[squid-users] reconfigure drops in memory caches for external_acl_type

[Andrey K]

Hello, Norman,

I faced the problem too.
For myself, I modified the authorisation script (ext_wbinfo_group_acl - it
is a simple Perl code) and cache some user groups membership in a Memcache.
The script tries first of all to get the information from the cache, and if
it is not there, then get it from winbind.
Squid reconfigurations do not affect the information in the memcache.

Kind regards,
       Ankor


ср, 29 нояб. 2023 г. в 18:33, Alex Rousskov <
rousskov at measurement-factory.com>:

> On 2023-11-29 09:38, Ziert, Norman wrote:
>
> > in the very recent past I stumbled over that a "squid -k reconfigure"
> > drops in memory caches for external_acl_type helpers, wich in my case
> > leads to a massive query burst against local winbind
> > (ext_wbinfo_group_acl) and infact the active directory
> > domaincontrollers. This also leads to an massive impact in servicetime
> > to endusers, where after a reconfigure the time needed to fullfill takes
> > a recent time by group membership authorization within squid until the
> > external_acl cache is "rewarmed".
> >
> >
> > I have veriefied that behavior back to v5.2.
> >
> >
> > I want to ask if this is a wanted behavior to squid or should I file a
> > bug-report on this?
>
>
> This behavior is usually unwanted, but there is no particular need for a
> bug report IMHO: We know that this and similar reconfiguration side
> effects are usually unwanted. We are actively working on avoiding
> various unwanted reconfiguration side effects -- the "smooth
> reconfiguration" project has merged about 25 pull requests in recent
> months (some of them were very complex/substantial -- we need to payoff
> a lot of very old technical debt first!), and more are coming. We will
> solve this problem in the foreseeable future.
>
>
> > Maybe I discovered a topic wich is connected to this discussion:
> > https://wiki.squid-cache.org/Features/HotConf
>
> Yes, that old wiki page has some relevant pieces, but we have moved far
> ahead of those old discussions since then and have solved complex
> architectural problems with functional, deployment-tested code that
> supports smooth reconfiguration in some typical cases. We are actively
> working on polishing, merging, and enhancing those improvements.
>
>
> HTH,
>
> Alex.
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> https://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20231130/74ee2a02/attachment.htm>