RE: [squid-users] Squid configuration and download programs (FlashGet e.g.)

If you really want to stop the download accelerators, then you can do
something like:

acl no_flashget maxconn 2
http_access deny no_flashget

This is very effective. It will deny connections above the limit before
your delay pools come into play, saving you from the upstream flood. I
believe the HTTP spec allows two simultaneous connections to a site, but
it's been some time since I've picked it up.

I use "acl no_flashget maxconn 8" to keep these guys in check because we
have to allow them, but we get a lot of jokers who set their download
accelerator to use 32+ simultaneous connections on the theory that more
must be better. (It isn't.)

Be warned that a lot of these download accelerators are really badly
written. When they get back a denied request, they will immediately
retry. If the client is well connected, this can mean 15-20 denied
requests per second because the download accelerator is too stupid to do
backoff or handle error cases well. But if your goal is to minimize
upstream bandwidth, this is probably ok.

Because they lie about User-Agent it's really hard to tell which
download accelerators are the worst offenders.

It would be really neat if squid could aggregate incoming range requests
back into a single outgoing request and thus completely defeat these
"tools." But my personal negative opinion of them is probably excessive
compared to most others.

I hope this helps!

Thanks,
Jeff

--
NearlyFreeSpeech.NET 
$1/1GB Web Hosting, no minimums, no monthly fees, no kidding.
http://www.nearlyfreespeech.net/
> -----Original Message-----
> From: Oleksandr Darchuk [mailto:o.darchuk@wucb.lviv.net] 
> Sent: Monday, June 10, 2002 3:47 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] Squid configuration and download 
> programs (FlashGet e.g.)
> 
> 
> Hi.
> I'm not advanced in squid configuration, so may be anyone can 
> give me advice. 
> I have a few delay-pools on my squid. And it really works (I 
> check it using 
> FTP client, etc.)  But when user start downloader (especially 
> FlashGet), 
> channel go down -- input traffic is more than delay poll :( 
> Looks like 
> downloader eat my traffic :(( I think that FlashGet create 
> more requests for 
> receiving data from host, and host sand data to my 
> squid-server.  Incoming 
> data dropped by delay pool, but between squid and Internet I 
> receive a lot of 
> them (like flood) May be I'm not right, by I have very sad 
> experoiece in war 
> with unlimited downloader. So, I, is it possible to solve 
> problem like mine? 
> It's it possible to deni\y acess  to squid from FlashGet or other 
> downloaders? I try to buil "acl" based on "http-agent", but 
> downloader can 
> lie. 
>