On 09/09/11 18:15, Michael Hendrie wrote:
On 09/09/2011, at 12:34 PM, John Kenyon wrote:
Hi All,
I am experiencing a slow down on one particular site:
https://www.my.commbank.com.au/netbank/Logon/Logon.aspx
I can access this web site fine however it takes approx. 30 seconds
to load, and if I bypass squid it takes 1 second.
Currently running version 3.1.15, can someone point me in the right
direct to further troubleshoot this one?
Cheers,
JLK
I had the exact same problem with with 3.1.10. In my case it was an
IPv6 problem so I compiled squid with --disable-ipv6 as I didn't need
it. There are a number of other ways to overcome the problem if you
look through the mail archives
(http://www.squid-cache.org/mail-archive/squid-users/201101/0344.html)
or google.
Well, considering this is .AU *do* need it, and soonish.
Michael;
If disabling IPv6 entirely solves your problem, then the problem is in
the IPv6 setup. When its one particular site like this its probably at
or close to their end. Hanging/Pausing connections could be:
- DNS lag from resolvers failing to respond the same for A and AAAA,
- ICMP loss from ISP who still think its safe to drop them, or tunnels
with too-big MTU configuration.
- PMTUD failures from lost ICMP messages.
That said, I checked from here across the ditch and its seems to be an
IPv4-only site. So none of that applies.
John;
being https:// Squids only involvement is limited to being told an
IP/domain to connect to and start forwarding packets there.
I'm more inclined to suspect the bank is doing some extra validation
in the background when it detects the end user is not at the IP the
request is coming from.
Amos
--
Please be using
Current Stable Squid 2.7.STABLE9 or 3.1.15
Beta testers wanted for 3.2.0.11
