Squid + Clamav

Sealr0x

I found that on my box, when I turn on Squid with Clamav CPU is running 100% and upload is very slow. I have a 1000/100 link but I get ~100/10 when Squid and Clamav is on. Without it I can easy get 700/120.

Any optimizations? Better HW?

kejianshi

Yep - turning it off speeds things up abit…

aGeekhere

Try without Clamav

Sealr0x

Ive turned Calmav off. No significant change in speed.
Ive turned SquidGuard off. No significant change in speed.

Hard disk cache is set to:
Hard Disk Cache Size = 0
Hard Disk Cache System = null

For mem cache:
Memory Replacement Policy = Heap GDSF
Maximum Object Size in RAM = 256
Memory Cache Size = 1024

I only get 150 down and 5 up. Without Squid proxy I get 700/120.

I also run pfBlockerNG and Snort.

pfSense version = 3.2.1 - RELEASE p1 (amd64)

Any suggestions?

aGeekhere

Check CPU load when doing the speed test,

Hard Disk Cache Size = 0
Hard Disk Cache System = null

Not sure about this, try setting something small like 256kB and 1mB

Maximum Object Size in RAM = 256
Memory Cache Size = 1024

See this issue for ram cache https://forum.pfsense.org/index.php?topic=96472.0

Sealr0x

Ive tried many possible configurations regarding HD and Mem caching, even setting sizes to 0 and/or disable totally.

But whatever I do, I still end up with speeds ~150/5.

CPU is around 50-100% when I speed test.

It doesnt seem to apply 1-1 to this issue https://redmine.pfsense.org/issues/6485, because it happens immediately when squid restarts after configurations.