[squid-users] Tune Squid proxy to handle 90k connection

[Alex Rousskov]

On May 16, 2024, at 15:10, Andre Bolinhas wrote:
> Well, the performance and NTLM issues that I had with persistent 
> connections goes back to squid 3.5 😳, so I never re-enabled it again 
> on new version, I'm using Squid 5.9 and 6.8 now.
>
> If you tell me that now that persistent connections are more stable 
> and inclusive is recommended to be enabled by default to gain 
> performance and also speed up NTLM/Kerberos authentication, I will 
> re-enable again on my production servers.

FWIW, I am not going to tell you any of that. I am also not going to 
tell you the opposite of those statements. In my previous emails, I did 
my best to document that I cannot correctly predict performance impact 
in your specific deployment environments (and suggested alternatives to 
asking unsubstantiated "Should I enable or disable persistent 
connections?" question on a mailing list). I obviously failed to get 
that message across since essentially the same question is still being 
asked.

Alex.



>> On 16/05/2024 21:34, Alex Rousskov wrote:
>>> On 17/05/24 02:23, Bolinhas André wrote:
>>>
>>>> Has I explain, by default I set those directives to off to avoid 
>>>> high cpu consumption.
>>>
>>> Just FYI: In this context, when you say "default", folks will tend to 
>>> think that you are talking about default Squid configuration setting 
>>> (i.e. something hard-coded in Squid code) rather than the actual 
>>> thing you are talking about (i.e. your custom Squid configuration).
>>>
>>> I do not know whether disabling persistent connections reduces CPU 
>>> consumption in your environment. There are too many variables. In 
>>> most cases, including NTLM authentication cases detailed by Amos, 
>>> disabling persistent connections hurts performance, but there are 
>>> always exceptions (and bugs).
>>>
>>> It is not clear (to me) whether you disable persistent connections 
>>> because they hurt performance in your environment OR you disable 
>>> persistent connections because _you assume_ (without evidence) that 
>>> they hurt performance in your environment.
>>>
>>> If you do not know that disabling persistent connections reduces CPU 
>>> consumption in your environment, then you should not disable them 
>>> until you discover strong evidence that they hurt performance. At 
>>> that point, you can share that evidence and ask for configuration 
>>> advice based on that evidence.
>>>
>>>
>>> HTH,
>>>
>>> Alex.
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> https://lists.squid-cache.org/listinfo/squid-users