Re: [squid-users] Very High Response Times to Certain Websites with Squid

2018-05-17 Thread Amos Jeffries
On 17/05/18 16:15, Justin & Roseanne James wrote:
> 
> I'm not doing anything special. Squid is running transparently and I
> have iptables rules setup to forward port 80 and 443 traffic
> appropriately from my firewall to my squid box.

Traffic must be *routed* between machines. The NAT step must be done
only on the Squid machine itself.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] Very High Response Times to Certain Websites with Squid

2018-05-16 Thread Justin & Roseanne James
 Hello,
I have a proxy server setup with Squid 3.5.23, and am having issues with
high response times to a lot of websites. As you can see below, I'm seeing
response times of over 1,000,000 milliseconds!

1526528717.346 1032187 10.10.10.5 TAG_NONE/200 0 CONNECT 54.239.29.128:443 -
HIER_NONE/- -
1526528717.346 1032158 10.10.10.5 TAG_NONE/409 0 CONNECT api.amazon.com:443 -
HIER_NONE/- text/html;charset=utf-8
1526528717.346 1000764 10.10.10.5 TAG_NONE/200 0 CONNECT 23.34.22.196:443 -
HIER_NONE/- -
1526528717.346 1000734 10.10.10.5 TAG_NONE/409 0 CONNECT www.amazon.com:443 -
HIER_NONE/- text/html;charset=utf-8
1526528717.346 1032128 10.10.10.5 TAG_NONE/200 0 CONNECT 72.21.206.140:443 -
HIER_NONE/- -
1526528717.346 1032124 10.10.10.5 TAG_NONE/409 0 CONNECT
s.amazon-adsystem.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 1000903 10.10.10.5 TAG_NONE/200 0 CONNECT 52.94.237.193:443 -
HIER_NONE/- -
1526528717.346 1000899 10.10.10.5 TAG_NONE/409 0 CONNECT
transient.amazon.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 1031571 10.10.10.5 TAG_NONE/200 0 CONNECT 72.21.206.141:443 -
HIER_NONE/- -
1526528717.346 1031564 10.10.10.5 TAG_NONE/409 0 CONNECT
aax-us-east.amazon-adsystem.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 1000902 10.10.10.5 TAG_NONE/200 0 CONNECT 23.21.218.68:443 -
HIER_NONE/- -
1526528717.346 1000897 10.10.10.5 TAG_NONE/409 0 CONNECT
settings.crashlytics.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 803516 10.10.10.2 TAG_NONE/200 0 CONNECT 54.88.34.154:443 -
HIER_NONE/- -
1526528717.346 803506 10.10.10.2 TAG_NONE/409 0 CONNECT
fls-na.amazon.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 803516 10.10.10.2 TAG_NONE/200 0 CONNECT 54.88.34.154:443 -
HIER_NONE/- -
1526528717.346 803506 10.10.10.2 TAG_NONE/409 0 CONNECT
fls-na.amazon.com:443 - HIER_NONE/- text/html;charset=utf-8
1526528717.346 1000765 10.10.10.5 TAG_NONE/200 0 CONNECT 52.94.236.223:443 -
HIER_NONE/- -
1526528717.346 1000734 10.10.10.5 TAG_NONE/409 0 CONNECT msh.amazon.com:443 -
HIER_NONE/- text/html;charset=utf-8

I'm not doing anything special. Squid is running transparently and I have
iptables rules setup to forward port 80 and 443 traffic appropriately from
my firewall to my squid box. I can curl the above sites on my server and
results are returned almost instantly (not going through squid).

Many thanks for any help you can provide!
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users