Problem with squid and squidGuard

ssbostan · May 6, 2019, 5:54 AM

Hi,

I have a medium network, my users access to internet through squid proxy and we filter sites with squidGuard.

Currently i have a problem with squid.

My squid server not response to users after few minutes and when i restart squid service, it works again for few minutes and after some time not responding again! and again, again, again!

What is a problem and how can i check what goes wrong?

Best regards.

KOM · May 7, 2019, 1:43 PM

If you have a busy network, you may need to spawn more squidguard child threads to keep up. Anything in the System log? Anything in Squid's logs? Anything in squidguard's filter log?

ssbostan · May 7, 2019, 7:10 PM

Yes, i have a busy network.

How can i spawn child threads of squidguard?

No any abnormal logs, just a lot of connections in FIN_WAIT_2 state.

And not any logs...

KOM · May 7, 2019, 7:14 PM

Services - Squid Proxy Server - General - Show advanced options - Advanced Features - Integrations has this line:

url_rewrite_children 16 startup=8 idle=4 concurrency=0

Try increasing it as per the doc below.

http://www.squid-cache.org/Doc/config/url_rewrite_children/

ssbostan · May 7, 2019, 7:18 PM

Thanks KOM, i will check and back results to you.

KOM · May 7, 2019, 7:30 PM

You may also have to increase the sslcrtd_children value as well.

http://www.squid-cache.org/Doc/config/sslcrtd_children/

ssbostan · May 8, 2019, 10:46 AM

Not change after testing "url_rewrite_children" and "sslcrtd_children".

I'm test squid without squidGuard enabled and my problem exists again.

squid is not working after few minutes when squidGuard is disabled!

KOM · May 8, 2019, 2:03 PM

There must be something in one of the logs:

Status - System Logs - System - General

Services - Squid Proxy Server - Realtime

Try increasing the squid debug log level by adding this to the Advanced Options - INtegrations section for squid:

debug_options ALL,5

Increase the value after ALL, to get more and more detailed logging.

http://www.squid-cache.org/Doc/config/debug_options/

http://etutorials.org/Server+Administration/Squid.+The+definitive+guide/Chapter+16.+Debugging+and+Troubleshooting/16.2+Debugging+via+cache.log/