<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
Hi Amos,<br>
<br>
You didn't notice it was always the same client ? The same IP
address redownloading ad eternum.. <br>
<br>
I managed to fix it by not caching stuff with "?" in it:<br>
<br>
<b>refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</b><br>
<br>
But I don't know if it's the best approach.. <br>
<br>
The URL was like that:<br>
<i>10.101.1.50 TCP_HIT/206 402 GET </i><i><a
class="moz-txt-link-freetext"
href="http://bg.v4.a.dl.ws.microsoft.com/dl/content/d/updt/2015/07/096c4bbc-4bc2-4ba1-8fd7-2e8cf3fb1937_132a7d6799d3bd625b0e5b375aa13552593bf0ed.appxbundle"><a class="moz-txt-link-freetext" href="http://bg.v4.a.dl.ws.microsoft.com/dl/content/d/updt/2015/07/096c4bbc-4bc2-4ba1-8fd7-2e8cf3fb1937_132a7d6799d3bd625b0e5b375aa13552593bf0ed.appxbundle">http://bg.v4.a.dl.ws.microsoft.com/dl/content/d/updt/2015/07/096c4bbc-4bc2-4ba1-8fd7-2e8cf3fb1937_132a7d6799d3bd625b0e5b375aa13552593bf0ed.appxbundle</a></a></i><i>?
- HIER_NONE/- application/octet-stream</i><br>
<br>
(After the "?" there were some variables)<br>
<br>
Anyways, this isn't the cause of the ultra-high bandwidth load.. (<b>our
DL link is 100% used by squid right now!</b>). Most traffic comes
from windows updates... <br>
<br>
<i>1457015568.658 9400 10.12.0.197 <b>TCP_SWAPFAIL_MISS/206</b>
1067290 GET <a class="moz-txt-link-freetext" href="http://au.v4.download">http://au.v4.download</a>.<b>windowsupdate</b>.com/c/msdownload/update/software/crup/2015/02/publisher-x-none_08ccd79ac8a6bb475040360b6c9d8c9e1f258c9d.<b>cab
</b>- HIER_DIRECT/201.30.251.40 application/octet-stream</i><i><br>
</i><i>1457015624.067 36878 10.12.0.234 <b>TCP_MISS/206</b> 77842
GET <a class="moz-txt-link-freetext" href="http://au.v4.download">http://au.v4.download</a>.<b>windowsupdate</b>.com/d/msdownload/update/software/crup/2014/02/windows8.1-kb2919355-x64_66955196a82751d1c8d9806d321487562b159f41.<b>psf
</b>- HIER_DIRECT/201.30.251.40 application/octet-stream</i><i><br>
</i><i>1457015750.556 126469 10.12.0.234 <b>TCP_MISS/206</b> 151183
GET <a class="moz-txt-link-freetext" href="http://au.v4.download">http://au.v4.download</a>.<b>windowsupdate</b>.com/d/msdownload/update/software/crup/2014/02/windows8.1-kb2919355-x64_66955196a82751d1c8d9806d321487562b159f41.<b>psf
</b>- HIER_DIRECT/201.30.251.40 application/octet-stream</i><i><br>
</i><i>1457015753.263 11011 10.12.0.197 <b>TCP_MISS/206</b>
1616920 GET <a class="moz-txt-link-freetext" href="http://au.v4.download">http://au.v4.download</a>.<b>windowsupdate</b>.com/c/msdownload/update/software/crup/2015/03/onenote-x-none_dd4f2bc75fc38be514c4009ce4d289e41f6b75d0.<b>cab
</b>- HIER_DIRECT/201.30.251.40 application/octet-stream</i><i><br>
</i><i>1457015780.978 13451 10.12.0.197 <b>TCP_SWAPFAIL_MISS/206</b>
2225824 GET <a class="moz-txt-link-freetext" href="http://au.v4.download">http://au.v4.download</a>.<b>windowsupdate</b>.com/c/msdownload/update/software/crup/2015/03/onenote-x-none_dd4f2bc75fc38be514c4009ce4d289e41f6b75d0.<b>cab
</b>- HIER_DIRECT/201.30.251.40 application/octet-stream</i><br>
<br>
Do you see anything that could make it re-download over and over
again in this config?<br>
<br>
<i>acl windowsupdate dstdomain .ws.microsoft.com
.windowsupdate.microsoft.com .update.microsoft.com
.windowsupdate.com .armdl.adobe.com</i><i><br>
</i><i>http_access allow windowsupdate</i><i><br>
</i><i>range_offset_limit none windowsupdate</i><i><br>
</i><i><br>
</i><i>maximum_object_size 10 GB</i><i><br>
</i><i>cache_mem 4 GB</i><i><br>
</i><i>maximum_object_size_in_memory 2 MB</i><i><br>
</i><i>memory_replacement_policy heap GDSF</i><i><br>
</i><i>cache_replacement_policy heap LFUDA</i><i><br>
</i><i><br>
</i><i>cache_dir rock /cache2/rock1 90000 min-size=0 max-size=32768</i><i><br>
</i><i>cache_dir rock /cache/rock1 300000 min-size=32769
max-size=10737418240</i><i><br>
</i><i><br>
</i><i>refresh_pattern -i
(microsoft|windowsupdate)\.com.*\.(cab|exe|ms[i|u|f]|dat|zip|psf|appx|esd)$
483840 80% 483840 override-expire ignore-reload</i><i><br>
</i><i> ignore-must-revalidate ignore-private ignore-no-store
store-stale</i><i><br>
</i><i>refresh_pattern -i \.aspx$ 0 0% 0</i><i><br>
</i><i>refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</i><i><br>
</i><i>refresh_pattern . 0 50% 10080 store-stale</i><i><br>
</i><i><br>
</i><i>read_ahead_gap 4096 KB</i><i><br>
</i><i>client_request_buffer_max_size 128 KB</i><i><br>
</i><i>connect_timeout 60 seconds</i><i><br>
</i><i>request_timeout 30 seconds</i><i><br>
</i><i>reload_into_ims on</i><i><br>
</i><i>via off</i><br>
<br>
Best Regards,<br>
<br>
<pre class="moz-signature" cols="72">--
Heiler Bemerguy - (91) 98151-4894
Assessor Técnico - CINBESA (91) 3184-1751</pre>
<br>
<div class="moz-cite-prefix">Em 03/03/2016 01:42, Amos Jeffries
escreveu:<br>
</div>
<blockquote cite="mid:56D7C0C8.4000307@treenet.co.nz" type="cite">
<pre wrap="">On 3/03/2016 10:33 a.m., Heiler Bemerguy wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
Hello guys..
Thanks for the tips. I've ajusted some stuff here and noticed these
repeated GETS below.. they are HITS, but why is this happening?
</pre>
</blockquote>
<pre wrap="">
Because lots of clients want the object(s).
If they are HITs then whats the problem? Squid is doing what you asked
it to. Caching the traffic and presenting it whenever a client asks.
Amos
_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</body>
</html>