Hello Roberto, When Squid is "slow" like users complain first thing to check is always the DNS settings. Also sometimes switching to "IPv4 DNS resolve first" helps. Look for "squidclient mgr:idns" and "dns_v4_first on" on Squid wiki. Hope others have better answers. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com/ -----Original Message----- From: squid-users [mailto:squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of Roberto Carna Sent: Monday, April 9, 2018 9:59 PM To: Antony Stone <Antony.Stone@xxxxxxxxxxxxxxxxxxxx> Cc: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Squid is very slow after moving to production environment Dear Antony, both proxies are virtual machines in the same DMZ....they use the same DNS, the same firewall, the same Internet link, the same IP but different MAC Address. Firewall rules are the same too. The new proxy is slow because when users try to go to a web page, it is very slow in download the content page.....about 1 minute to do it. The Dansguardian configuration is te same too. I've past my configuration in the previous mail. Thanks a lot !!! 2018-04-09 16:36 GMT-03:00 Antony Stone <Antony.Stone@xxxxxxxxxxxxxxxxxxxx>: > On Monday 09 April 2018 at 21:00:21, Roberto Carna wrote: > >> Dear, I have implemented a server with Dansguardian 10.2.1.1 and >> Squid 3.5.23-5. >> >> I've tested it with 5 users for along 2 months and always it worked OK. >> >> But today when a moved it to production environment, it worked but >> very very slow. > > 1. What is "very very slow"? What difference are you noticing: > > - limited bandwidth for downloads? > > - high latency for reaching new URLs? > > - reduced ability to handle new requests? > > Basically, how are you measuring the difference between test > performance and production performance? > > 2. Please explain your networking setups for the test and production > environments: > > - do they share the same Internet connection? > > - do they both go through the same firewall? > > - do they both use the same DNS server, or have their own DNS > servers, or what? > > - are the same traffic rules implemented for each procy on the firewall/s? > > - do you use any form of user authentication, and if so, please give > details > > 3. What volume of requests per hour / minute / day / whatever is > convenient did you have in the test environment, and what volume do > you have now in the production environment? > >> I've just changed hostname and IP, in order to match with the old >> proxy server and flush de ARP table of the firewall (because ths >> server has the same IP but different MAC Address)....and no more. And >> let me say that in production environment, there are 30-40 users at >> all, it's not a big number of users at all. >> >> Where can I start to see in order to analyze the problem? Any idea to >> help me? > > > Regards, > > > Antony. > > -- > I thought I had type A blood, but it turned out to be a typo. > > Please reply to the list; > please *don't* CC me. > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
