Hi,
We'd like to limit our bandwith / file type with using ACL and delay
pool. Our Squid (2.6e21) is configured as a reverse proxy, in front of
a apache server (2.2.3)
- We don't have any error starting Squid but the delay pool seams not working.
- If you use acl with http_deny directive, there no problem and files
are not allowed to be download.
- We also tried to use delay_class 1 with ACL all and it's not working.
Here you have the delay pool configuration:
#ACL identifiant les fichiers hebdomadaires, mensuels et complets
acl fichiers url_regex -i \^*ful25.m25$ \^*m25.m25$ \^*cur25.m25$
#Declaration des pools de gestion de bande passante
delay_pools 2
#definition du pool concernant les fichiers volumineux.
#Chaque poste d'un réseau dispose de 30Ko/s de bande passante,
#un sous réseau de classe C dispose de 50 Ko/s
#et la totalité des postes demandant ce type de fichiers disposent de 1Mo/s
delay_class 1 3
delay_access 1 allow fichiers
delay_access 1 deny all
delay_parameters 1 1048576/1048576 50200/50200 30720/50200
#definition du pool pour les autres fichiers
#Aucune limite n'est positionnée pour le moment
delay_class 2 3
delay_access 2 deny fichiers
delay_access 2 allow all
delay_parameters 2 -1/-1 -1/-1 -1/-1
Here you have squid -v command result:
[root] # squid -v
Squid Cache: Version 2.6.STABLE21
configure options: '--build=x86_64-redhat-linux-gnu'
'--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu'
'--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr'
'--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
'--includedir=/usr/include' '--libdir=/usr/lib64'
'--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com'
'--mandir=/usr/share/man' '--infodir=/usr/share/info'
'--exec_prefix=/usr' '--bindir=/usr/sbin'
'--libexecdir=/usr/lib64/squid' '--localstatedir=/var'
'--datadir=/usr/share' '--sysconfdir=/etc/squid' '--enable-epoll'
'--enable-snmp' '--enable-removal-policies=heap,lru'
'--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-ssl'
'--with-openssl=/usr/kerberos' '--enable-delay-pools'
'--enable-linux-netfilter' '--with-pthreads'
'--enable-ntlm-auth-helpers=SMB,fakeauth'
'--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group'
'--enable-auth=basic,digest,ntlm'
'--enable-digest-auth-helpers=password'
'--with-winbind-auth-challenge' '--enable-useragent-log'
'--enable-referer-log' '--disable-dependency-tracking'
'--enable-cachemgr-hostname=localhost' '--enable-underscores'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL'
'--enable-cache-digests' '--enable-ident-lookups'
'--enable-follow-x-forwarded-for' '--enable-wccpv2'
'--enable-fd-config' '--with-maxfd=16384'
'build_alias=x86_64-redhat-linux-gnu'
'host_alias=x86_64-redhat-linux-gnu'
'target_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-D_FORTIFY_SOURCE=2
-fPIE -Os -g -pipe -fsigned-char' 'LDFLAGS=-pie'
Any idea or suggestion are really welcome :)
Regards,
Received on Fri Oct 07 2011 - 09:35:52 MDT
This archive was generated by hypermail 2.2.0 : Fri Oct 07 2011 - 12:00:03 MDT