[squid-users] squid delay_pools can't limit speed on certain connections
reinerotto
augustus_meyer at gmx.net
Wed Feb 20 11:46:10 UTC 2019
I also have a problem with delay_pools on 4.4. Download speed is not
throttled. Easily to be verified when watching video from youtube, using
'statistics for nerds'.
I do not remember having this effect on 3.5
This squid runs on up-to-date openwrt device,
having limited resources.
I am happy to provide further info, in case I get
instructions for debug_options
My squid.conf:
acl localnet src 10.1.0.0/24
acl localnet src 172.16.0.0/24
acl localnet src 192.168.1.0/24
acl localnet src 192.168.2.0/24
acl ssl_ports port 443
acl safe_ports port 80
acl safe_ports port 443
acl safe_ports port 3128
acl connect method connect
http_access deny !safe_ports
http_access deny connect !ssl_ports
http_access allow localhost manager
http_access allow localnet manager
http_access deny manager
cachemgr_passwd xxxxxxxx all
acl denybin urlpath_regex \.bin
cache deny denybin
acl test_chrome_compression url_regex ^http://check.googlezip.net/connect
http_access deny test_chrome_compression
acl block_google_proxy req_header Chrome-Proxy .*
http_access deny block_google_proxy
http_access allow localnet
http_access allow localhost
http_access deny all
reload_into_ims on
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire
ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90%
432000 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$
10080 90% 43200 override-expire ignore-no-cache ignore-no-store
ignore-private
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
access_log none
cache_log /mnt/sda1/log/squid/cache.log
cache_store_log stdio:/dev/null
logfile_rotate 1
logfile_daemon /dev/null
http_port 3128
http_port 8888 intercept
https_port 3127 intercept ssl-bump cert=/etc/squid/ssl_cert/myCA.pem \
generate-host-certificates=off
acl step1 at_step SslBump1
ssl_bump peek step1 all
ssl_bump splice all
cache_mem 8 MB
shutdown_lifetime 10 seconds
httpd_suppress_version_string on
dns_v4_first on
forwarded_for delete
pipeline_prefetch 2
via off
maximum_object_size_in_memory 128 KB
maximum_object_size 4 MB
reply_header_access Cache deny all
client_idle_pconn_timeout 1 minute
server_idle_pconn_timeout 5 minute
read_timeout 2 minute
ipcache_size 512
fqdncache_size 256
reply_header_access Alternate-Protocol deny all
reply_header_access alternate-protocol deny all
reply_header_access alt-svc deny all
pinger_enable off
digest_generation off
netdb_filename none
cache_dir ufs /mnt/sda1/cache 250 16 256
acl only512kusers src 10.1.0.0/24
delay_pools 1
delay_class 1 3
delay_access 1 allow only512kusers
delay_access 1 deny all
delay_parameters 1 -1/-1 -1/-1 64000/64000
--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html
More information about the squid-users
mailing list