On 29/05/2014 7:04 a.m., Michael Graham wrote:
> Hi all,
>
> Rather than resurrecting an ancient thread, I thought I'd start a new
> one.
>
> We are see loads of messages of the type:
>
> abandoning local=127.0.0.1:6065 remote=127.0.0.1:45583 FD 18553 flags=1
>
> and by loads I mean 800k in the last 10 days.
>
> This causes our squid process to run out of file descriptors or to do
> some other odd things when we start to run out but haven't completely
> ran out.
You have a forwarding loop.
These messages are logged for CONNECT requests and 127.* being on both
local/remote ends of the TCP cnnection is bad news.
>
> In order to try and limit the impact of this issue we have added:
>
> conn->clientConnection->close();
>
> After the log message in client_side.cc. It resolves the obvious issue
> of running out of FDs but will it have any other impact on squid?
Look in you squid.conf for the default security rule:
#http_access deny to_localhost
and remove the #.
Amos
Received on Thu May 29 2014 - 03:13:38 MDT
This archive was generated by hypermail 2.2.0 : Thu May 29 2014 - 12:00:07 MDT