Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-26 Thread Alex Rousskov
On 2024-07-26 03:31, Francesco Chemolli wrote: Have you considered https://wiki.squid-cache.org/Features/HelperMultiplexer Just in case you do not know how to find the actual helper program described on the above page, it is installed as libexec/helper-mux. That helper has a manual page.

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-26 Thread Alex Rousskov
On 2024-07-26, Andre wrote: How to know if the helper supports concurrent requests? Good question! You need to consult helper documentation. If that does not exist or does not document concurrency, one can analyze helper source code and/or test concurrency support, but those two activities

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-26 Thread Francesco Chemolli
Have you considered https://wiki.squid-cache.org/Features/HelperMultiplexer ? If I remember correctly, it can start new helpers on demand up to a configured maximum. @mobile On Fri, 26 Jul 2024 at 8:23 AM, Andrey K wrote: > Hello, Andre, > > > > How to know if the helper supports concurrent re

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-26 Thread Andrey K
Hello, Andre, > How to know if the helper supports concurrent requests? You are using /usr/bin/ntlm_auth, and, as far as I know, it does not support concurrency. But I do not know other ntlm-authentication helpers. > winbindd: Exceeding 500 client connections, no idle connection found > I will i

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-25 Thread Andre Bolinhas
Hi We have 5 squid workers, we need to handle around 8k concurrent users. Based on this, what's the auth_param values that you recommend for children, idle and startup? How to know if the helper supports concurrent requests? winbindd: Exceeding 500 client connections, no idle connection found

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-25 Thread Alex Rousskov
On 2024-07-23 19:20, Andre Bolinhas wrote: winbindd: Exceeding 500 client connections, no idle connection found auth_param ntlm children 500 ... I know virtually nothing about WINDBIND and the authentication helper you are using, but configuring Squid to have 500 helper processes is usuall

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-25 Thread Stuart Henderson
On 2024-07-23, Andre Bolinhas wrote: > I'm using SQUID 5.9 + windbindd 4.9.5, the authentication method is NTLM. > > Every day, around 5pm, the internet speed becomes very slow, with users > reporting that websites takes too long to open. > > Also, the time that the issue occur is very strange, s

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-24 Thread Andrey K
Hello, Andre, Your logs say: > winbindd: Exceeding 500 client connections, no idle connection found So In addition to Francesco's suggestion, you can try to increase the "winbind max clients" parameter in your smb.conf Your squid.conf record: auth_param ntlm children 500 startup=5 idle=1 limits

Re: [squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-24 Thread Francesco Chemolli
Hi Andre, The chain of services here is: browser <-> squid <-> ntlm_auth <-> winbindd <-> active directory In order to bisect the problem, could you try using `wbinfo -a` on one of the affected machiens to authenticate against Active Directory and see if the performance is on the winbindd <-> AD

[squid-users] SQUID - WINDBIND - very slow internet speed

2024-07-23 Thread Andre Bolinhas
Hi Team. I'm using SQUID 5.9 + windbindd 4.9.5, the authentication method is NTLM. Every day, around 5pm, the internet speed becomes very slow, with users reporting that websites takes too long to open. Also, the time that the issue occur is very strange, since is when most of the users are