Thank Amos, (a) The Squid boxes are beyond the router in question - i.e. connected on the Internet side of the network (b) The Access list on the router that is redirecting traffic only redirects port 80 destined packets and allows the rest to flow normally (c) The Squid boxes point to the upstream router as the default gateway so not let outbound traffic to go through the redirecting router again -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: Wednesday, January 20, 2010 1:21 AM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: CEF+WCC+Router utilization On Tue, 19 Jan 2010 15:15:55 +0200, "Raphael Maseko" <ralph@xxxxxxxxx> wrote: > Hi, > > I have been running WCCP on a 3660 Cisco Router to redirect http traffic to > my cache servers and it has been working fine. I have noticed that with an > increase in traffic, my CPU utilization on the router seems to be going > through the roof! (close to 100%) for most parts of the day. > > After troubleshooting, I realised that the high utilization is because of > the "no ip cef" command I have to issue on the router to disable Cisco's > Express forwarding for wccp to work. > > Is there any way I can get the 'best of both worlds' here? - i.e keep wccp > running while keeping the router CPU sane? > > Thanks in advance > > Ralph You could try setting up normal routing and abandon WCCP. * Place the Squid box(es) outside the router (closer to the Internet) * At the Cisco route port-80 from the clients through the Squid, other traffic direct to the Net * Squid connect direct to the Net (most efficient) or if they must go through the Cisco again, they must be specially exempted from the redirection. Amos