<!DOCTYPE html>
<html data-lt-installed="true">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body style="padding-bottom: 1px;">
    <p>Hi</p>
    <p>Thanks for your response</p>
    <p>I'm not using pipeline_prefetch, because pipeline_prefetch breaks
      the NTLM/Kerberos authentication.</p>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 15/05/2024 18:15, Jonathan Lee
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:7B56260D-F777-4B85-AF0A-6607A21FA292@gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      Have you researched enabling pipeline_prefetch??<br
        id="lineBreakAtBeginningOfMessage">
      <div><br>
        <blockquote type="cite">
          <div>On May 14, 2024, at 17:56, Andre Bolinhas
            <a class="moz-txt-link-rfc2396E" href="mailto:andre.bolinhas@articatech.com"><andre.bolinhas@articatech.com></a> wrote:</div>
          <br class="Apple-interchange-newline">
          <div>
            <meta http-equiv="content-type"
              content="text/html; charset=UTF-8">
            <div style="padding-bottom: 1px;">
              <p>Hi</p>
              <p>Sometimes my users complains that the internet
                navigation thought Squid is very slow.</p>
              <p>After checking the access.log, I can see a lot of
                ABORTED messages like this</p>
              <p>1715537802.589      2 10.103.12.94
                NONE_NONE_ABORTED/200 0 CONNECT api.telegram.org:443 -
                HIER_NONE/-:- - mac="00:00:00:00:00:00"
                accessrule:%20global_whitelist%0D%0A
                exterr="ERR_CLIENT_GONE|WITH_CLIENT"</p>
              <p>1715537183.180  99993 172.16.31.205
                TCP_MISS_ABORTED/000 0 POST <a
                  class="moz-txt-link-freetext"
href="http://pjcpd-dlpend01.hlbank.my/GECommunicationWS.asmx"
                  moz-do-not-send="true">http://pjcpd-dlpend01.hlbank.my/GECommunicationWS.asmx</a>
                - HIER_NONE/-:- - mac="00:00:00:00:00:00"
                accessrule:%20global_whitelist%0D%0A
                exterr="ERR_CLIENT_GONE|WITH_CLIENT"<br>
              </p>
              <p>I have imported the access.log into my ELK machine and
                I can see that during the time that the users complained
                about the slowness there is a huge spike of NONE_ABORTED
                messages.</p>
              <p><a class="moz-txt-link-freetext"
href="https://i.postimg.cc/6QR79GWk/6e727e86-de3d-4f3b-bd9e-04c04052ca2e.jpg"
                  moz-do-not-send="true">https://i.postimg.cc/6QR79GWk/6e727e86-de3d-4f3b-bd9e-04c04052ca2e.jpg</a></p>
              <p>Now my question is:<br>
                1. What can cause this kind of issue? It's a squid
                server issue, network (firewall, switch, router, …), or
                client?<br>
                2. Why the number of NONE_ABORTED requests is almost 4
                time more than normal request? <br>
              </p>
              <p>Best regards<br>
              </p>
            </div>
            <lt-container></lt-container>
            _______________________________________________<br>
            squid-users mailing list<br>
            <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
            <a class="moz-txt-link-freetext" href="https://lists.squid-cache.org/listinfo/squid-users">https://lists.squid-cache.org/listinfo/squid-users</a><br>
          </div>
        </blockquote>
      </div>
      <br>
    </blockquote>
  </body>
</html>