My ~300 users are behind squid-3.2.11. As from 7:00 this morning my 10Mbit/s Internet link is saturated by adobe reader updates:
http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.2/misc/AdbeRdrUpd952_all_incr.msp
http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.0/en_US/AdbeRdr950_en_US.exe
http://armdl.adobe.com/pub/adobe/reader/win/10.x/10.1.0/en_US/AdbeRdr1010_en_US.msi
http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.3/misc/AdbeRdrUpd953_all_incr.msp
I found IPs of update servers, and as a temporary solution I put them into aclnodstip.acl, and modified squid.conf:
acl adobe dst "/usr/local/etc/squid/aclnodstip.acl"
...
http_access deny adobe
This worked well as a temporary solution, as traffic dropped immediately. Next, I followed:
http://wiki.squid-cache.org/SquidFaq/WindowsUpdate
I already had following directives:
range_offset_limit -1
maximum_object_size 8192 MB
quick_abort_min -1
And now I added regex for adobe:
refresh_pattern -i armdl.adobe.com/.*\.(dat|exe|ms[i|p]|upd|dat|zip) 4320 80% 43200 reload-into-ims
Unfortunately, after disabling acl and enabling refresh pattern my link got saturated again.
Any advice how to cache those adobe updates? Or at least make clients download them once, not constantly re-requesting them without ever completing download successfully.
Thank you in advance.
-- Marko CupaćReceived on Wed May 15 2013 - 10:17:16 MDT
This archive was generated by hypermail 2.2.0 : Wed May 29 2013 - 12:00:07 MDT