[squid-users] Crash: every 1-2 hour: kernel: Out of memory: Kill process (squid)

[B. Cook]

What does squidclient show?

Get a trace going..

On Dec 14, 2016 11:52 PM, "Amos Jeffries" <squid3 at treenet.co.nz> wrote:

On 15/12/2016 6:24 a.m., noc at forceline.net wrote:
> Eliezer, thanks for your reply. Guides:
> http://wiki.squid-cache.org/Features/SslBump
> http://wiki.squid-cache.org/Features/SslPeekAndSplice
> https://habrahabr.ru/post/267851/  <-- Russian lang
> https://habrahabr.ru/post/272733/  <-- Russian lang
>
>> First goes first change this: 13130:
> Done, nothing changed. Squid died.
>
> Maby it will be work fine whith lower load even with https. But I don't
> understand, why it killed by a kernel rather than just update memory by
new
> one.
>
> http://wiki.squid-cache.org/Features/SslBump
>> Memory usage
>>
>>    /!\ Warning: Unlike the rest of this page at the time of writing, this
> section applies to Squid-3.3 and possibly later code capable of dynamic
SSL
> certificate generation and origin server certificate mimicking. The
current
> section text is intended primarily for developers and early adopters
facing
> excessive memory consumption in certain SslBump environments. These notes
> may be relocated elsewhere if a better location is found.
>>
>> Current documentation is specific to bump-server-first configurations.
>
> In attach server statistic.
>


I think you still have a forwarding loop. Does the cisco WCCP send port
443 connections from Squid to reach the Internet instead of sending them
back into Squid.

The Via header will protect against HTTP messages looping, but the TLS
handshake traffic has no such protection.

Amos

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

-- 

This message may contain confidential information and is intended only for 
the individual(s) named. If you are not an intended recipient you are not 
authorized to disseminate, distribute or copy this e-mail. Please notify 
the sender immediately if you have received this e-mail by mistake and 
delete this e-mail from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20161214/1e618a64/attachment-0001.html>