Internet Related/Filtering/Firewall Thread, How slow is your Smoothwall? UTM or own hardware? in Technical; Also what are the top 10 sites for hits and bandwidth....
21st October 2013, 04:58 PM #16
Also what are the top 10 sites for hits and bandwidth.
21st October 2013, 05:18 PM #17
@tom_newton I believe we still have the same amount of computers/tablets/laptops around 1000 but there could be two load differences between now and two years ago. The first being that we now have a 100Mb leased internet line whereas before we had 30Mb so perhaps the demand for internet is instead of be held back by our external connection perhaps smoothwall is having troubles keeping up (I doubt this one is true) and the second being BYOD which as I'm sure you know has taken off. We only have around 50 BYOD "surfing" the internet at once but a lot of devices are automatically connecting to the wireless where smoothwall is the DHCP on this VLAN. In regards to dubious activity I hope not we have everything locked down quite tightly but I will certainly try and monitor activity more closely.
@twin--turbo we are quite a large school here 2800 users, 1000 devices easily and during peek times we do see 600 users accessing the internet be it for simple Google research or more bandwidth eating activities such as MyMaths the top 10 sites today are as follows:
I think it may be case of switching off BYOD for a couple of weeks see how many people it annoys and two how much faster all other traffic goes.
Thanks for all your help and suggestions everyone. As I have said I like Smoothwall and the amount of time I have put into it setting up all the different features and polices as well as learning the interface I don't really want to move away as I still think the functionality is the best in class but we do need to resolve the issue.
22nd October 2013, 09:13 AM #18
Try turning off the "sophos web protection" feature on your desktop AV - it looks like it is responsible for a *lot* of requests.
Can you do 2 things for me - confirm the processor you are running on, and run "top" on the commandline at peak time, and tell me how much CPU time squid is using.
I suspect the difference between now and a couple of years ago is the number of web requests needed to complete the same "job" - google has doubled in "weight" over just a few years, and the likes of BBC are considerably request-heavier too, with a lot of in page updates.
22nd October 2013, 10:30 AM #19
Wow that sophos one has quite a few hits...... also 2800 kids, fair enough I bet you've your hands full!!! Watching with interest where this ends up!
22nd October 2013, 11:29 AM #20
Will this be an upgrade or new install?
Originally Posted by tom_newton
22nd October 2013, 11:55 AM #21
Seems your not the only one that has problems with the Sophos requests. It appears to be related to the web protection feature.
Excessive DNS lookups from sophosxl.net - SophosTalk community
Perhaps its Sophos related?
22nd October 2013, 12:12 PM #22
What you think an AV program may becausing massive trouble with computer performance... Never heard that before LOL...
Originally Posted by Gaz
2 Thanks to twin--turbo:
Gaz (22nd October 2013), zag (23rd October 2013)
22nd October 2013, 12:16 PM #23
22nd October 2013, 03:43 PM #24
@tom_newton Thanks for your help I will try turning off Sophos web protection and see if that helps at all. The processor we have currently is a dual quad core Xeon running at 2.33MHz (Intel L5410) its not the newest thing in the world and your right the internet has changed a lot generally in the way it was used from two years ago so if we need to beef it up then that's what we will do. I guess the only concern is not ever being able to tie down exactly what is causing the big CPU loads yes dansguardian is running at 600% but that's all we know. Will run top tomorrow when busy to see what squid is doing but I can't ever remember it being up there in the top 3 CPU hogs but I will check and let you know.
23rd October 2013, 08:49 AM #25
I still have no clue why anyone uses 3rd party AV stuff. Its a complete con these days.
Originally Posted by twin--turbo
We use Microsoft forefront endpoint protection and it works almost invisibly on our systems.
23rd October 2013, 10:58 AM #26
@tom_newton this is the latest top from a busy period squid is in the top 3 but only 10% CPU is this ok I'm guessing? top.jpg
23rd October 2013, 11:44 AM #27
An upgrade. Yes. Clicky clicky, waity waity, ooh, done. Should be fun
Originally Posted by andyrite
23rd October 2013, 11:47 AM #28
That looks like a busy, but ultimately fairly healthy box, however the load averages tell a slightly different story - a load average of 10 with 2 quad cores is a mite high. What content modification rules have you got in place - they're the first place to look for reducing CPU load.
23rd October 2013, 11:48 AM #29
Oh, and if you wouldn't mind emailing me a copy of your config I may be able to get around to testing its performance...
Thanks to tom_newton from:
lmgtfy (23rd October 2013)
23rd October 2013, 12:19 PM #30
The only content modification rules we have in place is one for enforcing safesearch and the second just for students for the Youtube header for Youtube Education. I'll PM you now about the config file. Thanks
Originally Posted by tom_newton
By stevenlong1985 in forum How do you do....it?
Last Post: 11th February 2010, 02:02 PM
By JJonas in forum Budgets and Expenditure
Last Post: 8th January 2009, 01:33 PM
By pete in forum General Chat
Last Post: 15th October 2008, 03:42 PM
By AshF in forum General Chat
Last Post: 5th October 2007, 09:54 AM
By DavidB4910 in forum Wireless Networks
Last Post: 25th May 2007, 09:14 AM
Users Browsing this Thread
There are currently 2 users browsing this thread. (0 members and 2 guests)
Tags for this Thread