Re: [squid-users] high cpu usage

Hello,

Maybe the problem is the configuration. Not sure what I might need to
change to
correct issue with the random high cpu. Any ideas?

Squid was compiled with:
--prefix=/usr/local/squid
--enable-delay-pools
--enable-snmp
--enable-auth-modules=NCSA

The config file is as follows:

http_port 0.0.0.0:3128
http_port 0.0.0.0:8180
icp_port 3130
tcp_outgoing_address 255.255.255.255
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
icp_query_timeout 0
maximum_icp_query_timeout 2000
mcast_icp_query_timeout 2000
dead_peer_timeout 10 seconds
hierarchy_stoplist cgi-bin
hierarchy_stoplist ?
no_cache Deny QUERY
no_cache Deny mysql_url_test
cache_mem 8388608 bytes
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4194304 bytes
minimum_object_size 0 bytes
maximum_object_size_in_memory 8192 bytes
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir ufs /d1/squid_cache 2048 16 256
cache_access_log /usr/local/squid/logs/access.log
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
emulate_httpd_log on
log_ip_on_direct on
mime_table /usr/local/squid/etc/mime.conf
log_mime_hdrs off
pid_filename /usr/local/squid/logs/squid.pid
debug_options ALL,1
log_fqdn off
client_netmask 255.255.255.255
ftp_user Squid@
ftp_list_width 32
ftp_passive on
dns_retransmit_interval 5 seconds
dns_timeout 300 seconds
diskd_program /usr/local/squid/libexec/squid/diskd
unlinkd_program /usr/local/squid/libexec/squid/unlinkd
redirect_children 5
redirect_rewrites_host_header on
authenticate_program /usr/local/squid/bin/ncsa_auth
authenticate_program /usr/local/squid/etc/users
authenticate_children 20
authenticate_ttl 3600 seconds
authenticate_ip_ttl 0 seconds
authenticate_ip_ttl_is_strict on
wais_relay_port 0
request_header_max_size 10240 bytes
request_body_max_size 31457280 bytes
reply_body_max_size 52428800 bytes
reference_age 31557790 seconds
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
negative_ttl 300 seconds
positive_dns_ttl 21600 seconds
negative_dns_ttl 300 seconds
range_offset_limit 0 bytes
connect_timeout 120 seconds
peer_connect_timeout 30 seconds
siteselect_timeout 4 seconds
read_timeout 900 seconds
request_timeout 30 seconds
client_lifetime 86400 seconds
half_closed_clients on
pconn_timeout 120 seconds
ident_timeout 10 seconds
shutdown_lifetime 30 seconds
acl QUERY urlpath_regex cgi-bin
acl QUERY urlpath_regex \?
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1
acl SSL_ports port 443
acl SSL_ports port 7002
acl SSL_ports port 563
acl Safe_ports port 80
acl Safe_ports port 443
acl Safe_ports port 21
acl Safe_ports port 1025-65535
acl Safe_ports port 591
acl Safe_ports port 563
acl Safe_ports port 210
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 777
acl CONNECT method CONNECT
acl SSL method CONNECT
acl homeoffice src xx.xx.0.0/255.255.0.0
acl meidist src xx.xx.0.0/255.255.0.0
acl meisales src xxx.xxx.0.0/255.255.0.0
acl winbook src xx.xx.0.0/255.255.0.0
acl hoed src xx.xx.0.0/255.255.0.0
acl csd src xx.xx.0.0/255.255.0.0
acl ras src xx.xxx.x.0/255.255.255.0
acl vpn src xx.xxx.x.0/255.255.255.0
acl sysadm src xx.xx.x.xxx
acl mislxsrv src xx.xx.x.xx
acl cllinux src xx.xxx.x.xxx
acl chlinux src xx.xxx.xx.xxx
acl colinux src xx.xxx.x.xxx
acl cmlinux src xx.xxx.xx.xxx
acl dllinux src xx.xxx.xx.xxx
acl dvlinux src xx.xxx.xx.xxx
acl fflinux src xx.xxx.x.100
acl hnlinux src xx.xxx.x.100
acl lilinux src xx.xxx.xx.100
acl mrlinux src xx.xxx.x.100
acl ovlinux src xx.xxx.xx.100
acl sclinux src xx.xxx.xx.100
acl sdlinux src xx.xxx.x.100
acl shlinux src xx.xxx.x.100
acl splinux src xx.xxx.xx.100
acl tnlinux src xx.xxx.x.100
acl welinux src xx.xxx.x.100
acl wtlinux src xx.xxx.xx.100
acl mysql_url_test url_regex ^http://mysql.microelectronics.com
acl FTP proto ftp
acl passwd proxy_auth REQUIRED
acl worm urlpath_regex \.eml$
http_access Deny worm
http_access Allow manager localhost
http_access Allow manager sysadm
http_access Deny manager !localhost
