hi ,
i have server delr720 .
i have centos 6.3 x68_64 bit , with kernel 3.7.5 compiled with "tproxy"
support
i have ram 32 Giga .
i have 4 hardsiks as follow:
hardisk#1==>opertaing system 170 giga ssd hardsik with name sda
hardsik#2 , hardsik#3 , hardsik#4 , ===>had been as raid 0 with name sdb
ive woring wccp2 with cisco router with tproxy without ptoblems .
but the main problem is that there is slow in browsing and squid guard
sometimes bypass the filtering !!!
==========================
the bw entering my server is about 150-170 M with about 1000 user .
=================================
here is some info :
[root@squid /]# free- m
-bash: free-: command not found
[root@squid /]# free -m
total used free shared buffers cached
Mem: 32451 2165 30286 0 72 1453
-/+ buffers/cache: 639 31812
Swap: 0 0 0
[root@squid /]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 2936 1404 ? Ss Feb20 0:04 /sbin/init
root 2 0.0 0.0 0 0 ? S Feb20 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/0]
root 5 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/0:0H]
root 7 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/u:0H]
root 8 0.0 0.0 0 0 ? S Feb20 0:00
[migration/0]
root 9 0.0 0.0 0 0 ? S Feb20 0:00 [rcu_bh]
root 10 0.0 0.0 0 0 ? S Feb20 1:14 [rcu_sched]
root 11 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/0]
root 12 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/1]
root 13 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/1]
root 14 0.0 0.0 0 0 ? S Feb20 0:00
[migration/1]
root 16 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/1:0H]
root 17 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/2]
root 18 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/2]
root 19 0.0 0.0 0 0 ? S Feb20 0:00
[migration/2]
root 21 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/2:0H]
root 22 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/3]
root 23 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/3]
root 24 0.0 0.0 0 0 ? S Feb20 0:00
[migration/3]
root 26 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/3:0H]
root 27 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/4]
root 28 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/4]
root 29 0.0 0.0 0 0 ? S Feb20 0:00
[migration/4]
root 31 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/4:0H]
root 32 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/5]
root 33 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/5]
root 34 0.0 0.0 0 0 ? S Feb20 0:00
[migration/5]
root 35 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/5:0]
root 36 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/5:0H]
root 37 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/6]
root 38 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/6]
root 39 0.0 0.0 0 0 ? S Feb20 0:00
[migration/6]
root 40 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/6:0]
root 41 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/6:0H]
root 42 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/7]
root 43 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/7]
root 44 0.0 0.0 0 0 ? S Feb20 0:00
[migration/7]
root 45 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/7:0]
root 46 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/7:0H]
root 47 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/8]
root 48 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/8]
root 49 0.0 0.0 0 0 ? S Feb20 0:00
[migration/8]
root 50 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/8:0]
root 51 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/8:0H]
root 52 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/9]
root 53 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/9]
root 54 0.0 0.0 0 0 ? S Feb20 0:00
[migration/9]
root 55 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/9:0]
root 56 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/9:0H]
root 57 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/10]
