[squid-users] WCCP and ICP

From: Bradley, Stephen W. Mr. <bradlesw_at_muohio.edu>
Date: Mon, 29 Mar 2010 11:31:05 -0400

Okay, I have been fighting to get WCCP and ICP working in a two server test= cluster for weeks now with no luck.

The WCCP was not big deal but I think that with just WCCP you just get a ro= uter to send the HTTP requests to each server. I do not think that if the = server doesn't have the request the router checks the other server. What t= hat would mean is that with just WCCP and two servers we only get half as m= any potential HITS as we could if both servers were searched for each reque= st.

That being said here is my confgs from the two test servers. Like I said W= CCP works fine.

How do I get the two servers to talk to each other to improve cache hits on= the stream?
(I plan on putting this into a bigger group of servers.)

Thanks in advance.
Steve

Both compiled with:

CFLAGS="-DNUMTHREADS=128" ./configure --prefix=/usr --includedir=/usr/include --datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid --enable-wccpv2 --enable-linux-netfilter --enable-default-err-language=English --enable-err-languages=English --enable-async-io --enable-removal-policies=lru,heap --disable-auth --disable-ident-lookups --enable-storeio="aufs" --enable-cache-digests --enable-icmp --with-maxfd=65536 --enable-poll

Server1

acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network acl localnet src X.X.X.X/16 icp_access allow all acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow all localhost
http_access deny all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
cache_effective_user squid
cache_effective_group squid
cache_store_log none
cache_dir aufs /opt/cache/squid 16000 16 256 access_log /opt/cache/squid/log/access.log squid cache_log /opt/cache/squid/log/cache.log acl QUERY urlpath_regex cgi-bin \?
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
half_closed_clients off
maximum_object_size 32768 KB
cache_swap_high 100%
cache_swap_low 80%
cache deny QUERY
cache_mem 2048 MB
wccp2_router X.X.X.X
wccp_version 2
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0 password=3DXXXXXXXX coredump_dir /var/spool/squid background_ping_rate 10 dead_peer_timeout 10 cache_peer server2.domain.com parent 3128 3130 no-digest

Server2

acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network acl localnet src X.X.X.X/16 acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
icp_access allow all
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow all localhost
http_access deny all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
cache_effective_user squid
cache_effective_group squid
cache_store_log none
cache_dir aufs /opt/cache/squid 16000 16 256 access_log /opt/cache/squid/log/access.log squid cache_log /opt/cache/squid/log/cache.log # cache_store_log /var/log/squid/store.log acl QUERY urlpath_regex cgi-bin \?
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
half_closed_clients off
maximum_object_size 32768 KB
cache_swap_high 100%
cache_swap_low 80%
cache deny QUERY
cache_mem 2048 MB
wccp2_router X.X.X.X
wccp_version 2
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0 password=3DXXXXXXXX coredump_dir /var/spool/squid background_ping_rate 10 dead_peer_timeout 10 cache_peer server1.domain.com parent 3128 3130 no-digest
Received on Mon Mar 29 2010 - 15:31:14 MDT

This archive was generated by hypermail 2.2.0 : Tue Mar 30 2010 - 12:00:08 MDT