Hi, I have installed squid 3.5.24 and have enable option '--enable-ssl' '--enable-ssl-crtd' and '--with-openssl’. Im using debian 8.7. Im want to use this squid to filter http & https traffic. I have no problem filtering http/https when using it with <10 users. If i connect it to 200+ users, i will get lots of ERR_CONNECT_FAIL, TAG_NONE/503 & TCP_MISS/503 in less than 10 minutes. Need some advice. Thank you. My squid.conf —————— max_filedesc 65535 dns_v4_first on request_timeout 5 minutes acl localnet src 10.0.0.0/8 # RFC1918 possible internal network #acl localnet src 172.16.0.0/12 # RFC1918 possible internal network #acl localnet src 192.168.0.0/16 # RFC1918 possible internal network acl localnet src fc00::/7 # RFC 4193 local private network range acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines #acl SSL_ports port 443 acl SSL_ports port 443 563 1863 5190 5222 5050 6667 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access deny !Safe_ports # Deny CONNECT to other than secure SSL ports #http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access allow localnet manager http_access deny manager #http_access deny to_localhost http_access allow localnet http_access allow localhost http_access deny all http_port 0.0.0.0:3128 intercept http_port 0.0.0.0:3130 https_port 0.0.0.0:3129 intercept ssl-bump connection-auth=off cert=/etc/squid/squidCA.pem cache_mem 512 MB always_direct allow all #sslproxy_cert_error allow all sslproxy_flags DONT_VERIFY_PEER acl blocked ssl::server_name "/etc/squid/tah.txt" acl step1 at_step SslBump1 ssl_bump peek step1 ssl_bump terminate blocked ssl_bump splice all sslcrtd_program /usr/lib/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB cache_dir ufs /var/spool/squid 15360 16 256 cache_swap_low 87 cache_swap_high 90 coredump_dir /var/spool/squid refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 —————————— My cachemgr:info - - - - - - - - - - - - - - Squid Object Cache: Version 3.5.24 Build Info: Service Name: squid Start Time: Thu, 27 Apr 2017 09:25:20 GMT Current Time: Thu, 27 Apr 2017 09:43:30 GMT Connection information for squid: Number of clients accessing cache: 228 Number of HTTP requests received: 15757 Number of ICP messages received: 0 Number of ICP messages sent: 0 Number of queued ICP replies: 0 Number of HTCP messages received: 0 Number of HTCP messages sent: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 866.7 Average ICP messages per minute since start: 0.0 Select loop called: 292181 times, 3.733 ms avg Cache information for squid: Hits as % of all requests: 5min: 0.1%, 60min: 0.1% Hits as % of bytes sent: 5min: 100.0%, 60min: 99.8% Memory hits as % of hit requests: 5min: 52.9%, 60min: 55.6% Disk hits as % of hit requests: 5min: 47.1%, 60min: 44.4% Storage Swap size: 13683904 KB Storage Swap capacity: 87.0% used, 13.0% free Storage Mem size: 2104 KB Storage Mem capacity: 1.6% used, 98.4% free Mean Object Size: 15.44 KB Requests given to unlinkd: 0 Median Service Times (seconds) 5 min 60 min: HTTP Requests (All): 57.44813 57.44813 Cache Misses: 28.47649 10.20961 Cache Hits: 0.00000 0.00102 Near Hits: 0.00000 0.00000 Not-Modified Replies: 0.00000 0.00000 DNS Lookups: 0.00860 0.00860 ICP Queries: 0.00000 0.00000 Resource usage for squid: UP Time: 1090.832 seconds CPU Time: 128.728 seconds CPU Usage: 11.80% CPU Usage, 5 minute avg: 26.31% CPU Usage, 60 minute avg: 11.76% Maximum Resident Size: 3929760 KB Page faults with physical i/o: 85 Memory accounted for: Total accounted: 183695 KB memPoolAlloc calls: 3003099 memPoolFree calls: 3027675 File descriptor usage for squid: Maximum number of file descriptors: 65535 Largest file desc currently in use: 2691 Number of file desc currently in use: 2405 Files queued for open: 0 Available number of file descriptors: 63130 Reserved number of file descriptors: 100 Store Disk files open: 0 Internal Data Structures: 887622 StoreEntries 1623 StoreEntries with MemObjects 55 Hot Object Cache Items 886002 on-disk objects -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-error-ERR-CONNECT-FAIL-TAG-NONE-503-TCP-MISS-503-tp4682334.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