root 58 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/10]
root 59 0.0 0.0 0 0 ? S Feb20 0:00
[migration/10]
root 60 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/10:0]
root 61 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/10:0H]
root 62 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/11]
root 63 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/11]
root 64 0.0 0.0 0 0 ? S Feb20 0:00
[migration/11]
root 65 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/11:0]
root 66 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/11:0H]
root 67 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/12]
root 68 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/12]
root 69 0.0 0.0 0 0 ? S Feb20 0:00
[migration/12]
root 70 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/12:0]
root 71 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/12:0H]
root 72 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/13]
root 73 0.0 0.0 0 0 ? S Feb20 0:02
[ksoftirqd/13]
root 74 0.0 0.0 0 0 ? S Feb20 0:00
[migration/13]
root 76 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/13:0H]
root 77 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/14]
root 78 0.0 0.0 0 0 ? S Feb20 0:02
[ksoftirqd/14]
root 79 0.0 0.0 0 0 ? S Feb20 0:00
[migration/14]
root 81 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/14:0H]
root 82 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/15]
root 83 0.0 0.0 0 0 ? S Feb20 0:02
[ksoftirqd/15]
root 84 0.0 0.0 0 0 ? S Feb20 0:02
[migration/15]
root 86 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/15:0H]
root 87 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/16]
root 88 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/16]
root 89 0.0 0.0 0 0 ? S Feb20 0:00
[migration/16]
root 91 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/16:0H]
root 92 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/17]
root 93 0.0 0.0 0 0 ? S Feb20 0:02
[ksoftirqd/17]
root 94 0.0 0.0 0 0 ? S Feb20 0:00
[migration/17]
root 95 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/17:0]
root 96 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/17:0H]
root 97 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/18]
root 98 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/18]
root 99 0.0 0.0 0 0 ? S Feb20 0:00
[migration/18]
root 100 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/18:0]
root 101 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/18:0H]
root 102 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/19]
root 103 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/19]
root 104 0.0 0.0 0 0 ? S Feb20 0:00
[migration/19]
root 105 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/19:0]
root 106 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/19:0H]
root 107 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/20]
root 108 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/20]
root 109 0.0 0.0 0 0 ? S Feb20 0:00
[migration/20]
root 110 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/20:0]
root 111 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/20:0H]
root 112 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/21]
root 113 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/21]
root 114 0.0 0.0 0 0 ? S Feb20 0:00
[migration/21]
root 115 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/21:0]
root 116 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/21:0H]
root 117 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/22]
root 118 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/22]
root 119 0.0 0.0 0 0 ? S Feb20 0:00
[migration/22]
root 120 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/22:0]
root 121 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/22:0H]
root 122 0.0 0.0 0 0 ? S Feb20 0:00
[watchdog/23]
root 123 0.0 0.0 0 0 ? S Feb20 0:00
[ksoftirqd/23]
root 124 0.0 0.0 0 0 ? S Feb20 0:00
[migration/23]
root 125 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/23:0]
