Matus UHLAR - fantomas wrote:
On 04.02 13:54, Paweł Staszewski wrote:
does anybody have experiences with squid and large number (10000 lines)
of acl-s like:
acl user1 src xxx.xxx.xxx.xxx/255.255.255.255
tcp_outgoing_address xxx.xxx.xxx.xxx user1
I doubt so, but is would be imho very ineffective. Also, I don't know what
OS will allow you to have 10000 IP addresses on local interface.
Why do you want to do this? so you want to get this result?
http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.13
thanks for your reply/
curently i have :
ip addr show | grep vlan0891 | wc -l
7689
And that is also number of users in our network.
In network users have 10/8 subnet and for http traffic I use squid-proxy
and want to assign to every user uniq ip ...with squid so every user
will be see as his nated ip on www-servers.
Squid proxy is not a nat for network , nat is doing another linux based
machine.
So question was about performance of that large acl list in squid.conf ,
and any experiences with that many acl-s in squid.conf :)