Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid use all memory ram

    Scheduled Pinned Locked Moved Cache/Proxy
    43 Posts 16 Posters 15.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • gersonofstoneG
      gersonofstone
      last edited by

      Update squid to 1.16.2

      And make changes

      • SystemAdvancedFirewall & NAT
        Firewall Optimization Options Agrresive

      • IP Do-Not-Fragment compatibility
        Clear invalid DF bits instead of dropping the packets

      *Disable Firewall Scrub
      Disables the PF scrubbing option which can sometimes interfere with NFS traffic.

      • SystemAdvancedNetworking

      Hardware Checksum Offloading *Disable
      Hardware TCP Segmentation Offloading *Disable
      Hardware Large Receive Offloading *Disable

      this for NIC realteck

      :)

      Papu!! :V

      1 Reply Last reply Reply Quote 0
      • R
        remzej
        last edited by

        Latest squid package v0.4.37 already fixed this bug.

        1 Reply Last reply Reply Quote 0
        • G
          Gravitator
          last edited by

          Hello!

          Version PFSense:

          2.3.4-RELEASE (i386)
          built on Wed May 03 15:22:11 CDT 2017
          FreeBSD 10.3-RELEASE-p19

          Latest squid package v0.4.37 with SquidGuard 1.16.2 in transparent mode with SSL interception (strip all).

          Gradually increasing memory consumption, the overflow resets.

          @😄:

          Update squid to 1.16.2

          And make changes

          • SystemAdvancedFirewall & NAT
            Firewall Optimization Options Agrresive

          • IP Do-Not-Fragment compatibility
            Clear invalid DF bits instead of dropping the packets

          *Disable Firewall Scrub
          Disables the PF scrubbing option which can sometimes interfere with NFS traffic.

          • SystemAdvancedNetworking

          Hardware Checksum Offloading *Disable
          Hardware TCP Segmentation Offloading *Disable
          Hardware Large Receive Offloading *Disable

          this for NIC realteck

          :)

          These settings did not help.

          Will the transition to x64?

          1 Reply Last reply Reply Quote 0
          • E
            emax4
            last edited by

            Hello gravitator

            With the update of Squid is enough for the solution of the problem, greetings!

            1 Reply Last reply Reply Quote 0
            • G
              Gravitator
              last edited by

              @emax4:

              Hello gravitator

              With the update of Squid is enough for the solution of the problem, greetings!

              Hello…

              Unfortunately, you have the latest version of package squid - 0.4.37. The problem is not resolved.
              Pfsense is also updated to the version from 20.07.2017.

              1 Reply Last reply Reply Quote 0
              • E
                emax4
                last edited by

                @Gravitator:

                @emax4:

                Hello gravitator

                With the update of Squid is enough for the solution of the problem, greetings!

                Hello…

                Unfortunately, you have the latest version of package squid - 0.4.37. The problem is not resolved.
                Pfsense is also updated to the version from 20.07.2017.

                Hello

                I have version 0.4.37 of squid and 2.3.4 of Pfsense, I no longer have the problem.

                With the update resolved

                1 Reply Last reply Reply Quote 0
                • S
                  Sko
                  last edited by

                  @Impatient:

                  I have had the issue since pfSense version 2.3 and the only way to help alleviate the issue was to set the Maximum Object size in Ram back to 256 kb.

                  Thank you, this helped me a lot. I was fiddling with squid settings, but it always ate all the RAM eventually. Setting 'Maximum Object Size in RAM' to default stopped it.

                  pfSense 2.3.4_p1 (amd64)
                  squid 0.4.37

                  1 Reply Last reply Reply Quote 0
                  • G
                    Gravitator
                    last edited by

                    Hello!
                    Рroblem solved!

                    This problem is observed only on i386. On amd-64 squid is working fine. Memory consumption was normal.

                    PFSense 2.3.4-1 (x64).
                    Squid packages 0.4.37.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      If you are seeing this with HTTPS, see http://bugs.squid-cache.org/show_bug.cgi?id=4005

                      No fix for 3.5.x. Complain upstream.

                      Note: Setting "SSL Certificate Deamon Children" to 1 (or just something lower that the default 5) should help due to the way how dynamic_cert_mem_cache_size is configured by the package, but obviously will cause issues with busy proxies.

                      1 Reply Last reply Reply Quote 0
                      • B
                        beauw
                        last edited by

                        Okay - remzej's script saved me so much grief.

                        I run PFsense with about 1200 clients and the squid memory continually increases over the day until it locks up with no reboot.  Even on the newest versions.

                        I adjusted the script to reboot only on memory (65% for me) and it works like a charm.

                        Once I got the cron running, it checks every 15 mins.  At the most, the reboot results in 15 seconds downtime for the network which is palatable.

                        Thanks again remzej for your contribution….

                        1 Reply Last reply Reply Quote 0
                        • gersonofstoneG
                          gersonofstone
                          last edited by

                          @beauw:

                          Okay - remzej's script saved me so much grief.

                          I run PFsense with about 1200 clients and the squid memory continually increases over the day until it locks up with no reboot.  Even on the newest versions.

                          I adjusted the script to reboot only on memory (65% for me) and it works like a charm.

                          Once I got the cron running, it checks every 15 mins.  At the most, the reboot results in 15 seconds downtime for the network which is palatable.

                          Thanks again remzej for your contribution….

                          Do You have rule this similar it?

                          ![Sin título.png](/public/imported_attachments/1/Sin título.png)
                          ![Sin título.png_thumb](/public/imported_attachments/1/Sin título.png_thumb)

                          Papu!! :V

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.