+ Post New Thread
Results 1 to 10 of 10
*nix Thread, YA Squid Thread - tweaking for performance in Technical; I have squid set up and authenticating via ldap, apart from a few basic things (acls, auth and a couple ...
  1. #1


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,677
    Thank Post
    279
    Thanked 782 Times in 609 Posts
    Rep Power
    224

    YA Squid Thread - tweaking for performance

    I have squid set up and authenticating via ldap, apart from a few basic things (acls, auth and a couple of url rewrites) the config file is pretty vanilla.

    Would anyone mind sharing a mature squid.conf? As complex as you like. I'm interested in getting the best use of available memory more than anything.

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    225

    Re: YA Squid Thread - tweaking for performance


  3. #3


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,677
    Thank Post
    279
    Thanked 782 Times in 609 Posts
    Rep Power
    224

    Re: YA Squid Thread - tweaking for performance

    Cheers Geoff

    Second question

    I'm building Dansguardian [2.9.8.2] and enabling clamav and clamd at compile time. Unfortunately Clamav 0.90.1 (0.90 onwards) breaks the av plugin. Make errors out on line 275 of sourcedir/src/contentscanners/clamav.cpp complaining
    Code:
    contentscanners/clamav.cpp: In member function ‘virtual int clamavinstance::init(void*)’:
    contentscanners/clamav.cpp:275: error: ‘cl_loaddbdir’ was not declared in this scope
    A bit of googling* reveals the beginnings of a possible fix - has anyone else run into this?

    *http://www.mail-archive.com/debian-b...msg308977.html

    edit: code tags

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    225

    Re: YA Squid Thread - tweaking for performance

    I'm not using Dansguardian to do AV scanning. I'm relying on the desktop AV for that.

  5. #5


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,485
    Thank Post
    867
    Thanked 854 Times in 675 Posts
    Rep Power
    197

    Re: YA Squid Thread - tweaking for performance

    We are using Clam in the commercial filter - and thats running the latest DG, ergo, it must be possible. Wether we are scanning out of DG or clam I dunno - I will see if I can remember to ask next time I collar one of the devs. Failing that, ask on the mailing list - Phil reads that, and if anyone knows the answer, he will

  6. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,677
    Thank Post
    279
    Thanked 782 Times in 609 Posts
    Rep Power
    224

    Re: YA Squid Thread - tweaking for performance

    @Geoff
    I like redundancy and 2 sets of av defs.

    Asked on the list and got a reply from Phil - the fix will be in the next beta and clamdscan will suffice for now.

    The clamav plugin is currently incompatible with ClamAV 0.90, as the API
    has changed relative to the older 0.88 releases. I intend to fix this in
    the next beta, but for now, use the clamdscan plugin instead - this
    talks to ClamD running as an external process, so library
    incompatibilities aren't an issue. AFAIK this should work fine.

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    225

    Re: YA Squid Thread - tweaking for performance

    Using clamdscan is a better solution anyway. It scales better.

  8. #8


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,485
    Thank Post
    867
    Thanked 854 Times in 675 Posts
    Rep Power
    197

    Re: YA Squid Thread - tweaking for performance

    @Geoff - any particular reason for that? I know one advantage of the dg variant is "AV progress bars" - not sure why you believe it will scale less well...

  9. #9


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,485
    Thank Post
    867
    Thanked 854 Times in 675 Posts
    Rep Power
    197

    Re: YA Squid Thread - tweaking for performance

    Also... I should go beat Phil for replying on dg list in work hours... oh wait.. i'm posting on edugeek. Sshh, dont tell t'boss like

  10. #10

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    225

    Re: YA Squid Thread - tweaking for performance

    When you use clamscan you invoke a new copy of clamscan for each thing you scan. When you use clamdscan, you communicate with clamd via the UNIX pipe and tell one copy of clamd to scan several things.

    With many concurrent users, clamscan tends to eat a lot of processing time/memory. Clamdscan does not.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 19
    Last Post: 15th October 2008, 02:44 PM
  2. Replies: 1
    Last Post: 2nd August 2007, 08:27 PM
  3. The Post Your Desktop Thread
    By mrforgetful in forum General Chat
    Replies: 59
    Last Post: 2nd July 2007, 10:25 AM
  4. BSF/PFI thread on ICTTechnician.com
    By GrumbleDook in forum General Chat
    Replies: 12
    Last Post: 26th April 2006, 01:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •