Fórum Ubuntu Linux - PT
Suporte Técnico => Servidores => Tópico iniciado por: Felipesm em 18 de Fevereiro de 2011, 08:18
-
Olá pessoal,
Estou com um problema com o squid, tenho uma configuração básica so para limitar a banda dos usuários, funciona redondo so que todo dia de manhã quando chego na empresa e ligo minha maquina e tento acessar a internet fica dando timeout direto(erro 110), e isso só acontece de manhã, a medida que os usuários vão chegando o squid volta a funcionar, pode ser também porque eu reinicio o serviço umas 5 vezes mais acho difícil porque depois de reiniciar o serviço 5 vezes pra mim ainda continua dando timeout.Alguem tem ideia do que pode ser, segue o squid.conf
http_port 3128
visible_hostname servidorppv
acl all src 0.0.0.0/0.0.0.0
cache_access_log /var/log/squid/access.log
#Deixando allow all todos tem acesso a internet
http_access allow all
# Crie uma acl com as extensõque serãaplicadas o filtro
#acl download url_regex -i ftp .mov .mpeg .wav .tar .mp3 .exe .zip .rar
# Crie outra acl com os IPs que serãaplicados à egra
acl programacao src 0.0.0.0/0.0.0.0
acl estagiario src 192.168.1.152
delay_pools 2
# Significa que teremos dois controles de banda
# Primeiro controle
delay_class 1 2
# -1/-1 significa que nãteremos limites para a delay pool 1
delay_parameters 1 1572864/1572864 131072/131072
delay_access 1 allow programacao
# Segundo controle
delay_class 2 2
# Limita a sua banda para +- 64Kbits
delay_parameters 2 1572864/1572864 131072/131072
delay_access 2 allow estagiario
-
Um usuário me reportou que quando chegou e deu timeout na maquina dele ele reiniciou e voltou ao normal, mas o que posso fazer para que os usuários não precisem reiniciar?
-
Amigo,
Sugiro comentar as regras de controle de banda e chegar se o problema para.
Se for isso ir descomentando uma a uma para achar o problema.
-
Você já descartou a possibilidade de ser problema de conexão?
-
Sim a possibilidade de ser problema de conexão esta descartada.
-
Limita a sua banda para +- 64Kbits
delay_parameters 2 1572864/1572864 131072/131072
Essa banda é 1 mega.
-
Sim a possibilidade de ser problema de conexão esta descartada.
Quais os testes que vc fez?
-
Ping e Tracert, agora o serviço do squid passou também a cair,tenho que subir não quando isso acontece.
-
vc fez alguma modificação na configuração do squid, pra ele passar a cair?
Viu as mensagens de log? O arquivo /var/log/squid/cache.log tem as informações, ele deve informar qual o motivo pelo qual ele está caindo.
Uma dica rápida é verificar se há espaço livre no sistema de arquivos onde fica o diretório de logs.
df -h /var/log/squid
Quando esse sistema de arquivos lota, o squid cai e não sobe até liberar espaço.
Eu não acredito que o problema esteja relacionado com o controle de banda, mas é preciso fazer o teste que o renato-barbosa sugeriu (desativar os delay pools), pra confirmar.
-
Verifiquei o tamanho da pasta de log do squid e tem muito espaço livre ainda.
Ja o cache.log do squid não me agradou muito:
2011/02/18 14:55:47| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 14:55:47| Process ID 14459
2011/02/18 14:55:47| With 1024 file descriptors available
2011/02/18 14:55:47| Using epoll for the IO loop
2011/02/18 14:55:47| Performing DNS Tests...
2011/02/18 14:56:04| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 14:56:04| Process ID 14467
2011/02/18 14:56:04| With 1024 file descriptors available
2011/02/18 14:56:04| Using epoll for the IO loop
2011/02/18 14:56:04| Performing DNS Tests...
2011/02/18 14:55:47| Successful DNS name lookup tests...
2011/02/18 14:55:47| DNS Socket created at 0.0.0.0, port 42067, FD 6
2011/02/18 14:55:47| Adding nameserver 192.168.1.1 from /etc/resolv.conf
2011/02/18 14:55:47| User-Agent logging is disabled.
2011/02/18 14:55:47| Referer logging is disabled.