root 126 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/23:0H]
root 127 0.0 0.0 0 0 ? S< Feb20 0:00 [cpuset]
root 128 0.0 0.0 0 0 ? S< Feb20 0:00 [khelper]
root 129 0.0 0.0 0 0 ? S Feb20 0:00 [kdevtmpfs]
root 130 0.0 0.0 0 0 ? S< Feb20 0:00 [netns]
root 131 0.0 0.0 0 0 ? S Feb20 0:00
[bdi-default]
root 132 0.0 0.0 0 0 ? S< Feb20 0:00
[kintegrityd]
root 133 0.0 0.0 0 0 ? S< Feb20 0:00 [kblockd]
root 134 0.0 0.0 0 0 ? S< Feb20 0:00 [ata_sff]
root 135 0.0 0.0 0 0 ? S Feb20 0:00 [khubd]
root 136 0.0 0.0 0 0 ? S< Feb20 0:00 [md]
root 140 0.0 0.0 0 0 ? S Feb20 0:06
[kworker/13:1]
root 142 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/4:1]
root 144 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/8:1]
root 147 0.0 0.0 0 0 ? S Feb20 0:00
[khungtaskd]
root 148 0.0 0.0 0 0 ? S Feb20 0:57 [kswapd0]
root 149 0.0 0.0 0 0 ? SN Feb20 0:00 [ksmd]
root 150 0.0 0.0 0 0 ? S Feb20 0:00
[fsnotify_mark]
root 151 0.0 0.0 0 0 ? S< Feb20 0:00 [crypto]
root 157 0.0 0.0 0 0 ? S< Feb20 0:00 [kthrotld]
root 158 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/16:1]
root 162 0.0 0.0 0 0 ? S Feb20 0:02
[kworker/9:1]
root 163 0.0 0.0 0 0 ? S Feb20 0:02
[kworker/11:1]
root 165 0.0 0.0 0 0 ? S< Feb20 0:00 [kpsmoused]
root 166 0.0 0.0 0 0 ? S< Feb20 0:00 [deferwq]
root 205 0.0 0.0 0 0 ? S Feb20 0:02
[kworker/17:1]
root 216 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/23:1]
root 221 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/18:1]
root 225 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/21:1]
root 246 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/20:1]
root 289 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/22:1]
root 399 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_0]
root 443 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_1]
root 444 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_2]
root 445 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_3]
root 446 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_4]
root 447 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_5]
root 448 0.0 0.0 0 0 ? S Feb20 0:00 [scsi_eh_6]
root 450 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/u:4]
root 451 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/u:5]
root 597 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/15:1H]
root 598 0.0 0.0 0 0 ? S< Feb20 0:01
[kworker/7:1H]
root 605 0.0 0.0 0 0 ? S< Feb20 0:13
[kworker/0:1H]
root 606 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/21:1H]
root 607 0.0 0.0 0 0 ? S< Feb20 0:02
[kworker/17:1H]
root 625 0.0 0.0 0 0 ? S Feb20 0:02
[jbd2/sda1-8]
root 626 0.0 0.0 0 0 ? S< Feb20 0:00
[ext4-dio-unwrit]
root 628 0.0 0.0 0 0 ? S< Feb20 0:01
[kworker/5:1H]
root 637 0.0 0.0 0 0 ? S< Feb20 0:01
[kworker/3:1H]
root 656 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/9:1H]
root 2119 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/13:1H]
root 2122 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/6:1H]
root 2138 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/23:1H]
root 2635 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/11:1H]
root 2714 0.0 0.0 0 0 ? S Feb20 0:00 [kauditd]
root 2720 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/19:1H]
root 2950 0.1 0.0 0 0 ? S Feb20 2:45 [flush-8:0]
root 3014 0.0 0.0 10928 560 ? S<sl Feb20 0:00 auditd
root 3040 0.0 0.0 0 0 ? S< Feb20 0:18
[kworker/1:1H]
root 3041 0.0 0.0 31048 1244 ? Sl Feb20 0:01
/sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 3070 0.0 0.0 3064 688 ? Ss Feb20 0:40 irqbalance
rpc 3084 0.0 0.0 2620 856 ? Ss Feb20 0:00 rpcbind
rpcuser 3102 0.0 0.0 2884 1252 ? Ss Feb20 0:00 rpc.statd
root 3130 0.0 0.0 0 0 ? S< Feb20 0:00 [rpciod]
root 3134 0.0 0.0 2684 384 ? Ss Feb20 0:00 rpc.idmapd
root 3164 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/18:1H]
dbus 3167 0.0 0.0 3172 1324 ? Ss Feb20 0:00 dbus-daemon
--system
root 3203 0.0 0.0 2064 572 ? Ss Feb20 0:00
/usr/sbin/acpid
68 3212 0.0 0.0 6500 3984 ? Ss Feb20 0:01 hald
root 3213 0.0 0.0 3828 1084 ? S Feb20 0:00 hald-runner
