[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 23/10/2014 7:27 p.m., Victor Sudakov wrote:
> Victor Sudakov wrote:
>>>> 
>>>>> And about the basic issues that you were having with
>>>>> performance, does it help to run Kerberos instead of NTLM
>>>>> (it should...)?
>>>> 
>>>> I have even moved squid to a new virtual machine (FreeBSD 
>>>> 9.3-RELEASE under VMWare, 1 GB RAM) and performance still
>>>> sucks royally.
> 
> I don't know what's happening with squid but this kind of CPU
> consumption is just not normal:

Well, it both is and it isn't.

Squid *will* use the CPU hardware right up too the 100% limit if it
has any need to that is normal.

Needing to for long periods of time is not particularly normal ...
except under conditions where the traffic load is too high for the
server hardware to cope with.

I did see a scenario with behaviour exactly like this at a client some
time back. After detailed analysis it turned out that their NTLM
helper had been so slow that clients traffic spent more time waiting
for next auth action than processing requests.
 But when they moved to the higher performance Kerberos and a simpler
proxy configuration the client traffic throughput increased to a
req/sec rate faster than the server could cope (3x previous rate).
 It thus was bottlenecked by 100% CPU speed limit rather than by NTLM
delays.

So, "normal" depends on what exactly is the cause of the behaviour.

What req/sec traffic rates are you seeing on what you consider a
"normal" / older proxy compared to this one?

Also, what are the heleprs stats looking like in the cachemgr report?

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUSNdUAAoJELJo5wb/XPRj57sIALpsmoKBfywN6iToL1ZfODbL
pXDGxm0dcMXBlLB3gadEjMLvA5LlgY9xyFl41UHGjYhvg93RAsoLQmCNHZUgRtT8
fNqyVgGV5CnbPZQTJwWMjHFiGOR3/p8VFbH67nXt5xB7WZdT8UhWKkVxK3kNm2P9
BopiIYKeXDqgTKGw2OzPw/Xe8ieLOr/avxAq1cQkFhGw3B0mj+f6S9DlNZ6wSQR0
tIsshL2hHxt9jDnYVo1A8Gg6khYjjwZmRNFs5ixzsftMzBKR2QKAv09q/BKTTqID
T1EFFU5MuHanoxRzURJ0lh3UPeSj2sook5qKUyHQ/gyUc7yJtO+E3IdKcC/yDDM=
=/yVu
-----END PGP SIGNATURE-----