2011/02/18 14:55:47| logfileOpen: opening log /var/log/squid/access.log
2011/02/18 14:55:47| Unlinkd pipe opened on FD 11
2011/02/18 14:55:47| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2011/02/18 14:55:47| Target number of buckets: 425
2011/02/18 14:55:47| Using 8192 Store buckets
2011/02/18 14:55:47| Max Mem size: 8192 KB
2011/02/18 14:55:47| Max Swap size: 102400 KB
2011/02/18 14:55:47| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2011/02/18 14:55:47| logfileOpen: opening log /var/log/squid/store.log
2011/02/18 14:55:47| Rebuilding storage in /var/spool/squid (DIRTY)
2011/02/18 14:55:47| Using Least Load store dir selection
2011/02/18 14:55:47| Current Directory is /
2011/02/18 14:55:47| Loaded Icons.
2011/02/18 14:56:10| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 14.
2011/02/18 14:56:10| Accepting ICP messages at 0.0.0.0, port 3130, FD 15.
2011/02/18 14:56:10| HTCP Disabled.
2011/02/18 14:56:10| WCCP Disabled.
2011/02/18 14:56:10| Ready to serve requests.
2011/02/18 14:56:10| Store rebuilding is 30.9% complete
2011/02/18 14:56:10| Done reading /var/spool/squid swaplog (13269 entries)
2011/02/18 14:56:10| Finished rebuilding storage from disk.
2011/02/18 14:56:10| 9682 Entries scanned
2011/02/18 14:56:10| 0 Invalid entries.
2011/02/18 14:56:10| 0 With invalid flags.
2011/02/18 14:56:10| 9682 Objects loaded.
2011/02/18 14:56:10| 0 Objects expired.
2011/02/18 14:56:10| 3586 Objects cancelled.
2011/02/18 14:56:10| 0 Duplicate URLs purged.
2011/02/18 14:56:10| 0 Swapfile clashes avoided.
2011/02/18 14:56:10| Took 22.8 seconds ( 424.8 objects/sec).
2011/02/18 14:56:10| Beginning Validation Procedure
2011/02/18 14:56:10| Completed Validation Procedure
2011/02/18 14:56:10| Validated 6096 Entries
2011/02/18 14:56:10| store_swap_size = 79908k
2011/02/18 14:56:11| storeLateRelease: released 0 objects
2011/02/18 14:56:27| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 14:56:27| Process ID 14490
2011/02/18 14:56:27| With 1024 file descriptors available
2011/02/18 14:56:27| Using epoll for the IO loop
2011/02/18 14:56:27| Performing DNS Tests...
2011/02/18 14:56:44| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 14:56:44| Process ID 14512
2011/02/18 14:56:44| With 1024 file descriptors available
2011/02/18 14:56:44| Using epoll for the IO loop
2011/02/18 14:56:44| Performing DNS Tests...
2011/02/18 14:56:27| Successful DNS name lookup tests...
2011/02/18 14:56:27| DNS Socket created at 0.0.0.0, port 59476, FD 6
2011/02/18 14:56:27| Adding nameserver 192.168.1.1 from /etc/resolv.conf
2011/02/18 14:56:27| User-Agent logging is disabled.
2011/02/18 14:56:27| Referer logging is disabled.
2011/02/18 14:56:27| logfileOpen: opening log /var/log/squid/access.log
2011/02/18 14:56:27| Unlinkd pipe opened on FD 11
2011/02/18 14:56:27| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2011/02/18 14:56:27| Target number of buckets: 425
2011/02/18 14:56:27| Using 8192 Store buckets
2011/02/18 14:56:27| Max Mem size: 8192 KB
2011/02/18 14:56:27| Max Swap size: 102400 KB
2011/02/18 14:56:27| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2011/02/18 14:56:27| logfileOpen: opening log /var/log/squid/store.log
2011/02/18 14:56:27| Rebuilding storage in /var/spool/squid (DIRTY)
2011/02/18 14:56:27| Using Least Load store dir selection
2011/02/18 14:56:27| Current Directory is /root
2011/02/18 14:56:27| Loaded Icons.
2011/02/18 14:56:47| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 13.
2011/02/18 14:56:47| Accepting ICP messages at 0.0.0.0, port 3130, FD 14.
2011/02/18 14:56:47| HTCP Disabled.
2011/02/18 14:56:47| WCCP Disabled.