root 3241 0.0 0.0 3904 832 ? S Feb20 0:00
hald-addon-input: Listening on /dev/input/event2 /dev/input/event3
/dev/input/event0
root 3245 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/16:1H]
68 3253 0.0 0.0 3548 988 ? S Feb20 0:00
hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 3258 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/2:1H]
root 3378 0.0 0.0 12536 2484 ? Ss Feb20 0:00
/usr/libexec/postfix/master
postfix 3395 0.0 0.0 12680 2452 ? S Feb20 0:00 qmgr -l -t
fifo -u
root 3418 0.0 0.0 5932 1168 ? Ss Feb20 0:00 crond
root 3429 0.0 0.0 2964 360 ? Ss Feb20 0:00
/usr/sbin/atd
root 3441 0.0 0.0 7940 328 ? Ss Feb20 0:00
/usr/sbin/certmonger -S -p /var/run/certmonger.pid
root 3454 0.0 0.0 5436 2492 ? Ss Feb20 0:00 login --
root
root 3456 0.0 0.0 2052 476 tty2 Ss+ Feb20 0:00
/sbin/mingetty /dev/tty2
root 3458 0.0 0.0 2052 480 tty3 Ss+ Feb20 0:00
/sbin/mingetty /dev/tty3
root 3460 0.0 0.0 2052 480 tty4 Ss+ Feb20 0:00
/sbin/mingetty /dev/tty4
root 3462 0.0 0.0 2052 476 tty5 Ss+ Feb20 0:00
/sbin/mingetty /dev/tty5
root 3464 0.0 0.0 2052 476 tty6 Ss+ Feb20 0:00
/sbin/mingetty /dev/tty6
root 3468 0.0 0.0 65948 2408 ? Sl Feb20 0:00
/usr/sbin/console-kit-daemon --no-daemon
root 3534 0.0 0.0 5272 1656 tty1 Ss Feb20 0:00 -bash
root 4008 0.0 0.0 0 0 ? S< Feb20 0:02
[kworker/14:1H]
root 4035 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/4:1H]
root 4081 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/8:1H]
root 4109 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/10:1H]
root 4193 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/16:0]
root 4379 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/19:2]
root 4387 0.0 0.0 0 0 ? S Feb20 0:00
[jbd2/sdb-8]
root 4388 0.0 0.0 0 0 ? S< Feb20 0:00
[ext4-dio-unwrit]
root 5005 0.0 0.0 19048 3916 ? S Feb20 0:29
/usr/sbin/snmpd -LS0-6d -Lf /dev/null -p /var/run/snmpd.pid
root 6105 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/7:1]
root 6404 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/12:2]
root 6633 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/14:0]
root 6664 0.0 0.0 0 0 ? S Feb20 0:03
[kworker/15:0]
root 6843 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/1:2]
root 7047 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/10:2]
root 7061 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/2:3]
root 7321 0.0 0.0 0 0 ? S Feb20 0:01
[kworker/3:1]
root 7428 0.0 0.0 27824 13580 tty1 T Feb20 0:00
/usr/bin/python /usr/bin/yum install squidguard
root 7434 0.0 0.0 27824 13580 tty1 T Feb20 0:00
/usr/bin/python /usr/bin/yum install squidguard
root 7491 0.0 0.0 0 0 ? S< Feb20 0:00
[kworker/12:1H]
root 7570 0.0 0.0 2528 732 ? S<s Feb20 0:00
/sbin/udevd -d
root 7760 0.0 0.0 12068 2524 ? Ss Feb20 0:00 cupsd -C
/etc/cups/cupsd.conf
root 7811 0.0 0.0 27972 1480 ? Ssl Feb20 0:00 automount
--pid-file /var/run/autofs.pid
root 7842 0.0 0.0 8572 996 ? Ss Feb20 0:00
/usr/sbin/sshd
root 7931 0.0 0.0 5200 972 ? Ss Feb20 0:00
/usr/sbin/abrtd
root 7947 0.0 0.0 5140 736 ? Ss Feb20 0:00
abrt-dump-oops -d /var/spool/abrt -rwx /var/log/messages
root 15642 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/13:2]
root 16139 0.0 0.0 0 0 ? S Feb20 0:00
[kworker/15:2]
root 19497 0.0 0.0 0 0 ? S 04:01 0:00
[kworker/4:2]
root 19503 0.0 0.0 2524 768 ? S< 04:02 0:00
/sbin/udevd -d
root 19507 0.0 0.0 0 0 ? S 04:02 0:00
[kworker/0:0]
root 19522 0.0 0.0 0 0 ? S 04:03 0:00
[kworker/6:1]
root 19805 0.9 0.0 0 0 ? S 04:31 1:55
[flush-8:16]
root 24057 0.0 0.0 11984 3584 ? Ss 05:28 0:08 sshd:
root@pts/4
root 24059 0.0 0.0 5272 1668 pts/4 Ss 05:28 0:00 -bash
root 24082 0.0 0.0 4100 1536 pts/4 T 05:29 0:00 squidGuard
-d
root 24161 0.0 0.0 14656 2448 ? Ss 05:48 0:00 squid -f
/etc/squid/squid.conf
squid 24163 51.8 0.4 169184 160312 ? D 05:48 65:33 (squid) -f
/etc/squid/squid.conf
squid 24165 1.0 0.0 4636 2056 ? S 05:48 1:23
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24166 0.5 0.0 4636 2060 ? S 05:48 0:42
