[squid-users] Peek And Splice memory leak

Александр Демченко exmodding at gmail.com
Fri Oct 2 12:47:20 UTC 2015


Hello!
It's looks like I have memory leak on squid with peek and splice https
traffic.
I use squid 3.5.9 (try 3.5.8 and 3.5.7 also). Openssl and libresll both
tried.
CentOs 7. Traffic redirecting transparently by wccp.
Server: 8 cores, 64GB RAM. Approx 600 clients with 150 requests per second.

Squid consume RAM without limits. Around 10MB in a second. (Screenshot from
zabbix: http://snag.gy/HQmJI.jpg)

Configruration:
#Disable cache
cache deny all
cache_mem 0 GB
memory_pools on
memory_pools_limit 0 MB

#Multi core
workers 6

https_port squid_ip:3129 intercept ssl-bump \
key=/etc/squid/certs/squid.pem \
cert=/etc/squid/certs/squid.pem \
generate-host-certificates=off \
dynamic_cert_mem_cache_size=0MB \
sslflags=NO_DEFAULT_CA

http_port squid_ip:3128

acl block_url ssl::server_name "/etc/squid/https_block.txt"

#Step settings
acl step1 at_step SslBump1
acl step2 at_step SslBump2
acl step3 at_step SslBump3
ssl_bump peek step1 all
ssl_bump peek step2 all
ssl_bump terminate step3 block_url
ssl_bump splice step3 all

http_access allow all



Somebody else had the same problem?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151002/61213e26/attachment.html>


More information about the squid-users mailing list