2011/02/18 14:56:47| Ready to serve requests.
2011/02/18 14:56:47| Store rebuilding is 30.9% complete
2011/02/18 14:56:47| Done reading /var/spool/squid swaplog (13268 entries)
2011/02/18 14:56:47| Finished rebuilding storage from disk.
2011/02/18 14:56:47| 9682 Entries scanned
2011/02/18 14:56:47| 0 Invalid entries.
2011/02/18 14:56:47| 0 With invalid flags.
2011/02/18 14:56:47| 9682 Objects loaded.
2011/02/18 14:56:47| 0 Objects expired.
2011/02/18 14:56:47| 3586 Objects cancelled.
2011/02/18 14:56:47| 0 Duplicate URLs purged.
2011/02/18 14:56:47| 0 Swapfile clashes avoided.
2011/02/18 14:56:47| Took 20.3 seconds ( 476.2 objects/sec).
2011/02/18 14:56:47| Beginning Validation Procedure
2011/02/18 14:56:47| Completed Validation Procedure
2011/02/18 14:56:47| Validated 6096 Entries
2011/02/18 14:56:47| store_swap_size = 79908k
2011/02/18 14:56:48| storeLateRelease: released 0 objects
2011/02/18 14:57:07| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 14:57:07| Process ID 14536
2011/02/18 14:57:07| With 1024 file descriptors available
2011/02/18 14:57:07| Using epoll for the IO loop
2011/02/18 14:57:07| Performing DNS Tests...
2011/02/18 14:57:07| Successful DNS name lookup tests...
2011/02/18 14:57:07| DNS Socket created at 0.0.0.0, port 56110, FD 6
2011/02/18 14:57:07| Adding nameserver 192.168.1.1 from /etc/resolv.conf
2011/02/18 14:57:07| User-Agent logging is disabled.
2011/02/18 14:57:07| Referer logging is disabled.
2011/02/18 14:57:07| logfileOpen: opening log /var/log/squid/access.log
2011/02/18 14:57:07| Unlinkd pipe opened on FD 11
2011/02/18 14:57:07| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2011/02/18 14:57:07| Target number of buckets: 425
2011/02/18 14:57:07| Using 8192 Store buckets
2011/02/18 14:57:07| Max Mem size: 8192 KB
2011/02/18 14:57:07| Max Swap size: 102400 KB
2011/02/18 14:57:07| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2011/02/18 14:57:07| logfileOpen: opening log /var/log/squid/store.log
2011/02/18 14:57:07| Rebuilding storage in /var/spool/squid (DIRTY)
2011/02/18 14:57:07| Using Least Load store dir selection
2011/02/18 14:57:07| Current Directory is /
2011/02/18 14:57:07| Loaded Icons.
2011/02/18 14:57:37| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 14.
2011/02/18 14:57:37| Accepting ICP messages at 0.0.0.0, port 3130, FD 15.
2011/02/18 14:57:37| HTCP Disabled.
2011/02/18 14:57:37| WCCP Disabled.
2011/02/18 14:57:37| Ready to serve requests.
2011/02/18 14:57:37| Store rebuilding is 30.9% complete
2011/02/18 14:57:37| Done reading /var/spool/squid swaplog (13268 entries)
2011/02/18 14:57:37| Finished rebuilding storage from disk.
2011/02/18 14:57:37| 9682 Entries scanned
2011/02/18 14:57:37| 0 Invalid entries.
2011/02/18 14:57:37| 0 With invalid flags.
2011/02/18 14:57:37| 9682 Objects loaded.
2011/02/18 14:57:37| 0 Objects expired.
2011/02/18 14:57:37| 3586 Objects cancelled.
2011/02/18 14:57:37| 0 Duplicate URLs purged.
2011/02/18 14:57:37| 0 Swapfile clashes avoided.
2011/02/18 14:57:37| Took 30.3 seconds ( 319.1 objects/sec).
2011/02/18 14:57:37| Beginning Validation Procedure
2011/02/18 14:57:37| Completed Validation Procedure
2011/02/18 14:57:37| Validated 6096 Entries
2011/02/18 14:57:37| store_swap_size = 79908k
2011/02/18 14:57:38| storeLateRelease: released 0 objects
2011/02/18 14:59:14| Preparing for shutdown after 47 requests
2011/02/18 14:59:14| Waiting 30 seconds for active connections to finish
2011/02/18 14:59:14| FD 14 Closing HTTP connection
2011/02/18 14:59:45| Shutting down...
