[squid-users] Sometimes Squid goes to 99% CPU use

[C. L. Martinez]

On Fri  1.Jul'16 at 21:42:23 +1200, Amos Jeffries wrote:
> On 1/07/2016 8:39 p.m., C. L. Martinez wrote:
> > Hi all,
> > 
> >  I am seeing an abnormal behavior in my squid host (OpenBSD). From time to time, CPU goes to 99%:
> > 
> > load averages:  2.20,  2.14,  2.09  
> > 33 processes: 1 running, 31 idle, 1 on processor
> > CPU states: 79.2% user,  0.0% nice,  0.1% system,  0.0% interrupt, 20.6% idle
> > Memory: Real: 91M/263M act/tot Free: 1711M Cache: 118M Swap: 0K/2055M
> > 
> >   PID USERNAME PRI NICE  SIZE   RES STATE     WAIT      TIME    CPU COMMAND
> > 13337 _squid    64    0   72M   71M run       -       105:58 99.02% squid
> > 
> >  This only occurs with https sites ... maybe is a missconfiguration with ssl-bump options? Actually my ssl-bump config is:
> > 
> > acl step1 at_step SslBump1
> > ssl_bump peek step1
> > ssl_bump bump !NoSSLIntercept
> > ssl_bump splice all
> > 
> >  Exists some "safer" ssl-bump config to avoid this behavior?
> 
> What exact version of Squid are you using?
> 
> Amos
> 
I am using squid version installed from M:tier packages for OpenBSD:

Squid Cache: Version 3.5.17
Service Name: squid
configure options:  '--disable-strict-error-checking' '--disable-arch-native' '--datadir=/usr/local/share/squid' '--libexecdir=/usr/local/libexec/squid' '--disable-loadable-modules' '--enable-arp-acl' '--enable-auth' '--enable-delay-pools' '--enable-follow-x-forwarded-for' '--enable-forw-via-db' '--enable-http-violations' '--enable-icap-client' '--enable-ipv6' '--enable-referer-log' '--enable-removal-policies=lru heap' '--enable-ssl' '--enable-ssl-crtd' '--with-openssl' '--enable-storeio=aufs ufs diskd' '--with-default-user=_squid' '--with-filedescriptors=8192' '--with-krb5-config=no' '--with-pidfile=/var/run/squid.pid' '--with-pthreads' '--with-swapdir=/var/squid/cache' '--disable-pf-transparent' '--enable-ipfw-transparent' '--enable-external-acl-helpers=LDAP_group SQL_session file_userip time_quota  unix_group wbinfo_group  LDAP_group eDirectory_userip' '--prefix=/usr/local' '--sysconfdir=/etc/squid' '--mandir=/usr/local/man' '--infodir=/usr/local/info' '--localstatedir=/var/squid' '--disable-silent-rules' '--disable-gtk-doc' 'CC=cc' 'CFLAGS=-O2 -pipe' 'LDFLAGS=-L/usr/local/lib' 'CPPFLAGS=-I/usr/local/include' 'CXX=c++' 'CXXFLAGS=-O2 -pipe'


-- 
Greetings,
C. L. Martinez