Hello!
It's looks like I have memory leak on squid with peek and splice https traffic.
I use squid 3.5.9 (try 3.5.8 and 3.5.7 also). Openssl and libresll both tried.
CentOs 7. Traffic redirecting transparently by wccp.
Server: 8 cores, 64GB RAM. Approx 600 clients with 150 requests per second.
Squid consume RAM without limits. Around 10MB in a second. (Screenshot from zabbix: http://snag.gy/HQmJI.jpg)
Configruration:
#Disable cache
cache deny all
cache_mem 0 GB
memory_pools on
memory_pools_limit 0 MB
#Multi core
workers 6
https_port squid_ip:3129 intercept ssl-bump \
key=/etc/squid/certs/squid.pem \
cert=/etc/squid/certs/squid.pem \
generate-host-certificates=off \
dynamic_cert_mem_cache_size=0MB \
sslflags=NO_DEFAULT_CA
http_port squid_ip:3128
acl block_url ssl::server_name "/etc/squid/https_block.txt"
#Step settings
acl step1 at_step SslBump1
acl step2 at_step SslBump2
acl step3 at_step SslBump3
ssl_bump peek step1 all
ssl_bump peek step2 all
ssl_bump terminate step3 block_url
ssl_bump splice step3 all
http_access allow all
Somebody else had the same problem?
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users