>Sorry if I wasn't clear.
>I will try to rephrase the logic.
>I went from the buttom up.
>curl + wget + simple ruby script = slow response.
>notice that this address is a redirection.
>I am unsure now about the dns issue that I have seen this morning.
>The main problem is not the page but the ssl.
>which takes forever...
>it might be a HTTP 1 vs 1.1 issue which is the same for wget + curl + squid.
>
>leaves the main problems as: dns and service(http 1.1.) problem rather
>then squid.

>Regards,
>Eliezer


Thanks for the reply and further clarification,

I still believe the issue I am reporting is specific to DNS and how Squid's 
internal DNS resolver works.

I forgot to mention if I bypass using the hostname in my test, and enter one of 
the resolved IP's instead of webapps.kattenlaw.com it is immediate.  There is 
no delay in bringing the page up.

I also tried another variation while testing today, I re-compiled Squid 3.2.9 
with --disable-internal-dns and it has different behavior indicating even 
further that the problem lies within the internal resolver Squid 3.x uses.

When 3.2.9 is compiled with --disable-internal-dns, the first time I access 
webapps.kattenlaw.com it only takes 15 seconds to come up instead of 30 it took 
while having the default 3.2.9 internal resolver functioning.

Then subsequent connection attempts to https://webapps.kattenlaw.com come up 
instantaneously every time after that. (Switching between different browsers 
using the 3.2.9 as the proxy server)  Indicating the name is cached at that 
point and not re-queried on my 3.2.9 box. In all my reading I think I recall 
reading somewhere that when using external DNS resolution with squid that it 
can wind up ignoring TTL on records.  In this case the record TTL is only 5 
seconds right now, so I know it is ignoring the TTL. If I restart squid, it 
will take 15 seconds to resolve it the 1st time.




===========================================================
CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the 
Internal Revenue
Service, any tax advice contained herein is not intended or written to be used 
and cannot be used
by a taxpayer for the purpose of avoiding tax penalties that may be imposed on 
the taxpayer.
===========================================================
CONFIDENTIALITY NOTICE:
This electronic mail message and any attached files contain information 
intended for the exclusive
use of the individual or entity to whom it is addressed and may contain 
information that is
proprietary, privileged, confidential and/or exempt from disclosure under 
applicable law.  If you
are not the intended recipient, you are hereby notified that any viewing, 
copying, disclosure or
distribution of this information may be subject to legal restriction or 
sanction.  Please notify
the sender, by electronic mail or telephone, of any unintended recipients and 
delete the original
message without making any copies.
===========================================================
NOTIFICATION:  Katten Muchin Rosenman LLP is an Illinois limited liability 
partnership that has
elected to be governed by the Illinois Uniform Partnership Act (1997).
===========================================================

Reply via email to