On 19/05/17 04:33, erdosain9 wrote:
Negotiate Authenticator Statistics:
program: /lib64/squid/negotiate_kerberos_auth
number active: 35 of 35 (0 shutting down)
requests sent: 39928
replies received: 39893
queue length: 40
avg service time: 854 msec
Two things to take note of with these reports.
First is the queue length vs how many helpers are running. Each helper
running has one row in the table. Your initial report with 20 helpers
had no queue, and showed that all 20 helpers had been needed at one
point, but the top-5 only needed a few times.
IMO that is not overkill, but close to what you actually need. In a
perfect world there should be some helpers not needed at all, but peak
traffic does happen.
Second thing to notice is the "avg service time". In that same initial
report it showed avg was 9ms - that is good (might be better if you tune
the auth backend for speed, but a few ms is okay). These later reports
when you were experimenting it fluctuates between 300ms and 850ms. That
can be kind of bad - if it remains high with just normal traffic that is
something to fix. That said it may have been an artifact from the delay
caused by reconfiguring and restarting all the helpers, which is
supported by the low number of requests processed by the heaviest used
helper (~500).
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
