[squid-users] High load problem with a broken client (Nokia app)

From: Fran Márquez <informatica.comunicaciones_1_at_chguadalquivir.es>
Date: Wed, 19 Sep 2012 09:04:50 +0200

Hi friends,

I have a weird problem of saturation due to a broken client and I don't
know how fix it (I can force user to disable the app who cause the
problem, but I think that should be a solution for avoid that a bad
client can overload the server and affect to proxy service by itself).

I have found a person who have same problem (here:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-memory-issue-td3044458.html)
but not solution is provide in that thread.

The problem is that some Nokia application try to access to an URL, it
receive 407 error and try again ad infinitum. This cause high load after
few minutes and I need restart the squid/dansguardian services for
restore the correct load of my server.

This problem affect to snmp daemon (who works through squid to do some
checks) and also cause NTLM auth problem.

Info about my proxy server:
---------------------------

Centos 6.0
Squid 3.1.10 (from base repository)

Log fragment:
---------------------------------------------------------------------
1347861663.915 9 192.168.1.48 TCP_DENIED/407 4209 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861663.929 0 192.168.1.48 TCP_DENIED/407 3985 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861663.953 1 192.168.1.48 TCP_DENIED/407 4170 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861663.973 4 192.168.1.48 TCP_DENIED/407 4213 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861663.986 0 192.168.1.48 TCP_DENIED/407 3985 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.008 1 192.168.1.48 TCP_DENIED/407 4170 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.026 3 192.168.1.48 TCP_DENIED/407 4209 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.040 0 192.168.1.48 TCP_DENIED/407 3985 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.065 1 192.168.1.48 TCP_DENIED/407 4170 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.084 4 192.168.1.48 TCP_DENIED/407 4209 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.097 0 192.168.1.48 TCP_DENIED/407 3985 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
1347861664.119 1 192.168.1.48 TCP_DENIED/407 4170 GET
http://feeds.store.ovi.com/service/bannerrequest.ashx? - NONE/- text/html
---------------------------------------------------------------------

Thank you very much,
Regards

-- 
Fran M.
Received on Wed Sep 19 2012 - 07:04:57 MDT

This archive was generated by hypermail 2.2.0 : Thu Sep 20 2012 - 12:00:04 MDT