-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/10/2014 7:27 p.m., Victor Sudakov wrote: > Victor Sudakov wrote: >>>> >>>>> And about the basic issues that you were having with >>>>> performance, does it help to run Kerberos instead of NTLM >>>>> (it should...)? >>>> >>>> I have even moved squid to a new virtual machine (FreeBSD >>>> 9.3-RELEASE under VMWare, 1 GB RAM) and performance still >>>> sucks royally. > > I don't know what's happening with squid but this kind of CPU > consumption is just not normal: Well, it both is and it isn't. Squid *will* use the CPU hardware right up too the 100% limit if it has any need to that is normal. Needing to for long periods of time is not particularly normal ... except under conditions where the traffic load is too high for the server hardware to cope with. I did see a scenario with behaviour exactly like this at a client some time back. After detailed analysis it turned out that their NTLM helper had been so slow that clients traffic spent more time waiting for next auth action than processing requests. But when they moved to the higher performance Kerberos and a simpler proxy configuration the client traffic throughput increased to a req/sec rate faster than the server could cope (3x previous rate). It thus was bottlenecked by 100% CPU speed limit rather than by NTLM delays. So, "normal" depends on what exactly is the cause of the behaviour. What req/sec traffic rates are you seeing on what you consider a "normal" / older proxy compared to this one? Also, what are the heleprs stats looking like in the cachemgr report? Amos -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUSNdUAAoJELJo5wb/XPRj57sIALpsmoKBfywN6iToL1ZfODbL pXDGxm0dcMXBlLB3gadEjMLvA5LlgY9xyFl41UHGjYhvg93RAsoLQmCNHZUgRtT8 fNqyVgGV5CnbPZQTJwWMjHFiGOR3/p8VFbH67nXt5xB7WZdT8UhWKkVxK3kNm2P9 BopiIYKeXDqgTKGw2OzPw/Xe8ieLOr/avxAq1cQkFhGw3B0mj+f6S9DlNZ6wSQR0 tIsshL2hHxt9jDnYVo1A8Gg6khYjjwZmRNFs5ixzsftMzBKR2QKAv09q/BKTTqID T1EFFU5MuHanoxRzURJ0lh3UPeSj2sook5qKUyHQ/gyUc7yJtO+E3IdKcC/yDDM= =/yVu -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
