<!DOCTYPE html>
<html data-lt-installed="true">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body style="padding-bottom: 1px;">
<p>Hi<br>
We have 5 squid workers, we need to handle around 8k concurrent
users.</p>
<p>Based on this, what's the auth_param values that you recommend
for children, idle and startup?<br>
How to know if the helper supports concurrent requests?</p>
<p>
<blockquote type="cite">winbindd: Exceeding 500 client
connections, no idle connection found
</blockquote>
I will increase this value to check if help to settle the issue</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 25/07/2024 14:28, Alex Rousskov
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:af458748-9072-428a-bbf4-9154cd8efacb@measurement-factory.com">On
2024-07-23 19:20, Andre Bolinhas wrote:
<br>
<blockquote type="cite">winbindd: Exceeding 500 client
connections, no idle connection found
<br>
</blockquote>
<br>
<blockquote type="cite">auth_param ntlm children 500 ...
<br>
</blockquote>
<br>
I know virtually nothing about WINDBIND and the authentication
helper you are using, but configuring Squid to have 500 helper
processes is usually a mistake, even with a single Squid worker.
YMMV, but I would try to use a lot fewer helpers (e.g., 10) and
increase that number only if such an increase actually improves
things.
<br>
<br>
If possible, use a helper that supports concurrent requests.
<br>
<br>
If your Squid is not competing for resources with other
applications on the server, then I also recommend keeping a
_constant_ number of helper processes (instead of asking Squid to
start many new helper processes at the worse possible time -- when
the load on Squid increases). To do that, make startup and idle
parameters the same as the maximum number of children.
<br>
<br>
<br>
HTH,
<br>
<br>
Alex.
<br>
P.S. The credit for highlighting the correlation between winbindd
errors and "auth_param ntlm children 500" goes to Andrey K.
<br>
<br>
_______________________________________________
<br>
squid-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.squid-cache.org/listinfo/squid-users">https://lists.squid-cache.org/listinfo/squid-users</a>
<br>
</blockquote>
</body>
<lt-container></lt-container>
</html>