Hey Kitamura,

 

Technically speaking Openstack admin can create a flavor which has 1 vCPU and 
16GB RAM however,
it’s recommended to have 1 vCPU per 4 GB of RAM.

Openstack default vCPU ratio is 16 vCPUs per 1 physical Core.

So for a proxy which use SSL-Bump it’s recommended to have more then 1 vCPU ie 
at-least 2 if not 4.

 

All The Bests,

Eliezer

 

----

Eliezer Croitoru

Tech Support

Mobile: +972-5-28704261

Email: ngtech1...@gmail.com <mailto:ngtech1...@gmail.com> 

 

From: squid-users <squid-users-boun...@lists.squid-cache.org> On Behalf Of m k
Sent: Monday, August 17, 2020 2:12 PM
To: Amos Jeffries <squ...@treenet.co.nz>
Cc: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] I would like to know performance sizing aspects.

 

Hi all,

 

I built squid using SSL-bump. In addition, squid also authenticates users with 
active directory. The hardware is openstack virtual. os is centos8.1. There is 
one CPU. The memory is 16GB. The hard disk is SSD 200GB.

 

I'm thinking of load testing with Apache Jmeter in this environment.

I don't know the standard, so the test stops and I am in trouble.

How many simultaneous connection sessions?

How many requests per minute?

Help me.

 

thank you,

Kitamura

 

2020年8月7日(金) 8:53 Amos Jeffries <squ...@treenet.co.nz 
<mailto:squ...@treenet.co.nz> >:

On 6/08/20 5:28 pm, m k wrote:

> Eliezer,

> 

> Squid's default setting is 1 core CPU, 16GB mem.

> How many URLs(Blacklist) will degrade Squid's performance?

> 



Eliezer's answer covers that already, so I will skip here.





> Also, SSL-Bump.

> 



This is "unknown" - as far as I am aware none has published numbers

recently about it. There are a lot of factors in the network traffic and

your servers internal state (eg the RNG engine) that multiply up to

cause varying amounts of delay - plus the volatile nature of this

feature set itself month by month changes the effects or relevance of

each factor.

  So numbers from me today will be wrong in a few weeks, or may be wrong

for your network already. All that we can be sure of is that there is

extra work needed by Squid thus "slower" than plain-text HTTP is to be

expected.



For planning the consideration is just to be aware that the numbers we

can give you (for plain-text) will be over-estimates of capacity for

SSL-Bump traffic and allow some margins. Once you have an install

running you can test and measure the actual numbers for your traffic.





Amos

_______________________________________________

squid-users mailing list

squid-users@lists.squid-cache.org <mailto:squid-users@lists.squid-cache.org> 

http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to