2011/02/18 14:59:45| FD 15 Closing ICP connection
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.google.com/search?q=precedencia+operadores+un%C3%A1rios+AS3&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:pt-BR:official&client=firefox-a
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://search.conduit.com/?ctid=CT2851643&SearchSource=13
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://settings.toolbar.search.conduit.com/root/CT2851643/CT2851643
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://api.facebook.com/restserver.php
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.json.org/json.as
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.110 connection due to lifetime timeout
2011/02/18 14:59:45| http://mail.google.com/a/pinatainterativa.com.br/?ui=2&ik=8e2a854ca8&rid=9a..&view=gdt&auto=1&_reqid=2651031&pcd=1&mb=0&rt=j
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://weather.services.conduit.com/weatherrequest.ctp?type=forecast&imagetype=DEFAULT&locale=pt&locationid=BRXX0201
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.105 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.pam.art.br/2011/
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.google.com/search?q=precedencia+operadores+un%C3%A1rios&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:pt-BR:official&client=firefox-a
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.110 connection due to lifetime timeout
2011/02/18 14:59:45| http://mail.google.com/a/pinatainterativa.com.br/?ui=2&ik=8e2a854ca8&view=jr&type=p&jsid=eav9pqi2zj1l
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.105 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.pam.art.br/2011/
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.118 connection due to lifetime timeout
2011/02/18 14:59:45| http://info.ooyala.com/info/secondary/
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://suggestqueries.google.com/complete/search?output=firefox&client=firefox&hl=pt-BR&q=precedencia+operadores+un%C3%A1rios+A
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://suggestqueries.google.com/complete/search?output=firefox&client=firefox&hl=pt-BR&q=precedencia+operadores+un%C3%A1rios+
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.118 connection due to lifetime timeout
2011/02/18 14:59:45| http://mail.google.com/a/tomplay.com.br/channel/test?VER=8&at=AF6bupNjs6uCMAQQswEF8WJxfShNIROc2w&it=9486298&MODE=init&zx=ff5lx97xhz87&t=1
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.106 connection due to lifetime timeout
2011/02/18 14:59:45| http://suggestqueries.google.com/complete/search?output=firefox&client=firefox&hl=pt-BR&q=precedencia+operadores+un%C3%A1rios+AS
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.118 connection due to lifetime timeout
2011/02/18 14:59:45| http://l.player.ooyala.com/errors/report?log=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&ts=1298048330
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.118 connection due to lifetime timeout
2011/02/18 14:59:45| http://l.player.ooyala.com/errors/report?log=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&ts=1298048329
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.110 connection due to lifetime timeout
2011/02/18 14:59:45| http://www.google.com/images/cleardot.gif?zx=pc0k0mqc14mt
2011/02/18 14:59:45| WARNING: Closing client 192.168.1.110 connection due to lifetime timeout
2011/02/18 14:59:45| http://mail.google.com/a/tomplay.com.br/?ui=2&ik=bf2f5dfff2&rid=1a5..&view=gdt&auto=1&_reqid=3451028&pcd=1&mb=0&rt=j
2011/02/18 14:59:45| Closing unlinkd pipe on FD 11
2011/02/18 14:59:45| storeDirWriteCleanLogs: Starting...
2011/02/18 14:59:45| Finished. Wrote 6096 entries.
2011/02/18 14:59:45| Took 0.0 seconds (2949201.7 entries/sec).
CPU Usage: 0.110 seconds = 0.070 user + 0.040 sys
Maximum Resident Size: 31040 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena: 7152 KB
Ordinary blocks: 4341 KB 268 blks
Small blocks: 0 KB 6 blks
Holding blocks: 396 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 2810 KB
Total in use: 4737 KB 63%
Total free: 2810 KB 37%
2011/02/18 14:59:45| logfileClose: closing log /var/log/squid/store.log
2011/02/18 14:59:45| logfileClose: closing log /var/log/squid/access.log
2011/02/18 14:59:45| Squid Cache (Version 2.7.STABLE9): Exiting normally.
