[OT?] ifb and squid

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm a bit confused, so i hope i will not make too many mistakes.

I'm using by some weeks, look at list archive, ifb to handle income
traffic, mimic what i do by some years, eg htb more or less like
''wondershaper'' example script.
On the same time, all my users go to internet by the way of a squid
proxy, with c-icap as ICAP module, so files tend to be downloaded by
squid, scanned and then server to clients.
Also, i've enabled the ''poor's man WSUS'', eg ignoring
''partial content'' request to microsoft update sites.

After enabling ifb/htb/sfq for ingress, i've found that works, but
because fo the control and the fairness added, some trouble arises.
Example:

1) i was upgrading a CentOS server (normally i use debian, but...) and
 yum have a default timeout on download too little, so they stared to
download a file, proxy start the download but pass too little data, yum
timeout and pass over a next mirror, proxy start the download but pass
too little data...
After some minutes, bandwidth hog occurred (http still have ceil at
100% of the bandwidth).

2) i was doing some test on a W7 box (normally, i still use XPsp3), and
 probably w7 update are a bit more ''aggressive'' then xp one; again,
after some time bandwidth hog occurred.


Clearly, i can tackle some parameters (eg, the amount of data
c-icap/squid send while waiting for the full file, to prevent timeout;
or stop to ignore ''partial content'', seems now even worst that
honouring it), but i've a doubt: using a proxy, all the http connection
came form an unique internal IP; this can confuse/prevent ''fairness''
of sfq, leading to worster performance and so, more frequent timeout?

Apart the squid ''dumb'' confiuration, can i have missed something?


Thanks.

-- 
dott. Marco Gaiarin				    GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it	  tel +39-0434-842711  fax +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
	   http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
--
To unsubscribe from this list: send the line "unsubscribe lartc" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux