[squid-users] Squid, Reverse Proxy, Large Uploads

From: Justin Dossey <jbd@dont-contact.us>
Date: Thu, 26 Apr 2007 16:56:14 -0700 (PDT)

I use squid as a reverse proxy for two application servers.

Configuration of the peers is very basic:

cache_peer 192.168.0.6 parent 80 0 sourcehash no-query no-digest
originserver login=PASS
cache_peer 192.168.0.7 parent 80 0 sourcehash no-query no-digest
originserver login=PASS

I have not set any explicit timeouts or size limits in the configuration.

Some of my users complain that large POSTs in the neighborhood of
30-100MB, which worked before we introduced Squid into the mix, now fail
at some point along the process (it varies).

Most of my users get 20-50KB/sec up, so an upload of this type would take
between 10 and 90 minutes.

If I re-code pages to bypass Squid, the same users are successful with
their uploads (but it's a bear to get them back onto squid due to the same
origin policy).

Notwithstanding HTTP's suitability for uploads, how can I make this work?

Environment: Gentoo Linux 2.6.19
Squid Cache: Version 2.6.STABLE12
configure options: '--prefix=/usr' '--host=i686-pc-linux-gnu'
'--mandir=/usr/share/man' '--infodir=/usr/share/info'
'--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/var/lib'
'--sysconfdir=/etc/squid' '--libexecdir=/usr/libexec/squid'
'--localstatedir=/var' '--datadir=/usr/share/squid'
'--enable-auth=basic,digest,ntlm' '--enable-removal-policies=lru,heap'
'--enable-digest-auth-helpers=password'
'--enable-basic-auth-helpers=PAM,getpwnam,NCSA,MSNT'
'--enable-external-acl-helpers=ip_user,session,unix_group'
'--enable-ntlm-auth-helpers=fakeauth' '--enable-ident-lookups'
'--enable-useragent-log' '--enable-cache-digests' '--enable-delay-pools'
'--enable-referer-log' '--enable-arp-acl' '--with-pthreads'
'--with-large-files' '--enable-htcp' '--enable-carp'
'--enable-follow-x-forwarded-for' '--enable-snmp' '--enable-ssl'
'--enable-storeio=ufs,diskd,coss,aufs,null' '--enable-async-io'
'--enable-linux-netfilter' '--enable-epoll' '--build=i686-pc-linux-gnu'
'build_alias=i686-pc-linux-gnu' 'host_alias=i686-pc-linux-gnu'
'CC=i686-pc-linux-gnu-gcc' 'CFLAGS=-O2 -march=i686 -fomit-frame-pointer'

-- 
Justin Dossey
Operations, podOmatic
(415) 975-9981
Received on Thu Apr 26 2007 - 18:00:58 MDT

This archive was generated by hypermail pre-2.1.9 : Tue May 01 2007 - 12:00:01 MDT