Hello,
Amos, Alex, thanks for the information!
> What is your Squid version?
The first one:
squid -v
Squid Cache: Version 6.13
Service Name: squid
This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--disable-dependency-tracking' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake' '--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-icmp' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl' '--disable-arch-native' '--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' --enable-ltdl-convenience
Squid Cache: Version 6.13
Service Name: squid
This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--disable-dependency-tracking' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake' '--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-icmp' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl' '--disable-arch-native' '--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' --enable-ltdl-convenience
The second one:
squid.user -v
Squid Cache: Version 6.10
Service Name: squid
This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--prefix=/data/squid.user' '--exec-prefix=/data/squid.user' '--datadir=/data/squid.user/share' '--sbindir=/data/squid.user/usr/sbin' '--sysconfdir=/etc/squid.user' '--libexecdir=/data/squid.user/usr/lib/squid' '--localstatedir=/data/squid.user/var' '--with-logdir=/data/squid.user/var/log/squid' '--with-pidfile=/data/squid.user/var/run/squid.pid' '--mandir=/data/squid.user/share/man' '--bindir=/data/squid.user/usr/bin' '--disable-arch-native' '--disable-dependency-tracking' '--disable-maintainer-mode' '--disable-option-checking' '--disable-silent-rules' '--disable-translation' '--disable-strict-error-checking' '--enable-arp-acl' '--enable-async-io=8' '--enable-auth' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,SMB_LM' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=SMB_LM,fake' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-carp' '--enable-delay-pools' '--enable-ecap' '--enable-epoll' '--enable-esi' '--enable-eui' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,SQL_session,unix_group,wbinfo_group' '--enable-follow-x-forwarded-for' '--enable-htcp' '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-inline' '--enable-linux-netfilter' '--enable-removal-policies=lru,heap' '--enable-security-cert-validators=fake' '--enable-storeid-rewrite-helpers=file' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-url-rewrite-helpers=fake' '--enable-zph-qos' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-snmp' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-truncate' '--enable-useragent-log' '--enable-wccpv2' '--with-aio' '--with-build-environment=default' '--with-default-user=squid' '--with-large-files' '--disable-ipv6' '--with-openssl' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
Squid Cache: Version 6.10
Service Name: squid
This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--prefix=/data/squid.user' '--exec-prefix=/data/squid.user' '--datadir=/data/squid.user/share' '--sbindir=/data/squid.user/usr/sbin' '--sysconfdir=/etc/squid.user' '--libexecdir=/data/squid.user/usr/lib/squid' '--localstatedir=/data/squid.user/var' '--with-logdir=/data/squid.user/var/log/squid' '--with-pidfile=/data/squid.user/var/run/squid.pid' '--mandir=/data/squid.user/share/man' '--bindir=/data/squid.user/usr/bin' '--disable-arch-native' '--disable-dependency-tracking' '--disable-maintainer-mode' '--disable-option-checking' '--disable-silent-rules' '--disable-translation' '--disable-strict-error-checking' '--enable-arp-acl' '--enable-async-io=8' '--enable-auth' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,SMB_LM' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=SMB_LM,fake' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-carp' '--enable-delay-pools' '--enable-ecap' '--enable-epoll' '--enable-esi' '--enable-eui' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,SQL_session,unix_group,wbinfo_group' '--enable-follow-x-forwarded-for' '--enable-htcp' '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-inline' '--enable-linux-netfilter' '--enable-removal-policies=lru,heap' '--enable-security-cert-validators=fake' '--enable-storeid-rewrite-helpers=file' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-url-rewrite-helpers=fake' '--enable-zph-qos' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-snmp' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-truncate' '--enable-useragent-log' '--enable-wccpv2' '--with-aio' '--with-build-environment=default' '--with-default-user=squid' '--with-large-files' '--disable-ipv6' '--with-openssl' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
> Can you tell how your Squids name their
> shared memory segment "files"? For example, on some Linux OSes,
> shared memory segment "files"? For example, on some Linux OSes,
> those segments could be in /var/run/shm/
> with names like squid-tr_map_anchors.shm and squid-tr_spaces.shm.
Alex, I can not find these files.
There is no the /var/run/shm/ directory in my host.
I tried running the "locate .shm" command, but it did not find anything.
