Re: [squid-users] Squid is slow in responding to web page loads

Iain Howard wrote:
>
> Hi there,
>
> I am using RHEL 4.7 with Squid 2.5 STABLE14
>
> I have installed and loaded squid the best way I know.
>
> When the client loads google it takes appox 30 seconds before the page
> appears. Some other web pages take even longer. Have I done something
> wrong?
>
> I am also websense squid intigration but that should not have a baring
> on it. Also when I installed squid it placed my squid.conf file in the
> following location:
> /usr/local/squid/etc
> while the OS version has the squid.conf in this location:
> /etc/squid/
>
> Which version runs when the service starts?

When built the binary has hard-coded location of where to check for the
config file. The OS package maintainer has altered these for RH with the
./configure options. Run "squid -v" to see what it was built with or see
the RedHat section of
http://wiki.squid-cache.org/SquidFaq/CompilingSquid

  If you are running your custom built binary it will load the one from
where the install process placed it.

There a few things which stand out as possible causes of slow speed.

1) Squid version. 2.5 is very outdated. Since you are building it
yourself you should be able to use a later release. There were big
performance boosts between 2.5 and 2.6.
   http://www.squid-cache.org/Versions/

2) DNS delays
  you have hard coded several nameservers. I'm not sure enough of 2.5,
but for all later versions squid can handle resolv.conf properly. If the
initial DNS servers are failing or unavailable, this will cause long
timeouts before the request goes through.

3) ufs file system is quite slow. For Linux systems AUFS is very much
faster.

4) 100 MB of cache while still default in many releases, is quite small
by todays standards for traffic.

Amos

>
> Attached is my squid.conf file:
>
> http_port 3128
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> cache_dir ufs /usr/local/squid/var/cache 100 16 256
> cache_access_log /usr/local/squid/var/logs/access.log
> cache_log /usr/local/squid/var/logs/cache.log
> dns_nameservers 192.168.5.2 172.16.0.3 172.16.0.4
> auth_param basic children 5
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours
> auth_param basic casesensitive off
> #Modified by Iain
> #Does not Parse
> #auth_param ntlm program /usr/lib/squid/ntlm_auth KPL/nevada
> #auth_param ntlm children 5
> #auth_param ntlm max_challenge_reuses 0
> #auth_param ntlm max_challenge_lifetime 1 hour
> refresh_pattern ^ftp: 1440 20% 10080
> refresh_pattern ^gopher: 1440 0% 1440
> refresh_pattern . 0 20% 4320
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst
> 127.0.0.0/8 acl SSL_ports port 443 563
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 563 # https, snews
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
> acl 172net src 172.16.0.0/20
> acl orkie src 192.168.5.0/24
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow 172net
> http_access allow orkie
> http_access allow localhost
> http_access deny all
> http_reply_access allow all
> http_reply_access allow all
> icp_access allow all
> cache_effective_user squid
> cache_effective_group squid
> visible_hostname virginia.kettle.co.uk
> httpd_accel_with_proxy off
> coredump_dir /usr/local/squid/var/cache
>
> All other setting in squid are defaults.
>
>
> Thanks for the help
>
> Iain Howard
> IT Manager
> 01337381045
> Kettle Produce Ltd
>

-- 
Please use Squid 2.7.STABLE4 or 3.0.STABLE9