You will like to allow for your environment more then 8192 FD.
I would suggest to jump to something like 65535 as a starter and use
half of it for the soft and the full to hard.
This is the basic tuning for such a system for this amount of users.
2700 with about 100 per sec can be the culprit.
you can use squidclient mgr:SOMETHING
and the command:
lsof -n |grep proxy | wc -l
to see how many basically are opened.
Regards,
Eliezer
On 11/27/2012 9:42 PM, Delisle, Marc wrote:
Squid is telling me that it can use 8192 file descriptors.
ns:~ # ulimit -Sa
core file size (blocks, -c) 1
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 62844
max locked memory (kbytes, -l) 64
max memory size (kbytes, -m) 6847088
open files (-n) 1024
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes (-u) 62844
virtual memory (kbytes, -v) 14830240
file locks (-x) unlimited
ns:~ # ulimit -Ha
core file size (blocks, -c) unlimited
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 62844
max locked memory (kbytes, -l) 256
max memory size (kbytes, -m) unlimited
open files (-n) 8192
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) unlimited
cpu time (seconds, -t) unlimited
max user processes (-u) 62844
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
--
Eliezer Croitoru
https://www1.ngtech.co.il
sip:ngtech@xxxxxxxxxxxx
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il