Hi Ferraroni ,

Ferraroni Matteo wrote:
Hi folks,
I have a little bandwidth problem. My customer's network is simple like this: internet ---> squid 2.6 StabLe 5 (trasparent mode) ----> lan 172.16.0.0/16

Now, the problem is that when I redirect the 80 port to 8080 (squid) all the clients' connection slow down (from 250 Kbyte/s to 20/30 kbyte/s), and when I disable the iptables rule all returns fast.

How did you measure the slowdown is speed? And what is your actual bandwidth pipe?


How can I solve this?

Squid.conf

http_port 8080 transparent
icp_port 0
htcp_port 0
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
emulate_httpd_log on
mime_table /etc/squid/mime.conf
pid_filename /var/run/squid.pid
dns_nameservers 213.140.2.12 208.67.222.222 193.205.245.66
acl all src 0.0.0.0/0.0.0.0
http_access allow all

iptables rules

$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -s 172.16.0.0/16 -j REDIRECT --to-port 8080 $IPTABLES -t nat -A POSTROUTING -s 172.16.0.0/16 -j SNAT --to-source 192.168.1.2

How many network interfaces does your Squid box have? So this box performs NAT and Proxy service simultaneously?

Maybe you have large ACLs filtering on your squid.conf? What is the output of "squidclient mgr:info"?

Thanking you...





Thank you in advance
Matteo





--

With best regards and good wishes,

Yours sincerely,

Tek Bahadur Limbu

System Administrator

(TAG/TDG Group)
Jwl Systems Department

Worldlink Communications Pvt. Ltd.

Jawalakhel, Nepal

http://www.wlink.com.np

http://teklimbu.wordpress.com

Reply via email to