2011/02/18 15:01:12| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 15:01:12| Process ID 14730
2011/02/18 15:01:12| With 1024 file descriptors available
2011/02/18 15:01:12| Using epoll for the IO loop
2011/02/18 15:01:12| Performing DNS Tests...
2011/02/18 15:01:15| Starting Squid Cache version 2.7.STABLE9 for x86_64-debian-linux-gnu...
2011/02/18 15:01:15| Process ID 14751
2011/02/18 15:01:15| With 1024 file descriptors available
2011/02/18 15:01:15| Using epoll for the IO loop
2011/02/18 15:01:15| Performing DNS Tests...
2011/02/18 15:01:15| Successful DNS name lookup tests...
2011/02/18 15:01:15| DNS Socket created at 0.0.0.0, port 52015, FD 6
2011/02/18 15:01:15| Adding nameserver 192.168.1.1 from /etc/resolv.conf
2011/02/18 15:01:15| User-Agent logging is disabled.
2011/02/18 15:01:15| Referer logging is disabled.
2011/02/18 15:01:15| logfileOpen: opening log /var/log/squid/access.log
2011/02/18 15:01:15| Unlinkd pipe opened on FD 11
2011/02/18 15:01:15| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2011/02/18 15:01:15| Target number of buckets: 425
2011/02/18 15:01:15| Using 8192 Store buckets
2011/02/18 15:01:15| Max Mem size: 8192 KB
2011/02/18 15:01:15| Max Swap size: 102400 KB
2011/02/18 15:01:15| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2011/02/18 15:01:15| logfileOpen: opening log /var/log/squid/store.log
2011/02/18 15:01:15| Rebuilding storage in /var/spool/squid (CLEAN)
2011/02/18 15:01:15| Using Least Load store dir selection
2011/02/18 15:01:15| Current Directory is /
2011/02/18 15:01:15| Loaded Icons.
2011/02/18 15:01:35| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 14.
2011/02/18 15:01:35| Accepting ICP messages at 0.0.0.0, port 3130, FD 15.
2011/02/18 15:01:35| HTCP Disabled.
2011/02/18 15:01:35| WCCP Disabled.
2011/02/18 15:01:35| Ready to serve requests.
2011/02/18 15:01:35| Store rebuilding is 67.2% complete
2011/02/18 15:01:35| Done reading /var/spool/squid swaplog (6096 entries)
2011/02/18 15:01:35| Finished rebuilding storage from disk.
2011/02/18 15:01:35| 6096 Entries scanned
2011/02/18 15:01:35| 0 Invalid entries.
2011/02/18 15:01:35| 0 With invalid flags.
2011/02/18 15:01:35| 6096 Objects loaded.
2011/02/18 15:01:35| 0 Objects expired.
2011/02/18 15:01:35| 0 Objects cancelled.
2011/02/18 15:01:35| 0 Duplicate URLs purged.
2011/02/18 15:01:35| 0 Swapfile clashes avoided.
2011/02/18 15:01:35| Took 20.3 seconds ( 300.3 objects/sec).
2011/02/18 15:01:35| Beginning Validation Procedure
2011/02/18 15:01:35| Completed Validation Procedure
2011/02/18 15:01:35| Validated 6096 Entries
2011/02/18 15:01:35| store_swap_size = 79908k
2011/02/18 15:01:36| storeLateRelease: released 0 objects
2011/02/18 15:35:13| httpReadReply: Excess data from "GET http://209.191.82.80/client/clogin?login=__godiva__&response=94946e0ec196fa4a206fb1c92ef01289&.partner=rogers-acs&challenge=qVacEPpMMd0J8bllmgiM6DoFG7iH&version=2"
2011/02/18 15:58:38| Failure Ratio at 1.00
2011/02/18 15:58:38| Going into hit-only-mode for 5 minutes...
2011/02/18 16:04:01| Failure Ratio at 1.02
2011/02/18 16:04:01| Going into hit-only-mode for 5 minutes...
-
2011/02/18 14:55:47| With 1024 file descriptors available
Isso vai te criar problema... :(
Dependendo da quantidade de clientes que vc tenha, esse limite de descritores de arquivos faz com que eles esgotem. E também de acordo com o tipo de cache que você usa (e.g. "aufs"), ele "perde" FDs, fazendo com que eles esgotem depois de algum tempo rodando.
