Пытаюсь побеждать сквид, но тяжело идет процесс.
Сквид использует negotiate аутентификацию. При этом, на некоторые сайты не пускает. Тупо страница долго загружается а потом часть HTML отображено, часть не загружено. пример сайта job.ru.
Попытался включить дебаг мальньеого уровня:
Код: Выделить всё
gw ~ # grep -v ^# /etc/squid3/squid.conf | grep -v ^$
auth_param negotiate program /usr/lib/squid3/squid_kerb_auth
auth_param negotiate children 10
auth_param negotiate keep_alive off
acl localnet src 10.0.0.0/16
acl post method POST
acl nocache dstdomain "/etc/squid3/acls/nocache.acl"
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl allusers proxy_auth REQUIRED
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
http_access allow post localnet
http_access allow manager localhost
http_access allow localhost
http_access allow allusers
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_port 10.0.0.10:3129
http_port 127.0.0.1:3129
tcp_outgoing_address 0.0.0.0
hierarchy_stoplist cgi-bin ?
cache_mem 512 MB
cache_dir ufs /var/spool/squid3 5000 16 256
minimum_object_size 3 KB
maximum_object_size 30000 KB
debug_options ALL,2 # дебаг
coredump_dir /var/spool/squid3
cache deny nocache
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
visible_hostname gw
udp_outgoing_address 0.0.0.0
dns_nameservers 127.0.0.1
forwarded_for off
retry_on_error onв /etc/squid3/acls/nocache.acl добавлен .job.ru.
при этом, в cache.log сквид посылает фарш, который невозможно разобрать, когда работает много пользователей, пример:
Spoiler
2012/03/14 12:33:13.765| The reply for GET http://bs.yandex.ru/informer/156828/3_0_FF...FFF_0_pageviews is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.770| The request GET http://chat17.livetex.ru/?site_id=15998&..._=1331713993691 is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.770| client_side_request.cc(547) clientAccessCheck2: No adapted_http_access configuration.
2012/03/14 12:33:13.770| client_side_request.cc(547) clientAccessCheck2: No adapted_http_access configuration.
2012/03/14 12:33:13.770| The request GET http://chat17.livetex.ru/?site_id=15998&..._=1331713993691 is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.773| The reply for GET http://counter.yadro.ru/logo;HeadHunter?14.1 is ALLOWED, because it matched 'all'
2012/03/14 12:33:13.875| The request GET http://a.adwolf.ru/prepareCode?p1=yj&p...&pr1=437771 is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.875| client_side_request.cc(547) clientAccessCheck2: No adapted_http_access configuration.
2012/03/14 12:33:13.875| The request GET http://a.adwolf.ru/prepareCode?p1=yj&p...&pr1=437771 is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.879| The reply for GET http://chat17.livetex.ru/?site_id=15998&..._=1331713993691 is ALLOWED, because it matched 'all'
2012/03/14 12:33:13.880| ConnStateData::swanSong: FD 48
2012/03/14 12:33:13.899| ctx: enter level 0: 'http://www.google-analytics.com/__utm.gif?utmwv=5.2.5&utms=110&utmn=540874783&utmhn=hh.ru&utmcs=UTF-8&utmsr=1440x900&utmvp=1423x761&utmsc=24-bit&utmul=ru-ru&utmje=0&utmfl=11.1%20r102&utmdt=%D0%A0%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%2C%20%D0%B2%D0%B0%D0%BA%D0%B0%D0%BD%D1%81%D0%B8%D0%B8%2C%20%D0%B1%D0%B0%D0%B7%D0%B0%20%D1%80%D0%B5%D0%B7%D1%8E%D0%BC%D0%B5%2C%20%D0%BF%D0%BE%D0%B8%D1%81%D0%BA%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D1%8B%20%D0%BD%D0%B0%20HeadHunter%20(hh.ru)&utmhid=1089796595&utmr=0&utmp=%2Femployer%2FvacancyesList.do&utmac=UA-11659974-2&utmcc=__utma%3D79533005.459974758.1331705929.1331705929.1331705929.1%3B%2B__utmz%3D79533005.1331705929.1.1.utmcsr%3Dkrasnodar.hh.ru%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2F%3B&utmu=qAEg~'
2012/03/14 12:33:13.899| hdr cc: ignoring duplicate cache-directive: near 'no-cache=Set-Cookie, proxy-revalidate' in '0xbf989004'
2012/03/14 12:33:13.899| ctx: exit level 0
2012/03/14 12:33:13.899| hdr cc: ignoring duplicate cache-directive: near 'no-cache=Set-Cookie, proxy-revalidate' in '0xbf988cf4'
2012/03/14 12:33:13.899| The reply for GET http://www.google-analytics.com/__utm.gif?...&utmu=qAEg~ is ALLOWED, because it matched 'all'
2012/03/14 12:33:13.903| The request GET http://hh.ru/poster/763290.swf is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.903| client_side_request.cc(547) clientAccessCheck2: No adapted_http_access configuration.
2012/03/14 12:33:13.903| The request GET http://hh.ru/poster/763290.swf is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.903| The request GET http://hh.ru/poster/763290.swf is ALLOWED, because it matched 'allusers'
2012/03/14 12:33:13.930| The reply for GET http://a.adwolf.ru/prepareCode?p1=yj&p...&pr1=437771 is ALLOWED, because it matched 'all'
2012/03/14 12:33:13.973| The reply for GET http://hh.ru/poster/763290.swf is ALLOWED, beca
Тут невозможно что-либо выделить, отночительно источника запроса/пользователя и т.п.
Как можно разобрать данный лог?
