[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

[Victor Sudakov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eliezer Croitoru wrote:
> 
> And about the basic issues that you were having with performance, does
> it help to run Kerberos instead of NTLM (it should...)?

I have even moved squid to a new virtual machine (FreeBSD 9.3-RELEASE under
VMWare, 1 GB RAM) and performance still sucks royally. 

The Web access is fast in the morning, but I begin getting complaints
about "slow Internet" by lunchtime. I myself can visualy see the
performance degradation while browsing the web, and the growth of the
squid memory consumption. I observe about 25-30 negotiate_kerberos_auth
processes simultaneously.

My config:

auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -s GSS_C_NO_NAME
auth_param negotiate children 100 startup=5 idle=10
auth_param negotiate keep_alive on

If I set "auth_param negotiate keep_alive" to off, should it improve
performance?


- -- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUSInMAAoJEA2k8lmbXsY0I3oIALf02fgPuL2kdfazx+ysMXx/
sGZSo94sYGJTUzz/aJ1QIqCK6q/2r1VLqo7Xhx145JorbcqgSrxh85iuyYyzO1Mu
BBy+LHj7WUXlZSRtas3rhi4Pq0J7eUoj358+P2EM4csH3vhqUf7DdyBBixsTnBq9
3iKGQpxzZrEJFzM1jAyRHDi2wa0Y/ZH8ei7Oj04UdQAKnwhHa1c0CuOw0qX6oH4l
Ftg1aJFBXSXsHFDxDboKJ8fULZwSo/3A2cRNctqaFMMzW/ycGyVCB+m7W7Avq50l
L7wiiNcFtkBTvNOQ2gM873f5U1UJ8ZVLEUltPE0GKcfd4hpAWV0RTvsN4xOsEaI=
=fUe7
-----END PGP SIGNATURE-----