[squid-users] I would like to know performance sizing aspects.
Eliezer Croitor
ngtech1ltd at gmail.com
Wed Aug 26 12:06:13 UTC 2020
Hey Kitamura,
Technically speaking Openstack admin can create a flavor which has 1 vCPU and 16GB RAM however,
it’s recommended to have 1 vCPU per 4 GB of RAM.
Openstack default vCPU ratio is 16 vCPUs per 1 physical Core.
So for a proxy which use SSL-Bump it’s recommended to have more then 1 vCPU ie at-least 2 if not 4.
All The Bests,
Eliezer
----
Eliezer Croitoru
Tech Support
Mobile: +972-5-28704261
Email: ngtech1ltd at gmail.com <mailto:ngtech1ltd at gmail.com>
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of m k
Sent: Monday, August 17, 2020 2:12 PM
To: Amos Jeffries <squid3 at treenet.co.nz>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] I would like to know performance sizing aspects.
Hi all,
I built squid using SSL-bump. In addition, squid also authenticates users with active directory. The hardware is openstack virtual. os is centos8.1. There is one CPU. The memory is 16GB. The hard disk is SSD 200GB.
I'm thinking of load testing with Apache Jmeter in this environment.
I don't know the standard, so the test stops and I am in trouble.
How many simultaneous connection sessions?
How many requests per minute?
Help me.
thank you,
Kitamura
2020年8月7日(金) 8:53 Amos Jeffries <squid3 at treenet.co.nz <mailto:squid3 at treenet.co.nz> >:
On 6/08/20 5:28 pm, m k wrote:
> Eliezer,
>
> Squid's default setting is 1 core CPU, 16GB mem.
> How many URLs(Blacklist) will degrade Squid's performance?
>
Eliezer's answer covers that already, so I will skip here.
> Also, SSL-Bump.
>
This is "unknown" - as far as I am aware none has published numbers
recently about it. There are a lot of factors in the network traffic and
your servers internal state (eg the RNG engine) that multiply up to
cause varying amounts of delay - plus the volatile nature of this
feature set itself month by month changes the effects or relevance of
each factor.
So numbers from me today will be wrong in a few weeks, or may be wrong
for your network already. All that we can be sure of is that there is
extra work needed by Squid thus "slower" than plain-text HTTP is to be
expected.
For planning the consideration is just to be aware that the numbers we
can give you (for plain-text) will be over-estimates of capacity for
SSL-Bump traffic and allow some margins. Once you have an install
running you can test and measure the actual numbers for your traffic.
Amos
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org>
http://lists.squid-cache.org/listinfo/squid-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200826/45be03c3/attachment.htm>
More information about the squid-users
mailing list