[squid-users] adobe updates constantly re-downloading

From: Marko Cupać <marko.cupac_at_mimar.rs>
Date: Wed, 15 May 2013 12:17:04 +0200

My ~300 users are behind squid-3.2.11. As from 7:00 this morning my 10Mbit/s Internet link is saturated by adobe reader updates:

http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.2/misc/AdbeRdrUpd952_all_incr.msp
http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.0/en_US/AdbeRdr950_en_US.exe
http://armdl.adobe.com/pub/adobe/reader/win/10.x/10.1.0/en_US/AdbeRdr1010_en_US.msi
http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.3/misc/AdbeRdrUpd953_all_incr.msp

I found IPs of update servers, and as a temporary solution I put them into aclnodstip.acl, and modified squid.conf:

acl adobe dst "/usr/local/etc/squid/aclnodstip.acl"
...
http_access deny adobe

This worked well as a temporary solution, as traffic dropped immediately. Next, I followed:

http://wiki.squid-cache.org/SquidFaq/WindowsUpdate

I already had following directives:

range_offset_limit -1
maximum_object_size 8192 MB
quick_abort_min -1

And now I added regex for adobe:
refresh_pattern -i armdl.adobe.com/.*\.(dat|exe|ms[i|p]|upd|dat|zip) 4320 80% 43200 reload-into-ims

Unfortunately, after disabling acl and enabling refresh pattern my link got saturated again.

Any advice how to cache those adobe updates? Or at least make clients download them once, not constantly re-requesting them without ever completing download successfully.

Thank you in advance.

-- 
Marko Cupać
Received on Wed May 15 2013 - 10:17:16 MDT

This archive was generated by hypermail 2.2.0 : Wed May 29 2013 - 12:00:07 MDT