Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-11-23 Thread Praveen Ponakanti
Hi Alex, Thanks for all the details. I will build a new squid image off master/v6 to check for the memory leak with test traffic. Regarding the TLS session cache, I will try setting it to 100MB. Are there any stats exposed from the tls session cache that can be monitored to study the session cache

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-11-22 Thread Alex Rousskov
On 11/22/22 21:06, Praveen Ponakanti wrote: Do we have a recent squid ver 6 snapshot build available for testing? Sorry, I do not know the exact answer to your question. One can certainly build master/v6 from git sources, of course. The following config knobs were tried and did not make mu

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-11-22 Thread Praveen Ponakanti
Hi Alex, Do we have a recent squid ver 6 snapshot build available for testing? Looking for something that includes the patch from the PR to introduce the ip_bind_address_noport socket option on outbound TCP connections, I dont see any new builds after Sep 6th. http://www.squid-cache.org/Versions/

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-09-09 Thread Alex Rousskov
On 9/9/22 18:29, Praveen Ponakanti wrote: On Thu, Sep 8, 2022 at 8:31 PM Alex Rousskov wrote: On 9/8/22 19:41, Praveen Ponakanti wrote: >   * We have a large number of workers (30) to help with handling a >     high RPS. However, TCP session reuse does not seem to be optimal

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-09-08 Thread Alex Rousskov
On 9/8/22 19:41, Praveen Ponakanti wrote: * We have a large number of workers (30) to help with handling a high RPS. However, TCP session reuse does not seem to be optimal even with server_persistent_connections enabled as a new outbound session would have to be opened up if the req

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-09-08 Thread Amos Jeffries
On 9/09/22 11:41, Praveen Ponakanti wrote: Hi Alex, Thanks for all the help from the squid dev group with upstreaming the enhancement to scale up outbound TCP sessions on Linux with the IP_BIND_ADDRESS_NO_PORT sockopt flag. Our canary instances have been doing great the last few weeks with t

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-06-21 Thread Alex Rousskov
On 6/19/22 12:48, Praveen Ponakanti wrote: What is the process to have this code patch upstreamed for future squid versions? In short, just post a quality pull request on GitHub (or find somebody who can guide your code towards official acceptance for you). For details, please see https://wi

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-05-20 Thread Amos Jeffries
On 20/05/22 19:44, Praveen Ponakanti wrote: Hi Alex, Thanks for going through several steps to help mitigate src port exhaustion. We are looking to achieve 400-500% more concurrent connections if we could :) as there is a significant buffer on the available CPU. Then you require at least 4,

Re: [squid-users] Scaling concurrent TCP sessions beyond ephemeral port range

2022-05-19 Thread Alex Rousskov
On 5/19/22 20:22, Praveen Ponakanti wrote: Does anyone have recommendations on scaling concurrent connections through the squid proxy to above the ephemeral port range? I know of several solutions, but not all of them are probably applicable to your specific situation: 1. Decrease the amoun