Chinaunix

标题: squid3.0 退出重启问题 [打印本页]

作者: iteeqg 时间: 2010-04-27 10:09
标题: squid3.0 退出重启问题
环境：CENTOS+squid3.0

公司一台squid代理查看　cache.log看到经常SQUID会自动退出重启

日志如下：
2010/04/27 09:43:25| WARNING: All ntlmauthenticator processes are busy.
2010/04/27 09:43:25| WARNING: 238 pending requests queued
2010/04/27 09:43:25| Consider increasing the number of ntlmauthenticator processes in your config file.

我已经将验证数量进程加大了，仍然会出现，这台机器也就５百多人在使用.

还望各位大大指教

作者: 7717060 时间: 2010-04-27 11:55
能看看你配置文件不?

作者: iteeqg 时间: 2010-04-28 11:14
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 338
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 338
auth_param basic realm Access Internet
auth_param basic credentialsttl 4 hours
auth_param basic casesensitive off
authenticate_ip_ttl 14400 seconds
external_acl_type NT_global_group %LOGIN /usr/local/squid-icap/libexec/wbinfo_group.pl

还望指点哦

作者: 13319085 时间: 2010-04-29 16:26
就这些？帮不了你

作者: iteeqg 时间: 2010-05-04 17:18
本帖最后由 iteeqg 于 2010-05-04 17:20 编辑

不好意思，还望　指点..
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 338
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 338
auth_param basic realm Access Internet
auth_param basic credentialsttl 4 hours
auth_param basic casesensitive off
authenticate_ip_ttl 14400 seconds
external_acl_type NT_global_group %LOGIN /usr/local/squid-icap/libexec/wbinfo_group.pl
acl client_limit max_user_ip 2
####deny over 4 conn
#acl OverConnLimit maxconn 12
#http_access deny OverConnLimit
acl password proxy_auth REQUIRED
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl WorkingHours time MTWHF 08:50-12:30 13:50-18:00

acl adminboxes src 127.0.0.1
acl PURGE method PURGE
acl SSL_ports port 80 92 443 10443 8080
acl Safe_ports port 21 80 81 90
acl CONNECT method CONNECT
#http_access deny denygameweb
#http_access deny OverConnLimit

http_access allow adminboxes PURGE
http_access deny PURGE
http_access allow hx1 to_localhost
http_access allow blog
http_access allow manager localhost
http_access deny manager
#http_access deny localserver
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny client_limit
http_access allow password
http_access deny all
icp_access allow all
http_port 3128
http_port 3129 transparent
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 1536 MB
maximum_object_size_in_memory 256 KB
#range_offset_limit -1 KB
#quick_abort_min 50 MB
#quick_abort_max 100 MB
#quick_abort_pct 80
reload_into_ims on
pconn_timeout 180 seconds
reply_body_max_size    0

#limit the download size default 0 is no limit
cache_dir ufs /cache03 40960 16 256
cache_dir ufs /cache04 40960 16 256
maximum_object_size 32768 KB
cache_swap_low 65
cache_swap_high 80
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log none
logfile_rotate 365
emulate_httpd_log off
pid_filename /var/run/squid.pid
ftp_user hello@on.net
refresh_pattern ^ftp:          1440 20%    10080
refresh_pattern ^gopher:       1440 0%    1440
refresh_pattern .             0    20%    4320

acl apache rep_header Server ^Apache
#broken_vary_encoding allow apache
half_closed_clients off
cache_mgr admin@***.com
cache_effective_user squid
cache_effective_group squid
visible_hostname proxy.***.com
icp_port 0
memory_pools off
forwarded_for off
cachemgr_passwd disable authenticator config shutdown
cachemgr_passwd none info counters
cachemgr_passwd *** all
coredump_dir /usr/local/squid6/var/cache
icap_enable on
icap_preview_enable on
icap_preview_size 128
icap_send_client_ip on
icap_service service_avi_req reqmod_precache 0 icap://localhost:1344/srv_clamav
icap_service service_avi respmod_precache 1 icap://localhost:1344/srv_clamav
icap_class class_antivirus service_avi
icap_access class_antivirus allow all
icap_class class_antivirus_req service_avi_req
icap_access class_antivirus_req allow all

大致是这样，有一些ACL涉及到隐私从中作了下修改，还望见谅

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)