[squid-users] I would like to know performance sizing aspects.

[Eliezer Croitor]

Hey Kitamura,

 

Technically speaking Openstack admin can create a flavor which has 1 vCPU and 16GB RAM however,
it’s recommended to have 1 vCPU per 4 GB of RAM.

Openstack default vCPU ratio is 16 vCPUs per 1 physical Core.

So for a proxy which use SSL-Bump it’s recommended to have more then 1 vCPU ie at-least 2 if not 4.

 

All The Bests,

Eliezer

 

----

Eliezer Croitoru

Tech Support

Mobile: +972-5-28704261

Email: ngtech1ltd at gmail.com <mailto:ngtech1ltd at gmail.com> 

 

From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of m k
Sent: Monday, August 17, 2020 2:12 PM
To: Amos Jeffries <squid3 at treenet.co.nz>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] I would like to know performance sizing aspects.

 

Hi all,

 

I built squid using SSL-bump. In addition, squid also authenticates users with active directory. The hardware is openstack virtual. os is centos8.1. There is one CPU. The memory is 16GB. The hard disk is SSD 200GB.

 

I'm thinking of load testing with Apache Jmeter in this environment.

I don't know the standard, so the test stops and I am in trouble.

How many simultaneous connection sessions?

How many requests per minute?

Help me.

 

thank you,

Kitamura

 

2020年8月7日(金) 8:53 Amos Jeffries <squid3 at treenet.co.nz <mailto:squid3 at treenet.co.nz> >:

On 6/08/20 5:28 pm, m k wrote:

> Eliezer,

> 

> Squid's default setting is 1 core CPU, 16GB mem.

> How many URLs(Blacklist) will degrade Squid's performance?

> 



Eliezer's answer covers that already, so I will skip here.





> Also, SSL-Bump.

> 



This is "unknown" - as far as I am aware none has published numbers

recently about it. There are a lot of factors in the network traffic and

your servers internal state (eg the RNG engine) that multiply up to

cause varying amounts of delay - plus the volatile nature of this

feature set itself month by month changes the effects or relevance of

each factor.

  So numbers from me today will be wrong in a few weeks, or may be wrong

for your network already. All that we can be sure of is that there is

extra work needed by Squid thus "slower" than plain-text HTTP is to be

expected.



For planning the consideration is just to be aware that the numbers we

can give you (for plain-text) will be over-estimates of capacity for

SSL-Bump traffic and allow some margins. Once you have an install

running you can test and measure the actual numbers for your traffic.





Amos

_______________________________________________

squid-users mailing list

squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org> 

http://lists.squid-cache.org/listinfo/squid-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200826/45be03c3/attachment.htm>