[squid-users] squid errors in error.log and slow internet from squid

[Hardik Dangar]

Hello,

I have been facing few squid issues lately. we are about 40 users mostly
linux, some mac and some windows system.

squid has become very slow for some reason. we can check that by bypassing
squid and opening same urls. Second thing we are seeing swap mismatch
errors and only solution we found is to remove swap file and use squid -z
that will make things work for a day. other than that there are other
errors in squid log too.

/var/cache/squid directory has became around 80 gb.

Here is our squid version and conf file

Squid Cache: Version 3.5.23
Service Name: squid
configure options:  '--prefix=/usr' '--localstatedir=/var/squid'
'--libexecdir=/lib/squid' '--srcdir=.' '--datadir=/share/squid'
'--sysconfdir=/etc/squid' '--with-default-user=proxy'
'--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid'
'--with-openssl' '--enable-ssl-crtd' '--enable-inline'
'--disable-arch-native' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-follow-x-forwarded-for'
'--enable-url-rewrite-helpers=fake' '--enable-ecap' '--enable-arp-acl'
'--disable-translation'


Squid.conf file
https://gist.githubusercontent.com/hardikdangar/44f424e5a0be0a2a12ebc53a25a29629/raw/6e70682601b03732b662094ea7f4e79fb80a3851/squid.conf

Squid error log
http://pastebin.com/raw/J7Ws2WKT
if you see error log file you can see  Error negotiating SSL errors and
 Ignoring malformed cache entry errors frequently.


squid access also have lot of entries like,
1488621158.416   1316 192.168.1.51 TAG_NONE/200 0 CONNECT 35.154.95.34:443
- ORIGINAL_DST/35.154.95.34 -
1488621158.416   1315 192.168.1.51 TAG_NONE/200 0 CONNECT 35.154.95.34:443
- ORIGINAL_DST/35.154.95.34
which i believe https requests which have certificate issues. this has
became growing for mac machines.

Anybody else have similar issues?

We are not sure weather it was the 3.5.23 upgrade or adding Mac systems to
our network is causing these issues. but squid has certainly become slow
for lots of people to the point we have to bypass them.


Thank you very much for reading through the post. Let me know if you find
any issues with our config or anything that can help us figuring out whats
the issue.

Have a good day.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170304/5f126888/attachment-0001.html>