 only?
yes
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-cpu-usage-100-from-few-days-ago-tp4678894p4678968.html
Sent from the Squid - Users mailing list archive at Nabble.com.
On 16.08.16 22:03, Omid Kosari wrote:
Even one ip address with less than 5 requests per second can grow squid cpu
usage up to 30% . And 10 requests per second made 100% cpu usage . While
there is nothing other than that client goes through squid . The client
bandwidth is less than 10Kbps .
users-boun...@lists.squid-cache.org] On
> Behalf Of Omid Kosari Sent: Wednesday, August 17, 2016 8:04 AM
> To: squid-users@lists.squid-cache.org
> Subject: Re: [squid-users] Squid cpu usage 100% from few days ago !!
>
> Even one ip address with less than 5 requests per second can g
Sent: Wednesday, August 17, 2016 8:04 AM
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Squid cpu usage 100% from few days ago !!
Even one ip address with less than 5 requests per second can grow squid cpu
usage up to 30% . And 10 requests per second made 100% cpu usage . While
Even one ip address with less than 5 requests per second can grow squid cpu
usage up to 30% . And 10 requests per second made 100% cpu usage . While
there is nothing other than that client goes through squid . The client
bandwidth is less than 10Kbps .
Isn't it crazy also ?
--
View this
On 17/08/2016 5:06 a.m., Alex Rousskov wrote:
> On 08/15/2016 02:58 AM, Omid Kosari wrote:
>
>> Maybe our clients are infected and they are zombies .
>>
>> Anyone knows some good ways to defend squid . I mean when squid forwards
>> these requests it becomes crazy .
>
> If Squid becomes crazy, it
On 08/15/2016 02:58 AM, Omid Kosari wrote:
> Maybe our clients are infected and they are zombies .
>
> Anyone knows some good ways to defend squid . I mean when squid forwards
> these requests it becomes crazy .
If Squid becomes crazy, it is a Squid bug that you should report and
help fix. Even
One of server's ip addresses that i've found belongs to cloudflare .
Cloudflare does not accept anything other than HTTP on port 80 . So it seems
an attack to some servers .
Maybe our clients are infected and they are zombies .
Anyone knows some good ways to defend squid . I mean when squid
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
14.08.2016 18:35, Antony Stone пишет:
> On Sunday 14 August 2016 at 14:25:38, Omid Kosari wrote:
>
>> Still could not find the app or url but the 2 server ip addresses are
>> 149.202.92.139 and 173.236.187.17 .
>
> The first does not respond on
On Sunday 14 August 2016 at 14:25:38, Omid Kosari wrote:
> Still could not find the app or url but the 2 server ip addresses are
> 149.202.92.139 and 173.236.187.17 .
The first does not respond on port 80 for me, and the second simply tells me
that it doesn't know which Dreamhost website I'm
On Sunday 14 August 2016 at 14:03:44, Omid Kosari wrote:
> I've found that a kind of request makes a loop in squid . Wireshark shows
> infinite loop of
>
> X-Squid-Error: ERR_INVALID_REQ 0
>
> and
>
> X-Squid-Error: ERR_INVALID_URL 0
>
> which makes high cpu usage.
What is the URL / request
My investigation shows even 1 random chosen ip address makes squid cpu usage
about 30% .
I have chosen that ip address based on users with TAG_NONE/400 errors .
I've found that a kind of request makes a loop in squid . Wireshark shows
infinite loop of
X-Squid-Error: ERR_INVALID_REQ 0
and
On Saturday 13 August 2016 at 20:51:40, Alex Rousskov wrote:
> On 08/13/2016 06:09 AM, Antony Stone wrote:
> > On Saturday 13 August 2016 at 13:40:18, Omid Kosari wrote:
> >> debug_options ALL,1
> >
> > I would not recommend having debugging turned on for a production server.
>
> "ALL,1" is the
On 08/13/2016 06:09 AM, Antony Stone wrote:
> On Saturday 13 August 2016 at 13:40:18, Omid Kosari wrote:
>
>> debug_options ALL,1
>
> I would not recommend having debugging turned on for a production server.
"ALL,1" is the default and recommended verbosity level. The word
"debugging" is
On Saturday 13 August 2016 at 13:40:18, Omid Kosari wrote:
> debug_options ALL,1
I would not recommend having debugging turned on for a production server.
In the first instance, to check whether this is what is causing your problems,
turn this option off and see whether your CPU load comes
debug_options ALL,1
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-cpu-usage-100-from-few-days-ago-tp4678894p4678901.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users
The bandwidth was about 120Mbps to each squid box but now even 10Mbps makes
100% cpu usage
With 10% of users
Average HTTP requests per minute since start: 2355.3
16GB of ram and i3-2100 CPU @ 3.10GHz, 4 cores and NO SMP like before .
It seems like an attack to/from our clients to/from
On Saturday 13 August 2016 at 09:18:24, Omid Kosari wrote:
> Hello,
>
> Recently 2 different squid boxes grows from ~40% cpu usage to 100% without
> any changes to config/banwidth/number of clients/etc
What are your bandwidth and number of clients?
> The problems forced me to bypass squid
Hello,
Recently 2 different squid boxes grows from ~40% cpu usage to 100% without
any changes to config/banwidth/number of clients/etc
The problems forced me to bypass squid until the problem found .
Right now even 10% of users can make squid 100% .
Info
Squid is in tproxy mode with routing
22 matches
Mail list logo
