squid好慢,点一个链接要等待3-4秒

dw0620

操作系统SUSE10,1G内存，P43.0 ，squid和DNS都装在这台机器上，访问外网的时候有时候解析好慢。有时候要3-4秒。
请问是什么原因？

squid.conf

1. http_port 172.28.200.11:3128
   
2. cache_mgr guo_sheng@163.com
   
3. cache_dir ufs /var/cache/squid 1000 16 256
   
4. cache_mem 400 MB
   
5. cache_swap_low 90
   
6. cache_swap_high 95
   
7. dns_nameservers 202.102.192.68 202.102.199.68
   
8. maximum_object_size 4096 KB
   
9. maximum_object_size_in_memory 8 KB
   
10. error_directory /usr/share/squid/errors/Simplify_Chinese
    
11. ipcache_size 1024
    
12. ipcache_low 90
    
13. ipcache_high 95
    
14. fqdncache_size 1024
    
15. 
    
16. hierarchy_stoplist cgi-bin ?
    
17. hierarchy_stoplist -i ^https:\\ ?
    
18. acl QUERY urlpath_regex -i cgi-bin \? \.asp \.php \.jsp \.cgi
    
19. acl denyssl urlpath_regex -i ^https:\\
    
20. no_cache deny QUERY
    
21. no_cache deny denyssl
    
22. 
    
23. cache_access_log /var/log/squid/access.log
    
24. cache_log /var/log/squid/cache.log
    
25. cache_store_log /var/log/squid/store.log
    
26. cache_effective_user squid
    
27. cache_effective_group nogroup
    
28. visible_hostname proxy
    
29. client_netmask 255.255.255.255
    
30. httpd_accel_host virtual
    
31. httpd_accel_port 80
    
32. httpd_accel_with_proxy on
    
33. httpd_accel_uses_host_header on
    
34. 
    
35. acl admin arp "/etc/squid/adminlist"
    
36. acl office src "/etc/squid/worklist"
    
37. acl worktime time 8:00-12:00 14:30-18:00
    
38. acl all src 0.0.0.0/0.0.0.0
    
39. http_access allow admin
    
40. http_access allow office worktime
    
41. http_access deny all

复制代码

iptables

1. echo 1 > /proc/sys/net/ipv4/ip_forward
   
2. iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
   
3. iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
   
4. iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 3128
   
5. iptables -t nat -A POSTROUTING -o eth0 -j SNAT
   
6. iptables -A INPUT -p udp --dport 53 -j ACCEPT
   
7. iptables -A INPUT -p udp --sport 53 -j ACCEPT
   
8. iptables -A INPUT -p tcp --dport 80 -j ACCEPT
   
9. iptables -A FORWARD -p udp --dport 53 -j ACCEPT

复制代码