[squid-users] url_rewrite_program and ACLs

[Amos Jeffries]

On 23/11/17 03:33, Vieri wrote:
> 
> ________________________________
> From: Amos Jeffries <squid3 at treenet.co.nz>
>>
>> If we assume that each request opens a new connection and they are not
>> closed until TCP times out on the socket we do get numbers much more
>> like that 11K+ you are seeing.
>>
>> That implies that ICAP transactions are probably not finishing
> 
>> completely.
> 
> I'll have to look into this asap. Quick question: if I restart c-icap shouldn't I see a drop in open FD numbers if it were c-icap's "fault"?
> 
> I restarted c-icap (stop+start), but the open FDs are the same.
> 

Maybe, but there have been a few bugs where Squid being tricked into 
waiting on something arriving that was never coming left sockets in the 
TCP half-open CLOSE_WAIT state indefinitely.

Amos