Dear All, I am going to build squid to supports 1 Gbps traffic on Centos 6 x64 bits. I have done some studying on getting squid to support this high load traffic but I still not clear on some points below 1. Should I use SMP feature with 6 workers support and AUFS file system? 2. Or single squid process provide better performance and reliable against SMP? Please find following configuration on my squid server, kindly advice me on idea for cache_dir per squid process, is it good to choose this idea . Beside, with this configuration, I am having issues when opening http://microsoft.com, sometimes it gives me error message "Your current User-Agent string appears to be from an automated process, if this is incorrect, please click this link:United States English Microsoft Homepage" My squid compiled option: /usr/local/squid/sbin/squid -v Squid Cache: Version 3.3.3 configure options: '--sysconfdir=/etc/squid' '--enable-follow-x-forwarded-for' '--enable-snmp' '--enable-linux-netfilter' '--enable-http-violations' '--enable-delay-pools' '--enable-storeio=diskd,aufs,ufs' '--with-large-files' '--enable-removal-policies=lru,heap' '--enable-ltdl-convenience' '--with-logdir=/var/log/squid' '--enable-wccpv2' '--with-default-user=squid' '--enable-log-daemon-helpers' '--enable-build-info' '--enable-url-rewrite-helpers' My Squid.conf ####################################################### # Server Characteristics ####################################################### ## We don't use this port in this fully transparent mode http_port 3128 http_port 3129 tproxy disable-pmtu-discovery=always #icp_port 3130 cache_mgr cache@xxxxxxxxxxx visible_hostname cache2.example.com #--Leave coredumps in the first cache dir coredump_dir /usr/local/squid/var/cache cache_effective_user squid cache_effective_group squid ####################################################### ## Performance related config ####################################################### max_filedescriptors 65536 max_open_disk_fds 65536 dns_v4_first on negative_ttl 3 minutes positive_dns_ttl 15 hours negative_dns_ttl 30 seconds ## Setting the size of DNS cache ipcache_size 15000 ipcache_low 95 ipcache_high 97 fqdncache_size 10000 cache_mem 2000 MB memory_pools on ## Cache Object Size limits minimum_object_size 0 KB maximum_object_size 700 MB maximum_object_size_in_memory 1024 KB #--Cache Replacement Policies memory_replacement_policy lru cache_replacement_policy heap LFUDA #--Setting Limits on object replacement cache_swap_low 96 cache_swap_high 97 ## Spoofing enable via off forwarded_for delete follow_x_forwarded_for deny all ## Remove X-Cache replied from Server reply_header_access X-Cache deny all ############################################################## ## Squid Logging ############################################################## ## let access_log_daemon handle IO access_log none cache_log /var/log/squid/cache.log cache_store_log none logfile_rotate 30 ############################################################## ## Refresh pattern ############################################################## ## Microsoft refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims refresh_pattern -i my.windowsupdate.website.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims ##images facebook refresh_pattern ((facebook.com)|(173.252.110.27)).*\.(jpg|png|gif) 10800 80% 10800 ignore-reload override-expire ignore-no-store refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|mp3) 10800 80% 10800 ignore-reload override-expire ignore-no-store refresh_pattern static\.ak\.fbcdn\.net*\.(jpg|gif|png) 10800 80% 10800 ignore-reload override-expire ignore-no-store refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 10800 80% 10800 ignore-reload override-expire ignore-no-store ## ANTI VIRUS refresh_pattern guru.avg.com/.*\.(bin) 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims refresh_pattern (avgate|avira).*(idx|gz)$ 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims refresh_pattern kaspersky.*\.avc$ 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims refresh_pattern kaspersky 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims refresh_pattern update.nai.com/.*\.(gem|zip|mcs) 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims refresh_pattern ^http:\/\/liveupdate.symantecliveupdate.com.*\(zip) 10800 80% 10800 ignore-no-store ignore-reload reload-into-ims ##Musics refresh_pattern -i \.(mp2|mp3|mid|midi|mp[234]|wav|ram|ra|rm|au|3gp|m4r|m4a)(\?.*|$) 10080 90% 43200 override-expire ignore-reload reload-into-ims ignore-private ## Videos refresh_pattern -i \.(mpg|mpeg|mp4|m4v|mov|avi|asf|wmv|wma|dat|flv|swf)(\?.*|$) 10080 90% 43200 override-expire ignore-reload reload-into-ims ignore-private ## Pictures refresh_pattern -i \.(gif|png|jpg|jpeg|ico)(\?.*|$) 3600 90% 43200 override-expire ignore-no-store ignore-private ## Musics refresh_pattern -i \.(mp[34g]|swf|wav)$ 43200 90% 432000 ##--Enable SMP -- Multiple cpus -- (enable) workers 3 cpu_affinity_map process_numbers=1,2,3,4 cores=1,3,5,7 if ${process_number}=1 cache_dir aufs /cache1/squid/${process_number} 170000 16 256 cache_dir aufs /cache2/squid/${process_number} 170000 16 256 cache_dir aufs /cache3/squid/${process_number} 170000 16 256 endif if ${process_number}=2 cache_dir aufs /cache4/squid/${process_number} 170000 16 256 cache_dir aufs /cache5/squid/${process_number} 170000 16 256 endif if ${process_number}=3 cache_dir aufs /cache6/squid/${process_number} 170000 16 256 cache_dir aufs /cache7/squid/${process_number} 170000 16 256 cache_dir aufs /cache8/squid/${process_number} 170000 16 256 endif ## Custom Error err_page_stylesheet /etc/squid/errorpage.css -- Regards, Vantha Tell: (855) 89896589 email: sokvantha@xxxxxxxxx
