squid: no buffer space available - after tuning!

average loaded site (about 1000 users), fast machine, lots of ram, fxp interfaces (no realteks), squid reports 32768 filedescriptors available

[root@w3cache ~]# limits -U squid
Resource limits for class squid:
cputime infinity secs
filesize infinity kB
datasize infinity kB
stacksize infinity kB
coredumpsize 0 kB
memoryuse infinity kB
memorylocked infinity kB
maxprocesses 64
openfiles 32768
sbsize infinity bytes
vmemoryuse infinity kB
[

/etc/sysctl.conf:

kern.ipc.somaxconn=65535
kern.ipc.nmbclusters=32768
net.inet.tcp.delayed_ack=0
net.inet.icmp.icmplim=500
vm.defer_swapspace_pageouts=1
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536
kern.ipc.shmseg=128
kern.ipc.shmall=16384
kern.maxfiles=65536
kern.maxfilesperproc=32768
kern.ipc.nmbclusters=131072
net.inet.ip.portrange.last=65535
vfs.lorunningspace=3145728
vfs.hirunningspace=6291456
net.inet.tcp.msl=5000

vfs.root.mountfrom="ufs:ad0a"
kern.cam.scsi_delay="1000"
kern.ipc.msgseg=1024
kern.ipc.msgssz=128
kern.ipc.msgtql=8192
kern.ipc.msgmnb=65536
kern.ipc.msgmni=100
kern.ipc.msgmax=8192
kern.maxproc=1000
kern.maxbcache=134217728
kern.dfldsiz=2147483648
kern.maxdsiz=2147483648



in dmesg i found lots of

ipfw: pullup failed


CPU load is always <10%, it's P4 machine with 2GB ram (much more than squid uses) running FreeBSD 6.2-RC1, 3 interfaces - out output, 2 for different connections, ipfw is used with only 1 line.



any more ideas?
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: tranparent proxying, squid, nat, ipfw
    ... I have done a number of servers in this setup. ... the divert line as the first line in ipfw and the necessary NAT in rc.conf. ... > so far this was the simpliest squid configuration that i've seen... ...
    (freebsd-questions)
  • Re: dansguardian + squid running on local machine
    ... I have dansguardian listening on 127.0.0.0.1:8080 -> squid listening on ... I also have ipfw ruleset. ...
    (freebsd-questions)
  • configuring Squid as a Transparent proxy in BSD with ipfw
    ... Does anyone knows how can i configure Squid as a Transparent proxy ... using IPFW assuming that i have already configured Squid with Samba ... authentication and get the internet connection ...
    (freebsd-questions)
  • Re: setup firewall/router/proxy
    ... If Mandrake has ipchains or ipfw, I'd say go with either and still ... I assumed by ``routing'', you meant Network Address Translation, ... routing table and specify static routes using the routecommand. ... ...and as I and others have said, squid is probably the best choice ...
    (freebsd-questions)
  • Re: more transparent proxy and squid questions.
    ... Cannot find necessary IP-Filter header files ... I want transparent proxy but with ipfw.. ... > has anyone else got transparent proxy going with firewall and squid on ...
    (freebsd-questions)