Re: [squid-users] Squid transparent mode slow down clients

Hi Ferraroni ,

Ferraroni Matteo wrote:
> Hi folks,
> I have a little bandwidth problem. My customer's network is simple like
> this: internet ---> squid 2.6 StabLe 5 (trasparent mode) ----> lan
> 172.16.0.0/16
>
> Now, the problem is that when I redirect the 80 port to 8080 (squid) all
> the clients' connection slow down (from 250 Kbyte/s to 20/30 kbyte/s),
> and when I disable the iptables rule all returns fast.

How did you measure the slowdown is speed? And what is your actual
bandwidth pipe?

>
> How can I solve this?
>
> Squid.conf
>
> http_port 8080 transparent
> icp_port 0
> htcp_port 0
> cache_access_log /var/log/squid/access.log
> cache_log /var/log/squid/cache.log
> cache_store_log /var/log/squid/store.log
> emulate_httpd_log on
> mime_table /etc/squid/mime.conf
> pid_filename /var/run/squid.pid
> dns_nameservers 213.140.2.12 208.67.222.222 193.205.245.66
> acl all src 0.0.0.0/0.0.0.0
> http_access allow all
>
> iptables rules
>
> $IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -s 172.16.0.0/16 -j
> REDIRECT --to-port 8080
> $IPTABLES -t nat -A POSTROUTING -s 172.16.0.0/16 -j SNAT --to-source
> 192.168.1.2

How many network interfaces does your Squid box have? So this box
performs NAT and Proxy service simultaneously?

Maybe you have large ACLs filtering on your squid.conf? What is the
output of "squidclient mgr:info"?

Thanking you...

>
>
> Thank you in advance
> Matteo
>
>
>

-- 
With best regards and good wishes,
Yours sincerely,
Tek Bahadur Limbu
System Administrator
(TAG/TDG Group)
Jwl Systems Department
Worldlink Communications Pvt. Ltd.
Jawalakhel, Nepal
http://www.wlink.com.np
http://teklimbu.wordpress.com