http_access Deny !Safe_ports
http_access Deny SSL !SSL_ports
http_access Deny CONNECT !SSL_ports
http_access Allow homeoffice passwd
http_access Allow meidist passwd
http_access Allow meisales passwd
http_access Allow winbook passwd
http_access Allow hoed passwd
http_access Allow csd passwd
http_access Allow mislxsrv passwd
http_access Allow mislxsrv mysql_url_test
http_access Allow chlinux
http_access Allow cllinux
http_access Allow cmlinux
http_access Allow colinux
http_access Allow dllinux
http_access Allow dvlinux
http_access Allow fflinux
http_access Allow hnlinux
http_access Allow lilinux
http_access Allow mrlinux
http_access Allow ovlinux
http_access Allow sclinux
http_access Allow sdlinux
http_access Allow shlinux
http_access Allow splinux
http_access Allow tnlinux
http_access Allow welinux
http_access Allow wtlinux
http_access Allow ras passwd
http_access Allow vpn passwd
http_access Deny !homeoffice passwd
http_access Allow FTP
http_access Deny all
icp_access Allow all
proxy_auth_realm Squid proxy-caching web server
ident_lookup_access Deny all
cache_mgr webmaster
cache_effective_user squid
cache_effective_group squid
announce_period 31536000 seconds
announce_host tracker.ircache.net
announce_port 3131
httpd_accel_port 80
httpd_accel_single_host off
httpd_accel_with_proxy off
httpd_accel_uses_host_header off
dns_testnames netscape.com
dns_testnames internic.net
dns_testnames nlanr.net
dns_testnames microsoft.com
logfile_rotate 0
append_domain .microcenter.com
tcp_recv_bufsize 0 bytes
err_html_text
memory_pools on
memory_pools_limit 0 bytes
forwarded_for on
log_icp_queries on
icp_hit_stale off
minimum_direct_hops 4
minimum_direct_rtt 400
cachemgr_passwd disable shutdown
cachemgr_passwd XXXXXXXXXX stats/objects
cachemgr_passwd XXXXXXXXXX config
store_avg_object_size 13 KB
store_objects_per_bucket 20
client_db on
netdb_low 900
netdb_high 1000
netdb_ping_period 300 seconds
query_icmp off
test_reachability off
buffered_logs off
reload_into_ims off
always_direct Allow FTP
icon_directory /usr/local/squid/etc/icons
error_directory /usr/local/squid/etc/errors
minimum_retry_timeout 5 seconds
maximum_single_addr_tries 3
snmp_port 3401
snmp_access Allow mislxsrv
snmp_access Deny all
snmp_incoming_address 0.0.0.0
snmp_outgoing_address 255.255.255.255
as_whois_server whois.ra.net
wccp_router 0.0.0.0
wccp_version 4
wccp_incoming_address 0.0.0.0
wccp_outgoing_address 255.255.255.255
delay_pools 1
delay_class 1 1
delay_access 1 Allow mislxsrv
delay_access 1 Deny all
delay_parameters 1 16000/16000
delay_initial_bucket_level 50
incoming_icp_average 6
incoming_http_average 4
incoming_dns_average 4
min_icp_poll_cnt 8
min_dns_poll_cnt 8
min_http_poll_cnt 8
max_open_disk_fds 0
offline_mode off
uri_whitespace strip
nonhierarchical_direct on
prefer_direct off
strip_query_terms on
redirector_bypass off
ignore_unknown_nameservers on
client_persistent_connections on
server_persistent_connections on
pipeline_prefetch on
high_response_time_warning 0
high_page_fault_warning 0
high_memory_warning 0 bytes
store_dir_select_algorithm least-load
ie_refresh off

------------------------------------------------------------------------
Generated Tue, 19 Mar 2002 17:09:40 GMT, by
cachemgr.cgi/2.4.STABLE2@sysadm.microcenter.com

Joe Cooper wrote:

> This isn't expected behavior for Squid, so tell us what configure
> options you used...
>
> Pat Lendon wrote:
>
>> Hello All,
>>
>> Randomly, the cpu usage on system shows squid at 99%. The cache log
>> does not contain any information at the time cpu was pegged. I
>> copied the cache manager log.
>> We are running Squid 2.4.STABLE4 on RedHat Linux. This is a brand
>> new system with two AMD Athlon(tm)MP 1800+ processors and 1gig
>> memory. Any ideas on cause of cpu at 99%?
>> Is the cache causing high cpu usage. I noticed the page faults with
>> physical i/o
>> at 402. Is this a concern?
>
Received on Tue Mar 19 2002 - 10:18:29 MST