> mån 2008-12-08 klockan 09:28 +0800 skrev William Hanwoody:
> > I have abserved squid logs at that time.
> > When this happened, the response time of squid is often more than 30
> > seconds, and no other urls are abnormal.
>
> Are you using any of the following features in squid.conf?
>
> external_acl_type
> acl type dst
> acl type ident
> http_reply_access
> url_rewrite_program / redirector_program
> auth_param
> collapsed_forwarding
my squid configuration:
--------------------------------------
http_port 80 accel vhost vport=80 defaultsite=xxxx.com.cn
icp_port 0
udp_incoming_address 127.0.0.1
udp_outgoing_address 0.0.0.0
hierarchy_stoplist cgi-bin ?
cache_vary on
via off
persistent_request_timeout 2 seconds
client_persistent_connections off
server_persistent_connections on
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 1800 MB
maximum_object_size 16384 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 1024 KB
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir null /data1/squid/var/cache
strip_query_terms off
logformat combined %>a %ui %un [%tl] %tr "%rm %ru
HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
cache_access_log /data1/squid/var/logs/access.log combined
cache_log /data1/squid/var/logs/squid.log
cache_store_log none
logfile_rotate 20
emulate_httpd_log on
pid_filename /data1/squid/var/logs/squid.pid
hosts_file /usr/local/squid/etc/hosts.squid
mime_table /usr/local/squid/etc/mime.conf
diskd_program /usr/local/squid/sbin/diskd-daemon
unlinkd_program /usr/local/squid/sbin/unlinkd
icon_directory /usr/local/squid/share/icons
error_directory /usr/local/squid/share/errors/English
negative_ttl 120 seconds
acl haproxy src 10.0.0.0/8 172.16.0.0/16 192.168.0.0/16
follow_x_forwarded_for allow haproxy
acl_uses_indirect_client on
log_uses_indirect_client on
acl QUERY urlpath_regex cgi-bin
cache deny QUERY
acl manager proto cache_object
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl allowed_localports port 80
acl allowed_ports port 80
acl allowed_methods method GET
acl allowed_methods method HEAD
acl Purge_method method PURGE
acl purgehost dst 10.1.2.2
http_access allow Purge_method purgehost
http_access allow manager localhost
http_access deny manager all
http_access allow allowed_localports
http_access deny !allowed_methods
http_access deny !allowed_ports
http_access deny !allowed_doms
http_access deny !allowed_hosts
http_access deny to_localhost
http_access deny QUERY
http_access allow all
http_reply_access allow all
cachemgr_passwd none all
icp_access deny all
reply_body_max_size 0 allow all
always_direct allow allowed_doms
visible_hostname xxxx.com.cn
cache_effective_user www
cache_effective_group www
--------------------------------------
there is "http_reply_access" in squid.conf.
Thanks again for your relpy.
>
> > and I often find abnormal output of squidclient:
> > Memory usage for squid via mallinfo():
> > Total space in arena: -1980532 KB
> > here, memory size always is negative value? int overflow?
>
> That's normal. Linux glibc mallinfo() is broken for processes larger
> than 2GB.
>
> Regards
> Henrik
