Re: [squid-users] connections from particular users sometimes get stuck

2016-09-30 Thread Alex Rousskov
On 09/30/2016 12:38 AM, Eugene M. Zheganin wrote: > And the > main sign indicating there's something wrong with this initial > transaction was the fact that 407 answer took 42 seconds to appear in > both tcpdump captures. To avoid misunderstanding: There are many red flags in your logs, including

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-30 Thread Guy Helmer
On Sep 30, 2016, at 1:38 AM, Eugene M. Zheganin wrote: > > Hi. > >>> 13:31:25.060 kid1| accept failure: (53) Software caused connection abort >>> 13:31:25.865 kid1| accept failure: (53) Software caused connection abort >>> 13:31:25.904 kid2| accept failure: (53) Software caused connection abort

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-30 Thread Amos Jeffries
On 30/09/2016 7:38 p.m., Eugene M. Zheganin wrote: > On 29.09.2016 23:17, Alex Rousskov wrote: >> >> In summary, your browser is probably stuck because Squid could not >> accept a connection. Why did that accept call fail with ECONNABORTED? I >> cannot say for sure -- the packet trace is rather dir

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-29 Thread Eugene M. Zheganin
Hi. On 29.09.2016 23:17, Alex Rousskov wrote: > On 09/29/2016 02:58 AM, Eugene M. Zheganin wrote: >> This time turbodom.ru entries are present in the debug log > Yes, there are two complete HTTP transactions with that domain. One is a > 407 Authentication Required and one is a 301 redirect: > >> H

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-29 Thread Alex Rousskov
On 09/29/2016 02:58 AM, Eugene M. Zheganin wrote: > This time turbodom.ru entries are present in the debug log Yes, there are two complete HTTP transactions with that domain. One is a 407 Authentication Required and one is a 301 redirect: > HTTP/1.1 301 Moved Permanently ... > Location: http://tu

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-29 Thread Eugene M. Zheganin
Hi. On 29.09.2016 08:38, Eugene M. Zheganin wrote: > Hi. > > On 28.09.2016 21:21, Alex Rousskov wrote: >> >> Indeed! Fixing that exposes one HTTP request in the capture file. >> Unfortunately, >> >> 1. Squid responded to that request (with a 407 message). >> Follow (tcp.stream eq 32) in Wiresh

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-28 Thread Eugene M. Zheganin
Hi. On 28.09.2016 21:21, Alex Rousskov wrote: Indeed! Fixing that exposes one HTTP request in the capture file. Unfortunately, 1. Squid responded to that request (with a 407 message). Follow (tcp.stream eq 32) in Wireshark. 2. Squid did not receive this request when debugging was on:

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-28 Thread Alex Rousskov
On 09/28/2016 09:41 AM, Antony Stone wrote: > On Wednesday 28 September 2016 at 17:37:58, Alex Rousskov wrote: > >> AFAICT, Squid did not receive a request for www.ru: >>> $ egrep -c '.ru|217.112.35.75' cache.log.debug >>> 0 >>> >>> $ tshark -V -r squid-stuck-reference-client.pcap | egrep -c >

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-28 Thread Antony Stone
On Wednesday 28 September 2016 at 17:37:58, Alex Rousskov wrote: > AFAICT, Squid did not receive a request for www.ru: > > $ egrep -c '.ru|217.112.35.75' cache.log.debug > > 0 > > > > $ tshark -V -r squid-stuck-reference-client.pcap | egrep -c > > '.ru|217.112.35.75' 0 Is that a direct c

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-28 Thread Alex Rousskov
On 09/28/2016 02:22 AM, Eugene M. Zheganin wrote: > I took the debug trace and both the tcpdump client-side and server-side > (towards the internet) capturea. ... > I requested a http://www.ru/index.html from a client machine Chrome. AFAICT, Squid did not receive a request for www.ru: > $ egrep

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-28 Thread Eugene M. Zheganin
Hi. On 28.09.2016 01:36, Alex Rousskov wrote: > On 09/27/2016 02:02 PM, Eugene M. Zheganin wrote: > >> I guess squid >> didn't get a way to increase debug level on the fly ? > "squid -k debug" (or sending an equivalent signal) does that: > http://wiki.squid-cache.org/SquidFaq/BugReporting#Detaile

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-27 Thread Alex Rousskov
On 09/27/2016 02:02 PM, Eugene M. Zheganin wrote: > I guess squid > didn't get a way to increase debug level on the fly ? "squid -k debug" (or sending an equivalent signal) does that: http://wiki.squid-cache.org/SquidFaq/BugReporting#Detailed_Debug_Output You will not get ALL,9 this way, unfort

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-27 Thread Eugene M. Zheganin
Hi. On 28.09.2016 0:29, Alex Rousskov wrote: Since you can reproduce this, I suggest collecting ALL,9 log for the stuck master transaction: http://wiki.squid-cache.org/SquidFaq/BugReporting#Debugging_a_single_transaction If collecting a debugging trace is impossible for some reason, then colle

Re: [squid-users] connections from particular users sometimes get stuck

2016-09-27 Thread Alex Rousskov
On 09/27/2016 11:13 AM, Eugene M. Zheganin wrote: > The wireshark screen where the issue is isolated for one particular > connection can be found here - > https://gyazo.com/fdec1d9d7c31a75afc7d4676abb83d15 (it's really a simple > picture: TCP connection establishing, then GET -> 407 -> GET and bun

[squid-users] connections from particular users sometimes get stuck

2016-09-27 Thread Eugene M. Zheganin
Hi. I have a weird problem. I run a squid cache 3.5.19 on FreeBSD/amd64, with about 300 active users, lots of authentication, external helpers (yeah, it's usually the place when one starts to post configs, but let me get to the point), and everything basically works just fine, but sometimes o