You'll find this time drops to next to nothing if you precompile the
databases.  The reason that it takes so long is that for every squidguard
process you generate, it in turn has to compile the database in memory,
which means that if it takes X minutes to compile your databases using the
-C switch, and you have Y child processes, it'll take X * Y minutes to begin
transfering traffic through the proxy.  That sounds like a bit too much time
to be sitting around waiting, especially if you have users waiting on you
(or even worse, calling you).

Aaron

> -----Original Message-----
> From: Ryan Kather [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 21, 2002 11:26 AM
> To: [EMAIL PROTECTED]
> Subject: Re: SquidGuard + Blacklist PORN Domains/Urls = Big 
> usage of CPU
> :(
> 
> 
> Hello Christophe, 
> 
>      I do notice a similar problem only when the
> squidguard processes are initializing while squid is
> starting.  Squid queues web requests and waits for the
> squidguard processes to settle before passing each
> request to it.  If you have a large cache and a large
> number of clients it can take quite awhile.  After it
> catches up with it's requests however mine settles
> right down.  We have about 250 connections accessing
> per minute and it is run on a Pentium 200 Pro with 256
> Mg of Ram.  I use 6 squidguard processes.  I block the
> same rules 24/7 though so you might want to check
> without time restrictions.  
> 
>                        Ryan Kather
> 
> p.s. Hope I was some help.
> 
> 
> --- Christophe RIPPERt <[EMAIL PROTECTED]> wrote:
> > Hi,
> > 
> > I have a little problem with SquidGuard (last
> > version) and the
> > Blacklists . I 've seen that if i put in
> > squidGuard.conf :
> > 
> > dest bl_porn {
> >     domainlist blacklist/porn/domains
> >     urllist blacklist/porn/urls
> >     log bl_porn.log
> > }
> > 
> > acl {
> >     privileged {
> >             pass all
> >     }
> > 
> >     default within tempslibre {
> >             #pass all #not active now 
> >             #} else {
> >             pass !bl_warez !bl_violence !bl_porn !bl_proxy
> > #the others
> > Blacklists          redirect
> > http://www.serveur.ici/error.html
> >     }
> > }
> > 
> > => i launch squid + squidGuard :
> > service squid start (with a script in
> > /etc/rc.d/init.d) :
> > 
> > => I take a look to the process cause my server lags
> > so lot 
> > ps aux
> > USER       PID    %CPU  %MEM                
> > proxy      10510  23.3  0.7   (squidGuard) 
> > proxy      10511  23.3  0.7   (squidGuard) 
> > proxy      10512  23.2  0.7   (squidGuard) 
> > proxy          10513  23.2  0.7   (squidGuard) 
> > 
> > and after if i want to stop squid :
> > service squid stop (or killall squid)
> > squid stop but not squidGuard !
> > 
> > I've seen inside the domains and urls of PORN
> > blacklist files... they
> > are really big...
> > 
> > Can you tell me if for you it's the same problem : a
> > big lag for your
> > server if you active theses Blacklists ? (Ps : i
> > have a Celeron 433 with
> > 256 Mo Ram) 
> > 
> > Thank you for your help and for all supports you
> > give to SquidGuard
> > users.
> > 
> > christophe RIPPERT.
> > 
> > 
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Movies - coverage of the 74th Academy Awards�
> http://movies.yahoo.com/
> 

Reply via email to