From: Alexey Shabalin <a.shabalin@gmail.com>
To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
Subject: [Sysadmins] I: squid-3.2
Date: Tue, 31 Jan 2012 18:22:02 +0300
Message-ID: <CAEdvWkRxo9gjW1Pzbp0bpbX8du-mtOqyE4Ueg+9QAjUmLu0EJA@mail.gmail.com> (raw)
Всем привет.
На git.alt выложил bet'у squid-3.2
http://git.altlinux.org/people/shaba/packages/squid.git?p=squid.git;a=shortlog;h=refs/heads/3.2
В новом сквиде много всего интересного.
http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#s2
Я собирал в основном из-за
- SMP scalability
параметр worker указывает кол-во основных процессов
с помощью cpu_affinity_map процессы можно привязать к нужным ядрам.
- Helper On-Demand
children 5 startup=1 idle=1
не надо сразу стартовать большое число
- helper negotiate_wrapper
Можно определить сразу и ntlm и kerberos
auth_param negotiate program /usr/lib/negotiate_wrapper_auth -d --ntlm
/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --kerberos
/usr/lib/squid_kerb_auth -d -s GSS_C_NO_NAME
разные параметры для разных условий.
например, при worker 2, реально запускаются ещё 2 процесса(всего 4 -
squid-1,squid-2,squid-disk-3,squid-coord-4).
auth хэлперы нужны только для squid-1 и squid-2, в остальных процессах
они не нужны.
Можно сделать так - program определить глобально, а children только
для нужных процессов:
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic realm Shabalin Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
workers 2
if ${process_number} = 1
auth_param ntlm children 5 startup=1 idle=1
auth_param basic children 2 startup=1 idle=1
access_log daemon:/var/log/squid/access1.log squid
#cache_dir aufs /var/spool/squid/1 100 16 256
endif
#
if ${process_number} = 2
auth_param ntlm children 5 startup=1 idle=1
auth_param basic children 2 startup=1 idle=1
access_log daemon:/var/log/squid/access2.log squid
#cache_dir aufs /var/spool/squid/1 100 16 256
endif
--
Alexey Shabalin
next reply other threads:[~2012-01-31 15:22 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-01-31 15:22 Alexey Shabalin [this message]
2012-01-31 15:26 ` Alexey Shabalin
2012-01-31 15:39 ` Andrey Kuleshov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CAEdvWkRxo9gjW1Pzbp0bpbX8du-mtOqyE4Ueg+9QAjUmLu0EJA@mail.gmail.com \
--to=a.shabalin@gmail.com \
--cc=shaba@altlinux.ru \
--cc=sysadmins@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux sysadmins discussion
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
public-inbox-index sysadmins
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sysadmins
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git