<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
It must not be. My most active setup has 3% CPU all time dirung peak
hours.<br>
<br>
Typical view:<br>
<br>
<a class="moz-txt-link-freetext" href="https://i1.someimage.com/NzM1erI.png">https://i1.someimage.com/NzM1erI.png</a><br>
<br>
<br>
21.04.16 19:18, Odhiambo Washington пишет:<br>
<span style="white-space: pre;">> Is is expected that using
ssl_bump results into high CPU usage all the time?<br>
><br>
> This is squid-3.5.17<br>
><br>
> That is what I am seeing:<br>
><br>
> last pid: 26673; load averages: 2.24, 2.00,
2.10
up 0+03:47:56 16:08:30<br>
> 160 processes: 2 running, 157 sleeping, 1 zombie<br>
> CPU: 86.1% user, 0.0% nice, 7.8% system, 3.3% interrupt,
2.7% idle<br>
> Mem: 843M Active, 1942M Inact, 185M Wired, 43M Cache, 89M
Buf, 97M Free<br>
> Swap: 5900M Total, 1248K Used, 5899M Free<br>
><br>
> PID USERNAME THR PRI NICE SIZE RES STATE C
TIME WCPU COMMAND<br>
> 13309 squid 17 20 0 305M 264M uwait 0
7:38 80.86% squid<br>
> 26088 squid 1 21 0 12812K 5352K sbwait 1
0:04 2.49% ssl_crtd<br>
> 26090 squid 1 20 0 12812K 5272K sbwait 1
0:01 0.88% ssl_crtd<br>
><br>
><br>
> My config has:<br>
><br>
><br>
><br>
> acl no_ssl_interception ssl::server_name
"/usr/local/etc/squid/ssl_bump_broken_sites.txt"<br>
> ssl_bump splice no_ssl_interception <br>
> ssl_bump peek step1<br>
> ssl_bump stare step2<br>
> #ssl_bump bump all<br>
> #ssl_bump splice all<br>
><br>
> I think I read somewhere that 'ssl_bump splice all" is the
default behaviour, hence why I have commented it out. All I need
is just become a TCP tunnel without decrypting proxied traffic.<br>
><br>
> Thank you.<br>
><br>
><br>
> -- <br>
> Best regards,<br>
> Odhiambo WASHINGTON,<br>
> Nairobi,KE<br>
> +254 7 3200 0004/+254 7 2274 3223<br>
> "Oh, the cruft."<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXGNQsAAoJENNXIZxhPexGcZUIAL3zFz9UFuQdyfXFBilFQ0Gj
<br>
8F4HkxuJjNtCUYdb6BEwux9jBOjZpYScr8sRHRBPvIV8O4/2Z3QF7exjEW8Duj/G
<br>
REWO3txPiE4pICD/AbdBuX8O++dvfjj46nz+lVeCH9JjGW0VoMHiyGtwGx1shSfY
<br>
pGX0MguEGEtWp/7hxKAFbRivGuvyQ7Ogj8i9IgMBptMrRu4D3G75UO+9WmaHcpVx
<br>
VAf1revHh+dWFWrO1k+zrWFIIFcwbR5LcrJeBYJ94scgPV3p68LC2ZpqUBZreYCM
<br>
Koo9+Rss+Ix1rTSUkvTaoGOcMdrHJ1oMICHwyqtDMWlbDds5dAnnWXh5faNYPFk=
<br>
=7YlO
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>