Hi all,
First of all I want to apologyse if this question has been solved before but I
haven't found anything related with this.
We have a very weird issue with some https web pages. Some of them are very,
very slow. After doing some debugging we have this in our cache.log
2012/03/07 11:10:41.072| httpParseInit: Request buffer is CONNECT
ebanking.rbcdexia-is.es:443 HTTP/1.1
Host: ebanking.rbcdexia-is.es
2012/03/07 11:10:41.072| HttpMsg.cc(445) parseRequestFirstLine: parsing
possible request: CONNECT ebanking.rbcdexia-is.es:443 HTTP/1.1
Host: ebanking.rbcdexia-is.es
2012/03/07 11:10:41.072| urlParse: Split URL 'ebanking.rbcdexia-is.es:443' into
proto='', host='ebanking.rbcdexia-is.es', port='443', path=''
Host: ebanking.rbcdexia-is.es
2012/03/07 11:10:41.073| aclMatchDomainList: checking 'ebanking.rbcdexia-is.es'
2012/03/07 11:10:41.073| aclMatchDomainList: 'ebanking.rbcdexia-is.es' found
2012/03/07 11:10:41.073| The request CONNECT ebanking.rbcdexia-is.es:443 is
ALLOWED, because it matched 'allowBancos'
2012/03/07 11:10:41.073| The request CONNECT ebanking.rbcdexia-is.es:443 is
ALLOWED, because it matched 'allowBancos'
2012/03/07 11:10:41.073| clientProcessRequest: CONNECT
'ebanking.rbcdexia-is.es:443'
2012/03/07 11:10:41.074| tunnelStart: 'CONNECT ebanking.rbcdexia-is.es:443'
2012/03/07 11:10:41.074| fd_open() FD 20 ebanking.rbcdexia-is.es:443
2012/03/07 11:10:41.074| peerSelectFoo: 'CONNECT ebanking.rbcdexia-is.es'
2012/03/07 11:10:41.075| commConnectStart: FD 20, data 0x5b5fd60,
ebanking.rbcdexia-is.es:443
2012/03/07 11:10:41.075| commConnectStart: FD 20, cb 0x5ac9200*1,
ebanking.rbcdexia-is.es:443
2012/03/07 11:10:41.075| ipcache_nbgethostbyname: Name
'ebanking.rbcdexia-is.es'.
2012/03/07 11:10:41.075| ipcacheRelease: Releasing entry for
'ebanking.rbcdexia-is.es'
2012/03/07 11:10:41.075| ipcache_nbgethostbyname: MISS for
'ebanking.rbcdexia-is.es'
2012/03/07 11:10:41.075| idnsALookup: buf is 41 bytes for
ebanking.rbcdexia-is.es, id = 0x5535
2012/03/07 11:11:41.079| errorConvert: %%U -->
'https://ebanking.rbcdexia-is.es/*'
2012/03/07 11:11:41.079| errorConvert: %%U -->
'https://ebanking.rbcdexia-is.es/*'
2012/03/07 11:11:41.079| errorConvert: %%W -->
'?subject=CacheErrorInfo%20-%20ERR_CONNECT_FAIL&body=CacheHost%3A%2010.10.0.96%0D%0AErrPage%3A%20ERR_CONNECT_FAIL%0D%0AErr%3A%20(145)%20Connection%20timed%20out%0D%0ATimeStamp%3A%20Wed,%2007%20Mar%202012%2010%3A11%3A41%20GMT%0D%0A%0D%0AClientIP%3A%2010.11.7.199%0D%0A%0D%0AHTTP%20Request%3A%0D%0ACONNECT%20%2F%20HTTP%2F1.1%0AUser-Agent%3A%20Mozilla%2F5.0%20(Windows%20NT%205.0%3B%20rv%3A8.0.1)%20Gecko%2F20100101%20Firefox%2F8.0.1%0D%0AProxy-Connection%3A%20keep-alive%0D%0AHost%3A%20ebanking.rbcdexia-is.es%0D%0A%0D%0A%0D%0A'
2012/03/07 11:11:41.081| fd_close FD 20 ebanking.rbcdexia-is.es:443
2012/03/07 11:11:41.124| httpParseInit: Request buffer is CONNECT
ebanking.rbcdexia-is.es:443 HTTP/1.1
Host: ebanking.rbcdexia-is.es
2012/03/07 11:11:41.124| HttpMsg.cc(445) parseRequestFirstLine: parsing
possible request: CONNECT ebanking.rbcdexia-is.es:443 HTTP/1.1
Host: ebanking.rbcdexia-is.es
2012/03/07 11:11:41.124| urlParse: Split URL 'ebanking.rbcdexia-is.es:443' into
proto='', host='ebanking.rbcdexia-is.es', port='443', path=''
Host: ebanking.rbcdexia-is.es
2012/03/07 11:11:41.124| aclMatchDomainList: checking 'ebanking.rbcdexia-is.es'
2012/03/07 11:11:41.124| aclMatchDomainList: 'ebanking.rbcdexia-is.es' found
2012/03/07 11:11:41.125| The request CONNECT ebanking.rbcdexia-is.es:443 is
ALLOWED, because it matched 'allowBancos'
2012/03/07 11:11:41.125| The request CONNECT ebanking.rbcdexia-is.es:443 is
ALLOWED, because it matched 'allowBancos
As you can see there is a one minute timeout and the web page begins to load
again and succesfully. We have upgraded from Squid 2 to Squid 3.1.16 without
success. Now we are running version 3.1.19. Here is the output of squid -v
command:
Squid Cache: Version 3.1.19
configure options: '--prefix=/usr/local/squid' '--enable-poll'
'--enable-external-acl-helpers=ip_user,unix_group' '--enable-auth=basic'
'--enable-basic-auth-helpers=NCSA' '--enable-async-io' '--enable-icmp'
'--enable-useragent-log' '--enable-cache-digests'
'--enable-follow-x-forwarded-for' '--enable-storeio=diskd,ufs,aufs'
'--with-pthreads' '--enable-removal-policies=heap,lru' '--with-maxfd=4096'
'--with-aufs-threads=32' '--enable-http-violations' '--enable-truncate'
'--enable-snmp' --with-squid=/tmp/squid-3.1.19 --enable-ltdl-convenience
Thanks in advance.
Regards,
Jaime.