Hello.
I work in secondary school and our access to internet is protected in two
points:
1) Squid proxy (I manage this)
2) Internet service provider (they change *.google.com ssl certificate
with zscaler)
We install these zscaler certificates on all our clients, but I believe th
On 10/9/20 8:59 AM, m k wrote:
> The CPU is not 100%, but the number of simultaneous connections does not
> exceed 450.
The average number of active concurrent connections is offered request
rate multiplied by mean response time. Thus, if you want to see more
active concurrent connections, you h
* m k :
> The CPU is not 100%, but the number of simultaneous connections does not
> exceed 450. In netstat, FIN_WAIT was over 1. Is there a way to reduce
> FiN_WAIT?
We use these sysctl settings:
--- snip ---
# Tuning
net.ipv4.tcp_fin_timeout=10
# down from 60
net.ipv4.tcp_tw_reuse=1
net
Amos san, Alex san,
Thank you for your reply.
Change squid to compile from source.
Also change the NTLM authentication to KRB.
I understand that error and response speed are more important than CPU.
The CPU is not 100%, but the number of simultaneous connections does not
exceed 450. In netstat,
