On Fri 1.Jul'16 at 21:42:23 +1200, Amos Jeffries wrote: > On 1/07/2016 8:39 p.m., C. L. Martinez wrote: > > Hi all, > > > > I am seeing an abnormal behavior in my squid host (OpenBSD). From time to time, CPU goes to 99%: > > > > load averages: 2.20, 2.14, 2.09 > > 33 processes: 1 running, 31 idle, 1 on processor > > CPU states: 79.2% user, 0.0% nice, 0.1% system, 0.0% interrupt, 20.6% idle > > Memory: Real: 91M/263M act/tot Free: 1711M Cache: 118M Swap: 0K/2055M > > > > PID USERNAME PRI NICE SIZE RES STATE WAIT TIME CPU COMMAND > > 13337 _squid 64 0 72M 71M run - 105:58 99.02% squid > > > > This only occurs with https sites ... maybe is a missconfiguration with ssl-bump options? Actually my ssl-bump config is: > > > > acl step1 at_step SslBump1 > > ssl_bump peek step1 > > ssl_bump bump !NoSSLIntercept > > ssl_bump splice all > > > > Exists some "safer" ssl-bump config to avoid this behavior? > > What exact version of Squid are you using? > > Amos > I am using squid version installed from M:tier packages for OpenBSD: Squid Cache: Version 3.5.17 Service Name: squid configure options: '--disable-strict-error-checking' '--disable-arch-native' '--datadir=/usr/local/share/squid' '--libexecdir=/usr/local/libexec/squid' '--disable-loadable-modules' '--enable-arp-acl' '--enable-auth' '--enable-delay-pools' '--enable-follow-x-forwarded-for' '--enable-forw-via-db' '--enable-http-violations' '--enable-icap-client' '--enable-ipv6' '--enable-referer-log' '--enable-removal-policies=lru heap' '--enable-ssl' '--enable-ssl-crtd' '--with-openssl' '--enable-storeio=aufs ufs diskd' '--with-default-user=_squid' '--with-filedescriptors=8192' '--with-krb5-config=no' '--with-pidfile=/var/run/squid.pid' '--with-pthreads' '--with-swapdir=/var/squid/cache' '--disable-pf-transparent' '--enable-ipfw-transparent' '--enable-external-acl-helpers=LDAP_group SQL_session file_userip time_quota unix_group wbinfo_group LDAP_group eDirectory_userip' '--prefix=/usr/local' '--sysconfdir=/etc/squid' '--mandir=/usr/local/man' '--infodir=/usr/local/info' '--localstatedir=/var/squid' '--disable-silent-rules' '--disable-gtk-doc' 'CC=cc' 'CFLAGS=-O2 -pipe' 'LDFLAGS=-L/usr/local/lib' 'CPPFLAGS=-I/usr/local/include' 'CXX=c++' 'CXXFLAGS=-O2 -pipe' -- Greetings, C. L. Martinez _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
