-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 5 Jul 2007 15:44:36 -0400 "Jeff Honey" <jhoney@xxxxxxxxxxxxxxxx> wrote: > > I don't know that I've ever had occasion to ask the squid group anything before but this one thing has me stumped. We just moved our infrastructure from one facility to another and our squid servers' performance has really gone down the tubes. Request processes have slowed to a crawl. Admittedly, we have made some changes to the routing of external requests (as we are no longer in a flat network) but all the systems in that same IP network have no trouble at all getting to the outside world. > > When squid receives a page request, it just seems to sit on it for a few seconds before doing anything with it and the end user doesn't see any activity from squid for a minute or longer. This was a perfectly functioning squid setup prior to our move. The only thing that has changed is the path it takes to get to the Internet. How should I go about finding out if it is squid with the problem or if it just something boneheaded I've done somewhere else? Hi Jeff, I agree with Adrian regarding upgrading from your Squid-2.5 to the current version of 2.6.13. You will appreciate the drop in CPU load among other things. Since your Squid box was working fine yesterday, upgrading will probably not solve your problems however. I suppose you are not running Squid in transparent mode? DNS could also be the culprit as Adrian had mentioned. How fast can your Squid box resolve DNS queries? Since the only thing that has changed is an additional router between Squid and the Internet. I would first run a tcpdump between with your Squid box and your router to make sure the firewalls are doing their jobs fine. Doesn't access.log and cache.log complain about anything? Thanking you... > > <snip> > Squid Cache: Version 2.5.STABLE1-20030206 > configure options: --prefix=/usr/local/squid25 --enable-dlmalloc --enable-ssl --enable-openssl --enable-useragent-log --enable-snmp --enable-kill-parent-hack --enable-time-hack --enable-delay-pools --enable-referer-log --enable-underscores '--enable-auth=basic digest ntlm' > </snip> > > > ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ > ¤ Jeff Honey, Network Administrator > ¤ PS America, Inc. > ¤ 4426 N. Orange Blossom Trl > ¤ Orlando, FL 32804 > ¤ 407-521-1011 voice > ¤ 407-521-1007 fax > ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ > > - -- With best regards and good wishes, Yours sincerely, Tek Bahadur Limbu (TAG/TDG Group) Jwl Systems Department Worldlink Communications Pvt. Ltd. Jawalakhel, Nepal http://www.wlink.com.np -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (FreeBSD) iD8DBQFGjeoEVrOl+eVhOvYRAp8ZAJ9mzo/9g3fV/sr9BNNA1lFbVHE29QCfbPAc 9E45d/wObtv5niJ4czTwWSk= =n9xa -----END PGP SIGNATURE-----