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24167 0.2 0.0 4636 2052 ? S 05:48 0:20
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24168 0.2 0.0 4636 2056 ? S 05:48 0:16
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24169 0.1 0.0 4636 2056 ? S 05:48 0:12
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24170 0.1 0.0 4636 2056 ? S 05:48 0:10
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24171 0.1 0.0 4636 2060 ? S 05:48 0:08
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24172 0.0 0.0 4636 2056 ? S 05:48 0:06
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24173 0.0 0.0 4636 2056 ? S 05:48 0:05
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24174 0.0 0.0 4636 2060 ? S 05:48 0:04
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24175 0.0 0.0 4636 2056 ? S 05:48 0:04
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24176 0.0 0.0 4636 2060 ? S 05:48 0:03
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24177 0.0 0.0 4636 2056 ? S 05:48 0:03
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24178 0.0 0.0 4636 2056 ? S 05:48 0:02
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24179 0.0 0.0 4636 2052 ? S 05:48 0:02
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24180 0.0 0.0 4636 2056 ? S 05:48 0:02
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24181 0.0 0.0 4636 2060 ? S 05:48 0:02
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24182 0.0 0.0 4636 2056 ? S 05:48 0:01
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24183 0.0 0.0 4636 2060 ? S 05:48 0:01
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24184 0.0 0.0 4636 2060 ? S 05:48 0:01
(squidGuard) -c /usr/local/squidGuard/squidGuard.conf
squid 24185 0.0 0.0 3324 876 ? S 05:48 0:02 (unlinkd)
root 24236 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/5:1]
root 24239 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/14:2]
root 24242 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/0:1]
root 24244 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/1:0]
root 24245 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/3:0]
root 24266 0.0 0.0 2524 756 ? S< 05:48 0:00
/sbin/udevd -d
root 24283 0.0 0.0 0 0 ? S 05:48 0:00
[kworker/2:0]
root 24389 0.0 0.0 4096 560 pts/4 T 05:52 0:04 tailf
/var/log/squid/access.log
root 24472 0.0 0.0 4096 564 pts/4 T 06:17 0:03 tailf
/var/log/squid/access.log
root 24473 0.0 0.0 4404 688 pts/4 T 06:17 0:02 grep porn
postfix 24489 0.0 0.0 12616 2440 ? S 06:25 0:00 pickup -l
-t fifo -u
root 24492 0.0 0.0 11096 2844 pts/4 S+ 06:26 0:00 vim
/etc/squid/squid.conf
root 24577 0.0 0.0 4096 564 tty1 T 07:06 0:01 tailf
/var/log/squid/access.log
root 24578 0.0 0.0 2748 1112 tty1 T 07:06 0:00 top
root 24595 0.0 0.0 4096 552 tty1 T 07:14 0:00 tailf
/var/log/squid/cache.log
root 24597 0.9 0.0 4096 552 tty1 S+ 07:14 0:23 tailf
/var/log/squid/cache.log
root 24632 0.0 0.0 12016 3552 ? Ss 07:34 0:00 sshd:
root@pts/0
root 24635 0.0 0.0 5280 1648 pts/0 Ss 07:34 0:00 -bash
root 24728 3.0 0.0 4928 1056 pts/0 R+ 07:55 0:00 ps aux
[root@squid /]# cat /etc/squid/squid.conf
#
#
# squid Config By "xx" "xx"
#
###################
acl all src all
acl manager proto cache_object
acl localnet src 192.168.1.0/24 x.x.x.x/16 x.x.x0/16
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 590 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
#Default:\
visible_hostname squid
coredump_dir /var/spool/squid
################################squidguard###################
redirect_program /usr/local/bin/squidGuard -c
/usr/local/squidGuard/squidGuard.conf
redirect_children 20
cache_effective_user squid
cache_effective_group squid
##############################
#
# http_access deny all
#
#Recommended minimum configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access allow localnet
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
# And finally deny all other access to this proxy
http_access deny all
#Allow ICP queries from everyone
icp_access allow all
hierarchy_stoplist cgi-bin ?
