[squid-users] Connection reset and assertion failed

[Alex Rousskov]

On 7/15/22 08:18, Thomas Dev wrote:

> currently, we are suffering from aborted downloads while going over
> squid. When I look into the ethernet traffic, I can see many TCP-rests
> by squid and in close timely relation to those resets I see messages
> like:
> 
> 2022/07/15 12:04:24 kid1| assertion failed: tunnel.cc:1227:
> "!waitingForConnectExchange"
>      current master transaction: master1178
> 
> in cache.log.
> 
> Are these tcp-resets related to the failed assertion 

That would be my working theory.


> and can I do something about it?

I would start with an upgrade to Squid v5.6 or later. Squid v5.2 has a 
set of bugs that make it unusable in most production environments, and 
some of those bugs may manifest in assertions similar to yours. Squid 
v5.6 retained only one of those bugs (bug 5186 -- fixed in master/v6).


HTH,

Alex.


> Server: physical Ubuntu 22.04 LTS
> 
> Squid Cache: Version 5.2
> Service Name: squid
> Ubuntu linux
> configure options:  '--build=x86_64-linux-gnu' '--prefix=/usr'
> '--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
> '--infodir=${prefix}/share/info' '--sysconfdir=/etc'
> '--localstatedir=/var' '--disable-option-checking'
> '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu'
> '--runstatedir=/run' '--disable-maintainer-mode'
> '--disable-dependency-tracking' 'BUILDCXXFLAGS=-g -O2
> -ffile-prefix-map=/build/squid-DQ03Be/squid-5.2=. -flto=auto
> -ffat-lto-objects -flto=auto -ffat-lto-objects
> -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time
> -D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -flto=auto
> -ffat-lto-objects -flto=auto -Wl,-z,relro -Wl,-z,now ' 'BUILDCXX=g++'
> '--with-build-environment=default' '--enable-build-info=Ubuntu linux'
> '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid'
> '--libexecdir=/usr/lib/squid' '--mandir=/usr/share/man'
> '--enable-inline' '--disable-arch-native' '--enable-async-io=8'
> '--enable-storeio=ufs,aufs,diskd,rock'
> '--enable-removal-policies=lru,heap' '--enable-delay-pools'
> '--enable-cache-digests' '--enable-icap-client'
> '--enable-follow-x-forwarded-for'
> '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB'
> '--enable-auth-digest=file,LDAP'
> '--enable-auth-negotiate=kerberos,wrapper'
> '--enable-auth-ntlm=fake,SMB_LM'
> '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,time_quota,unix_group,wbinfo_group'
> '--enable-security-cert-validators=fake'
> '--enable-storeid-rewrite-helpers=file'
> '--enable-url-rewrite-helpers=fake' '--enable-eui' '--enable-esi'
> '--enable-icmp' '--enable-zph-qos' '--enable-ecap'
> '--disable-translation' '--with-swapdir=/var/spool/squid'
> '--with-logdir=/var/log/squid' '--with-pidfile=/run/squid.pid'
> '--with-filedescriptors=65536' '--with-large-files'
> '--with-default-user=proxy' '--enable-linux-netfilter'
> '--with-systemd' '--with-gnutls' 'build_alias=x86_64-linux-gnu'
> 'CFLAGS=-g -O2 -ffile-prefix-map=/build/squid-DQ03Be/squid-5.2=.
> -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects
> -fstack-protector-strong -Wformat -Werror=format-security -Wall'
> 'LDFLAGS=-Wl,-Bsymbolic-functions -flto=auto -ffat-lto-objects
> -flto=auto -Wl,-z,relro -Wl,-z,now ' 'CPPFLAGS=-Wdate-time
> -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2
> -ffile-prefix-map=/build/squid-DQ03Be/squid-5.2=. -flto=auto
> -ffat-lto-objects -flto=auto -ffat-lto-objects
> -fstack-protector-strong -Wformat -Werror=format-security'
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users