<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><p><span style="font-size:11pt"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">I have gone through the forums, and I haven't found an answer to the question, although it has been asked more than once. I am running squid 3.5.X on Centos 7, the compile options are:<br/>
"configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-strict-error-checking' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=$(localstatedir)/log/squid' '--with-pidfile=$(localstatedir)/run/squid.pid' '--disable-dependency-tracking' '--enable-eui' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,MSNT-multi-domain,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,SMB_LM,getpwnam' '--enable-auth-ntlm=smb_lm,fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos' '--enable-external-acl-helpers=file_userip,LDAP_group,time_quota,session,unix_group,wbinfo_group,kerberos_ldap_group' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,rock,ufs' '--enable-wccpv2' '--enable-esi' '--enable-ecap' '--with-aio' '--with-default-user=squid' '--with-dl' '--with-openssl' '--with-pthreads' '--disable-arch-native' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fpie' 'LDFLAGS=-Wl,-z,relro -pie -Wl,-z,relro -Wl,-z,now' 'CXXFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fpie' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'"</span></span></span></span></span></p>
<p> </p>
<p><span style="font-size:11pt"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">I have a service which adds domains to a blacklist file, and then calls squid -k reconfigure. Instead of writing to the file, this service updates the file completely with new rules, by deleting the old file, and creating a new one in its place, and then calling squid -k reconfigure. After doing this, on odd occasions, squid will stop serving traffic completely, until you do a squid stop, and squid start. After shutting down squid, and starting squid up with the same rules, squid will continue to work normally. Its probably worth mentioning that during the time that these events are taking place, the server is under quite a bit of load, and clients don't stop sending requests via the server. What these directives look like:<br/>
<br/>
acl Porn dstdomain .xnxx.com .sex.com <br/>
acl Drugs dstdomain .drugs.com .silkroad.eu <br/>
http_access deny Porn<br/>
http_access deny Drugs</span></span></span></span></span></p>
<p> </p>
<p><span style="font-size:11pt"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">This also seems to be amplified when there are several squid workers (child processes) running. In regards to order, these ACL's are above any other ACL's in the list. We have a very basic squid conf file that looks like this:<br/>
<br/>
http_port 3128<br/>
cache deny all<br/>
#<br/>
access_log /var/log/squid/access.log <br/>
cache_store_log none<br/>
cache_log /dev/null<br/>
logfile_rotate 4<br/>
#<br/>
auth_param basic program /usr/lib64/squid/basic_db_auth --dsn "DBI:mysql:host=XX.XX.XX.XX;port=XXXX;database=XXXXX" --user XXXXXX --password XXXXXXXX --plaintext --persist<br/>
# <br/>
acl db-auth proxy_auth REQUIRED<br/>
auth_param basic credentialsttl 2 hours<br/>
auth_param basic casesensitive on<br/>
#<br/>
connect_timeout 55 minutes<br/>
#<br/>
request_header_access Allow allow all<br/>
request_header_access Authorization allow all<br/>
request_header_access WWW-Authenticate allow all<br/>
request_header_access Proxy-Authorization allow all<br/>
request_header_access Proxy-Authenticate allow all<br/>
request_header_access Cache-Control allow all<br/>
request_header_access Content-Encoding allow all<br/>
request_header_access Content-Length allow all<br/>
request_header_access Content-Type allow all<br/>
request_header_access Date allow all<br/>
request_header_access Expires allow all<br/>
request_header_access Host allow all<br/>
request_header_access If-Modified-Since allow all<br/>
request_header_access Last-Modified allow all<br/>
request_header_access Location allow all<br/>
request_header_access Pragma allow all<br/>
request_header_access Accept allow all<br/>
request_header_access Accept-Charset allow all<br/>
request_header_access Accept-Encoding allow all<br/>
request_header_access Accept-Language allow all<br/>
request_header_access Content-Language allow all<br/>
request_header_access Mime-Version allow all<br/>
request_header_access Retry-After allow all<br/>
request_header_access Title allow all<br/>
request_header_access Connection allow all<br/>
request_header_access Proxy-Connection allow all<br/>
request_header_access User-Agent allow all<br/>
request_header_access Cookie allow all<br/>
request_header_access All deny all<br/>
dns_v4_first on<br/>
via off<br/>
forwarded_for off<br/>
follow_x_forwarded_for deny all<br/>
dns_nameservers 8.8.8.8 8.8.4.4</span></span></span></span></span></p>
<p> </p>
<p style="margin-bottom:5px"><span style="font-size:11pt"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Your help is greatly appreciated, maybe there has been some insight into this issue after 10+ years since the last time it was asked.</span></span></span></span></span></p>
<p style="margin-bottom:13px"> </p></div></body></html>