#####################
#acl net src x.x.x.x/20 1x.x.x.x22
#acl SSL_ports port 443
#3acl Safe_ports port 80 # http
#acl Safe_ports port 21 # ftp
#acl Safe_ports port 443 # https
#acl Safe_ports port 70 # gopher
#acl Safe_ports port 210 # wais
#acl Safe_ports port 1025-65535 # unregistered ports
#acl Safe_ports port 280 # http-mgmt
#acl Safe_ports port 488 # gss-http
#acl Safe_ports port 591 # filemaker
#acl Safe_ports port 777 # multiling http
#acl CONNECT method CONNECT
#acl NOCACHE dstdomain wafa.ps
#acl NOCACHE dstdomain jepharm.ps
#acl NOCACHE dstdomain mohe.ps
#acl NOCACHE dstdomain paldf.net
#acl NOCACHE dstdomain hoho.ps
#no_cache deny NOCACHE
access_log /var/log/squid/access.log
#http_access allow src
#http_access deny manager
#http_access deny !Safe_ports
#http_access deny CONNECT !SSL_ports
#http_access allow localhost
#http_access allow net
#http_access deny all
max_filedesc 4096
cache_dir ufs /cache1 200000 32 256
#cache_dir null /ert
cache_mem 30 MB
access_log none
cache_store_log none
http_port 127.0.0.1:3128
http_port 3128
http_port 3129 tproxy
# --BEGIN-- videocache config for squid
########### Performance Related Config:
hierarchy_stoplist cgi-bin ?
forwarded_for off
half_closed_clients off
#persistent_request_timeout 2 minutes
#max_filedescriptors 65536
#max_open_disk_fds 65536
relaxed_header_parser on
reload_into_ims on
quick_abort_min 0 KB
quick_abort_max 0 KB
client_lifetime 15 minutes
read_timeout 5 minutes
request_timeout 1 minutes
ie_refresh on
vary_ignore_expire on
maximum_object_size_in_memory 64 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
ipcache_size 2048
ipcache_low 98
ipcache_high 99
memory_pools off
pipeline_prefetch on
httpd_suppress_version_string on
server_persistent_connections on
client_persistent_connections on
pconn_timeout 2 minutes
persistent_request_timeout 1 minute
########### Cache Config:
cache_swap_low 90
cache_swap_high 95
cache_replacement_policy heap LFUDA
#request_header_max_size 2048 KB
minimum_object_size 0
maximum_object_size 135128 kB
negative_ttl 0 seconds
negative_dns_ttl 1 second
#### saleh config
via off
visible_hostname squid
#memory_cache_shared off
########### WCCP2 Config:
wccp2_router x.x.x.x
#wccp2_router x.x.x.x
wccp_version 2
wccp2_forwarding_method 2
wccp2_return_method 2
#wccp2_assignment_method mask
wccp2_service dynamic 80
wccp2_service_info 80 protocol=tcp flags=src_ip_hash priority=240 ports=80
wccp2_service dynamic 90
wccp2_service_info 90 protocol=tcp flags=dst_ip_hash,ports_source
priority=240 ports=80
# TUNING CACHE PROXY
# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200
override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache ignore-auth ignore-private
refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 50% 43200
override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache ignore-auth
#sound, video multimedia
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 50% 43200
override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire
override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
ignore-private
# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080
90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 90% 43200 override-expire
ignore-no-cache ignore-auth
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 90% 43200 override-expire
ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 90% 43200 override-expire
ignore-no-cache ignore-auth
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 90% 43200 override-expire
ignore-no-cache ignore-auth
