RE: [squid-users] SNMP which object?

* Have you considered using the proxy.pac autoconfigure script?

Yes, I do use a proxy.pac file, unfortunately we have the whole spectrum of
browsers here at the Uni and some including Netscape 6 won't support it. I
agree that this would be easier.

Rebuilding the DNS isn't really that much of a pain, the script does
everything for us and emails any errors to us.

Configuring everyone's browser is a different story, fortunately 80% of our
users log into Novell 4 or 5 so I have created an application object which
is ran every time they log in, this sets various things including the
browser cache settings. Once again easy with IE but a pain with Netscape.
The other 20% well... It'll be alright. I have created some web based
instructions to follow, which depending on the load that It'll create we may
put a redirect to them on the router.

In the near future all http traffic and possibly ftp will be denied by our
gateway router unless it has come from one of our caches, this saves us £50K
a year on transatlantic traffic, as our cache uses the national JANET cache
as a peer. This will require everyone not logging into Novell to alter
their cache settings.

With respect to load on the server, it copes very well it has only died once
from anything other than a dodgy HDD in the last 6 months. However we're
getting a shiny new Sun Ultra 10 to replace the Intel box as the main cache.
It currently gets around 2.1 million requests per day, and a hit rate of 46%
- 50%.

Cheers,

Jezz Palmer

****************************************
Jezz Palmer.
Internet Systems Officer.
Library and Information Services
University of Wales, Swansea
Singleton Park
Swansea
SA2 8PP
Tel 01792 513260
****************************************

 -----Original Message-----
From: Edmund Haworth [mailto:ehaworth@wortech.ac.uk]
Sent: 27 March 2001 13:41
To: Palmer J.D.F.; squid-users@squid-cache.org
Subject: RE: [squid-users] SNMP which object?

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Have you considered using the proxy.pac autoconfigure script?

once the server dies, it'll back up onto a differant proxy server,
this wouldn't fix your inital problem of monitoring the proxy server
it's self, but it would avoid rebuilding DNS tables everytime it
died. the other problem would be 3000 PCs all connecting to one web
server may be a bad idea, and reconfiguration of browsers might be
fun too.

just a thought, might help?

Edmund Haworth
Assistant Network Engineer
Worcester College of Technology
Deansway
Worcs WR1 2JF

Tel: +44 1905 725516
Fax: +44 1905 28906
E-mail: ehaworth@wortech.ac.uk

- -----Original Message-----
From: Palmer J.D.F. [mailto:J.D.F.Palmer@Swansea.ac.uk]
Sent: 27 March 2001 12:51
To: 'squid-users@squid-cache.org'
Subject: [squid-users] SNMP which object?

Hi,

I have SNMP running on my squid servers and am monitoring them with
MRTG.
What I would like to do now is to use SNMP to detect whether the
squid
process has stopped responding for whatever reason.

At present I have a cron job which pings my main cache every 2 mins,
if
there is no response, the DNS tables are rebuilt re-assigning
wwwcache.swan.ac.uk to the IP address of the backup cache. The main
cache
is continually pinged until it is back up again, at this point the
DNS
tables are rebuilt again. Hence redirecting http traffic back
through the
main cache server.

The reason we were using ping was because we had an intermittent
hardware
fault which was the cause of 99% of crashes, this caused a kernel
panic and
therefore the network card would stop responding to ping. However
this HW
fault has been fixed and ping is no longer suitable for this type of
monitoring as squid/something else may die but ping still responds.

As we force nearly 3000 PC's through the cache, it is imperative that
problems are detected and the caches switched ASAP, as users are
unable to
access external sites whilst the cache is down.

I am going to use SNMP from now on to detect squid fatalities, but
I'd like
to know which SNMP objects I should use to base my testing on.

If anyone has any thought on this I'd be grateful

Many thanks,

Jezz Palmer.

****************************************
Jezz Palmer.
Internet Systems Officer.
Library and Information Services
University of Wales, Swansea
Singleton Park
Swansea
SA2 8PP
Tel 01792 513260
****************************************

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOsCKXIzgzPYUCliEEQIIgQCg52pCD2nYCMoLtYDehPLpAutejSQAn1Oa
0vGdD9mwLcNM/C/bHO8kJQbA
=A3A6
-----END PGP SIGNATURE-----
Received on Tue Mar 27 2001 - 06:30:07 MST