Slow loading or timeout https sites

vradelos

Hi all,
this problem is bugging me for a long time but i was unable to solve it so i am asking for your help.Certain-not all- https sites do not load(timeout) or load very slowly when using squid proxy.Proxy is in non transparent mode.If i bypass the proxy they load very quickly.Some ideas what is happening and how to troubleshoot the problem?Thanks in advance.

Pfsense 2.3.2 amd64
squid 0.4.22
squidguard 1.14_3
lightsquid 3.0.4
suricata 3.0_7
cron 0.3.6_2
openvpn client export 1.3.8

KOM

You can run a command from the console to get a quick profile of squid's performance. Run:

squidclient -h LAN_IP_address -p 3128 mgr:info

Replace LAN_IP_address with your pfSense LAN IP address.

In your output, look at the Median Service Times section. See if anything looks out of place. Here is my output for example:

Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 0.25890 0.00179
Cache Misses: 0.00494 0.01469
Cache Hits: 0.00000 0.00000
Near Hits: 0.02190 0.00379
Not-Modified Replies: 0.00000 0.00000
DNS Lookups: 0.01331 0.03696
ICP Queries: 0.00000 0.00000

vradelos

Nothing unusual there.Any other idea how to troubleshoot site specific delays through squid?

KOM

I'd turn off any extra services, like Suricata, and test again. IDS/IPS can create all kinds of weird network glitches.

vradelos

Nothing changed by disabling SURICATA.But when i bypass the proxy(i place a firewall rule for my pc only to bypass it) the problematic sites open without delay.It is definitely the proxy.

KOM

Anything of note in /var/squid/logs/access.log when the problem is happening?

vradelos

Nothing there also.But what i found out is that most of the sites that timeout have .aspx code

KOM

No idea then, sorry.