[FUG-BR] Proxy Lento demais !! ALGUEM ?!!! por favor

[Pedro Henrique Morsch Mazzoni]

Bruno,

Tente:

log_fqdn off

Isso desabilita a pesquisa de nomes para inclusão nos logs.


Att,
Pedro Mazzoni


2006/10/25, Bruno Zanelato <bzanelato at gmail.com>:
> Fala galera, seguinte...estou com o seguinte problema
> eu montei um proxy,
> FreeBSD 6.1
> XEON 3.0
> 1GB RAM
> 40 SCSI
> 2 placas GIGA
> "ps: ela nao faz nat..somente forward"
>
> Esta máquina..esta funcionando como Hierarquia de proxy, ou seja, ele
> é um proxy antes do outro proxy, tive q instalar ele pra filtrar
> coisas que o proxy 2 não filtra..
>
> Até ae. blz..compilei a ultima versão estavel do squid..com diskd..
> igualzinho ao artigo da FUG
> mas galera....o acesso á paginas está muito lento..as vezes nem abre
> as páginas..
> esta maquina está segurando uns 160 usuários.
> Eu ja não sei mais oq fazer.....pq se eu tiro o proxy 1 e deixo as
> pessoas navegar direito pelo proxy 2 , como eles estavam antes...a
> internet volta a ficar rapida.
> então logo..o gargalo ta no meu proxy.
> vou postar a configuração do meu squid.conf
>
>
> http_port 3128
> ##### CACHE ############
> cache_mem 256 MB
> cache_swap_low 90
> cache_swap_high 95
> maximum_object_size 250 MB
> cache_dir diskd /usr/cache 5000 16 256 Q1=72 Q2=64
> cache_replacement_policy heap GDSF
> ##### ICP ######
> icp_port 3130
> #hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> visible_hostname proxy2
>
> refresh_pattern ^ftp:           1440    20%     10080
> refresh_pattern ^gopher:        1440    0%      1440
> refresh_pattern .               0       20%     4320
>
> ######## HIERARQUIA DE PROXY ###############
>
> cache_peer 10.1.6.82 parent 80 3130 no-query no-digest default
>
> ######### USUARIO PARA RODAR O SQUID ###########
> # Usuario sob o qual ira rodar o Squid.
> cache_effective_user squid
> # Grupo sob o qual ira rodar o Squid.
> cache_effective_group squid
>
> ############ LOGS #######################
> # Log de requisicoes.
> cache_access_log /var/logs/access.log
> # Log do cache.
> cache_log /var/logs/cache.log
> ############# ACLS ####################
> acl all src 0.0.0.0/0.0.0.0
> ############ BLOQUEIA IP PARA ACESSAR PAGINAS ##########
> acl ipnegado src "/usr/local/etc/squid/regras/IPBlock"
> ############ LIBERA IP PARA ACESSO TOTAL ##########
> acl Livres src "/usr/local/etc/squid/regras/IPLivre"
> ############## MUSICAS E RADIO ONLINE BLOQUEIA ##################
> acl proibir_musica urlpath_regex -i "/usr/local/etc/squid/regras/Musicblock"
> ############## DOWNLOADS BLOQUEADOS ##################
> acl download url_regex -i "/usr/local/etc/squid/regras/Downblock"
> ############## DOWNLOADS PERMITIDOS ##################
> acl downloadok url_regex -i "/usr/local/etc/squid/regras/Downaccept"
> ############### SITES BLOQUEADOS ###############
> acl Negados url_regex -i "/usr/local/etc/squid/regras/Negados"
> ############### SITES LIBERADOS ###############
> acl SitesAllow url_regex -i "/usr/local/etc/squid/regras/Livres"
> #Agora comeca o squid default
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl to_localhost dst 127.0.0.0/8
> acl rede_interna src 10.30.1.0/24
> acl SSL_ports port 443 563      # https, snews
> acl SSL_ports port 873          # rsync
> acl Safe_ports port 80          # http
> acl Safe_ports port 21          # ftp
> acl Safe_ports port 443 563     # https, snews
> acl Safe_ports port 70          # gopher
> acl Safe_ports port 210         # wais
> acl Safe_ports port 1025-65535  # unregistered ports
> acl Safe_ports port 280         # http-mgmt
> acl Safe_ports port 488         # gss-http
> acl Safe_ports port 591         # filemaker
> acl Safe_ports port 777         # multiling http
> acl Safe_ports port 631         # cups
> acl Safe_ports port 873         # rsync
> acl Safe_ports port 901         # SWAT
> acl purge method PURGE
> acl CONNECT method CONNECT
> ########## DEFINE CONTROLE DE ACESSO ########
> http_access allow manager localhost
> http_access deny manager
> http_access allow purge localhost
> http_access deny purge
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> icp_access allow all
> http_access allow Livres
> http_access allow SitesAllow
> http_access deny ipnegado
> http_access deny Negados
> http_access allow download Livres
> http_access allow downloadok
> http_access deny download
> #http_reply_access allow downloadsrp Livres
> #http_reply_access deny downloadsrp
> #http_reply_access allow streaming Livres
> #http_reply_access deny streaming
> http_access deny proibir_musica
> http_access allow localhost
> http_access allow rede_interna
> http_access deny all
> http_reply_access allow all
>
> icp_access allow all
> detect_broken_pconn on
> pipeline_prefetch on
> coredump_dir none
> never_direct allow all
> cache_log on
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>