# refresh pattern for specific sites #
refresh_pattern ^http://*.blogspot.com/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.wordpress.*/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.kaskus.*/.* 720 90% 28800 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://www.kaskus.com/.* 720 100% 28800 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detik.*/.* 720 50% 2880 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detiknews.*/*.* 720 50% 2880 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.friendster.com/.* 720 90% 10080 override-expire
override-lastmod ignore-no-cache ignore-auth
refresh_pattern ^http://*.facebook.*/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://apps.facebook.com/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.*/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.zynga.*/.* 720 90% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 90% 10080
override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.google.*/.* 720 80% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.aljazeera.net/.* 720 80% 10080 override-expire
override-lastmod reload-into-ims ignore-no-cache ignore-auth
#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
==================
[root@squid /]# mount
/dev/sda1 on / type ext4 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
/dev/sdb on /cache1 type ext4
(rw,noatime,barrier=0,data=writeback,commit=100)
[root@squid /]# suqid -v
-bash: suqid: command not found
[root@squid /]# suqid -^C
[root@squid /]# squid -v
Squid Cache: Version 3.1.10
configure options: '--build=i386-redhat-linux-gnu'
'--host=i386-redhat-linux-gnu' '--target=i686-redhat-linux-gnu'
'--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin'
'--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share'
'--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec'
'--sharedstatedir=/var/lib' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--exec_prefix=/usr'
'--libexecdir=/usr/lib/squid' '--localstatedir=/var'
'--datadir=/usr/share/squid' '--sysconfdir=/etc/squid'
'--with-logdir=$(localstatedir)/log/squid'
'--with-pidfile=$(localstatedir)/run/squid.pid'
'--disable-dependency-tracking' '--enable-arp-acl'
'--enable-follow-x-forwarded-for'
'--enable-auth=basic,digest,ntlm,negotiate'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,POP3,squid_radius_auth'
'--enable-ntlm-auth-helpers=smb_lm,no_check,fakeauth'
'--enable-digest-auth-helpers=password,ldap,eDirectory'
'--enable-negotiate-auth-helpers=squid_kerb_auth'
'--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group'
'--enable-cache-digests' '--enable-cachemgr-hostname=localhost'
'--enable-delay-pools' '--enable-epoll' '--enable-icap-client'
'--enable-ident-lookups' '--with-large-files' '--enable-linux-netfilter'
'--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp'
'--enable-ssl' '--enable-storeio=aufs,diskd,ufs' '--enable-useragent-log'
'--enable-wccpv2' '--enable-esi' '--with-aio' '--with-default-user=squid'
'--with-filedescriptors=16384' '--with-dl' '--with-openssl'
'--with-pthreads' 'build_alias=i386-redhat-linux-gnu'
'host_alias=i386-redhat-linux-gnu' 'target_alias=i686-redhat-linux-gnu'
'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom
-fasynchronous-unwind-tables -fpie' 'LDFLAGS=-pie' 'CXXFLAGS=-O2 -g -pipe
-Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
--param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom
-fasynchronous-unwind-tables -fpie'
--with-squid=/builddir/build/BUILD/squid-3.1.10
[root@squid /]#
wish to help me in optimizing the suqid to my hardware .
regards
</quote>
hi ,
thanks Amos ,
but you told me that i need libcap2-dev or libcap-dev which is debian
propritary !
and im using centos 6.3 .
how to use squid 3.3.x on centos ??!!!
i tried to compile 3.3.x but i have an error and u told me i need
ibcap2-dev or libcap-dev !
should i migrate to debian to use squid 3.3 ??
with my best regards
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/slow-browsing-in-centos-6-3-with-squid-3-tp4658635p4658701.html
Sent from the Squid - Users mailing list archive at Nabble.com.