Tem como vc atualizar seu sistema pro Squid3?
-
Atualizei o squid para o 3 e quando troquei os squid.conf do antigo para o novo quando mandei reiniciar o serviço apresentou as seguintes warnings:
* Creating Squid HTTP Proxy 3.x cache structure
2011/02/21 08:29:25| ERROR: '0.0.0.0/0.0.0.0' needs to be replaced by the term 'all'.
2011/02/21 08:29:25| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
2011/02/21 08:29:25| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2011/02/21 08:29:25| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2011/02/21 08:29:25| WARNING: You should probably remove '::/0' from the ACL named 'all'
2011/02/21 08:29:25| ERROR: '0.0.0.0/0.0.0.0' needs to be replaced by the term 'all'.
2011/02/21 08:29:25| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
2011/02/21 08:29:25| Creating Swap Directories
2011/02/21 08:29:25| ERROR: '0.0.0.0/0.0.0.0' needs to be replaced by the term 'all'.
2011/02/21 08:29:25| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
2011/02/21 08:29:25| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2011/02/21 08:29:25| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2011/02/21 08:29:25| WARNING: You should probably remove '::/0' from the ACL named 'all'
2011/02/21 08:29:25| ERROR: '0.0.0.0/0.0.0.0' needs to be replaced by the term 'all'.
2011/02/21 08:29:25| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
[ OK ]
-
Troquei as sentenças 0.0.0.0/0.0.0.0 para all e parou de dar as warnings e aparentemente o proxy está normal vou monitorar durante hoje e qualquer problema posto aqui.
Obrigado pela atenção pessoal.
-
Depois que instalei o novo squid no servidor ele parou de pingar a internet, so pinga rede local,como resolvo isso?
-
Não tem a ver com o Squid. Os pings não passam pelo proxy.
-
Mudei as configurações do squid e mesmo assim hora ele funciona hora da timeout.
acl manager proto cache_object
acl localhost src all
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_port 3128
cache_access_log /var/log/squid/access.log
acl programacao src all
acl estagiario src 192.168.1.152
delay_pools 2
# Significa que teremos dois controles de banda
# Primeiro controle
delay_class 1 2
# -1/-1 significa que nãteremos limites para a delay pool 1
delay_parameters 1 1572864/1572864 131072/131072
delay_access 1 allow programacao
# Segundo controle
delay_class 2 2
# Limita a sua banda para +- 64Kbits
delay_parameters 2 1572864/1572864 131072/131072
delay_access 2 allow estagiario
O erro:
(https://ubuntuforum-pt.org/proxy.php?request=http%3A%2F%2Fimg836.imageshack.us%2Fimg836%2F8926%2Ferrosquid.jpg&hash=292d03a7271b8ccf4baa72e80b05f026be1e6bff)
-
O erro aí é claro: DNS. Cadastre outro servidor DNS em sua máquina, ou diretamente no Squid.
P.ex.:
dns_nameserver 8.8.8.8
dns_nameserver 208.67.220.220
-
Coloquei os IPs de DNS e aparentemente resolveram meu problemas so que o carregamento das paginas aumentou absurdamente.
-
ele deve estar primeiro dando timeout no servidor padrão, pra depois tentar os alternativos que funcionam.
Vc cadastrou os novos servidores no squid, ou no arquivo /etc/resolv.conf?
-
Cadastrei no squid.conf
dns_nameservers 192.168.1.1 201.17.128.23 201.17.128.110
-
Mude a ordem, coloque o seu DNS como terceiro.
Esse pode ser também o motivo do problema do ping, se seu servidor DNS local não estiver funcionando.
Qual a máquina que está implementando esse servidor? Um roteador dedicado, outra máquina Linux?
-
Outra maquina linux, ná verdade é o servidor de arquivos,webserver,dominio,proxy.
-
confirme que o DNS está funcionando estável, lá, e que não esteja bloqueando teu acesso.
-
Troquei realmente ele melhorou a velocidade de carregamento da pagina.Vou monitorar durante algumas horas agora.
-
Monitorar squid... acho que isso vai te interessar.
http://www.cyberciti.biz/nixcraft/linux/docs/uniqlinuxfeatures/mrtg/
Esse link é pra RedHat, mas pra Ubuntu é basicamente a mesma coisa, assim já dá pra ter uma idéia.