Moreover, I do not see any squid's shared memory segments when I run the "ipcs -m" command.
There are some files in /dev/shm, which I found using lsof the main squid's pid:
# the first instance
lsof -p 1318 | grep shm
squid 1318 root DEL REG 0,23 30205 /dev/shm/squid-cf__queues.shm
squid 1318 root DEL REG 0,23 30206 /dev/shm/squid-cf__readers.shm
squid 1318 root DEL REG 0,23 30204 /dev/shm/squid-cf__metadata.shm
squid 1318 root 8u REG 0,23 8 30204 /dev/shm/squid-cf__metadata.shm (deleted)
squid 1318 root 9u REG 0,23 525572 30205 /dev/shm/squid-cf__queues.shm (deleted)
squid 1318 root 10u REG 0,23 136 30206 /dev/shm/squid-cf__readers.shm (deleted)
squid 1318 root DEL REG 0,23 30205 /dev/shm/squid-cf__queues.shm
squid 1318 root DEL REG 0,23 30206 /dev/shm/squid-cf__readers.shm
squid 1318 root DEL REG 0,23 30204 /dev/shm/squid-cf__metadata.shm
squid 1318 root 8u REG 0,23 8 30204 /dev/shm/squid-cf__metadata.shm (deleted)
squid 1318 root 9u REG 0,23 525572 30205 /dev/shm/squid-cf__queues.shm (deleted)
squid 1318 root 10u REG 0,23 136 30206 /dev/shm/squid-cf__readers.shm (deleted)
# the second instance
lsof -p 1514 | grep shm
squid.use 1514 root mem REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm
squid.use 1514 root mem REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm
squid.use 1514 root mem REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm
squid.use 1514 root mem REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm
squid.use 1514 root 6u REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm
squid.use 1514 root 7u REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm
squid.use 1514 root 8u REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm
squid.use 1514 root 9u REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm
squid.use 1514 root mem REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm
squid.use 1514 root mem REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm
squid.use 1514 root mem REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm
squid.use 1514 root mem REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm
squid.use 1514 root 6u REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm
squid.use 1514 root 7u REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm
squid.use 1514 root 8u REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm
squid.use 1514 root 9u REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm
Maybe I'm not experiencing any difficulties because I have caching turned off on both instances?
Kind regards,
Ankor.
чт, 6 мар. 2025 г. в 17:11, Alex Rousskov <rousskov@xxxxxxxxxxxxxxxxxxxxxxx>:
On 2025-03-06 08:59, Amos Jeffries wrote:
> On 6/03/25 19:17, Andrey K wrote:
>> Hello,
>>
>> I have a similar configuration: two SMP squids running on the same OEL
>> host.
>>
>> They were built with different configurations: with different
>> installation path prefixes and different names of binary files: squid
>> and squid.user and they listen to different ports.
>> They are launched from two different services:squid.service and
>> squid.user.service with the service Type=forking:
>>
>> ExecStart=/usr/sbin/squid -sYC
>> ExecStart=/sbin/squid.user -f /etc/squid.user/squid.conf
>>
>> I have not experienced any troubles with this configuration yet.
>>
>> /> Please be aware that "squid -n ..." is a REQUIREMENT for running/
>> /multiple Squid instances on the same machine regardless of what features
>> are used./
>>
>> Could you please tell me if I should use the -n option in the
>> ExecStart strings?
>> The arguments of the options should be the service names?
>>
>> ExecStart=/usr/sbin/squid -sYC -n squid.service
>> ExecStart=/sbin/squid.user -f /etc/squid.user/squid.conf -n
>> squid.user.service
>>
> Yes you should. The different ./configure options has helped you avoid
> major issues, but some may still appear.
I agree. Moreover, I do not understand how your two SMP Squids could
work correctly without distinct service names because (on OEL) I would
expect them to share the same shared memory segments (which they must
not do to remain distinct instances).
What is your Squid version? Can you tell how your Squids name their
shared memory segment "files"? For example, on some Linux OSes, those
segments could be in /var/run/shm/ with names like
squid-tr_map_anchors.shm and squid-tr_spaces.shm.
Thank you,
Alex.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://lists.squid-cache.org/listinfo/squid-users
