Hello, Amos, Alex, thanks for the information!
> What is your Squid version? The first one: squid -v Squid Cache: Version 6.13 Service Name: squid This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--disable-dependency-tracking' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake' '--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-icmp' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl' '--disable-arch-native' '--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' --enable-ltdl-convenience The second one: squid.user -v Squid Cache: Version 6.10 Service Name: squid This binary uses OpenSSL 1.1.1k FIPS 25 Mar 2021. For legal restrictions on distribution see https://www.openssl.org/source/license.html configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--prefix=/data/squid.user' '--exec-prefix=/data/squid.user' '--datadir=/data/squid.user/share' '--sbindir=/data/squid.user/usr/sbin' '--sysconfdir=/etc/squid.user' '--libexecdir=/data/squid.user/usr/lib/squid' '--localstatedir=/data/squid.user/var' '--with-logdir=/data/squid.user/var/log/squid' '--with-pidfile=/data/squid.user/var/run/squid.pid' '--mandir=/data/squid.user/share/man' '--bindir=/data/squid.user/usr/bin' '--disable-arch-native' '--disable-dependency-tracking' '--disable-maintainer-mode' '--disable-option-checking' '--disable-silent-rules' '--disable-translation' '--disable-strict-error-checking' '--enable-arp-acl' '--enable-async-io=8' '--enable-auth' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,SMB_LM' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=SMB_LM,fake' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-carp' '--enable-delay-pools' '--enable-ecap' '--enable-epoll' '--enable-esi' '--enable-eui' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,SQL_session,unix_group,wbinfo_group' '--enable-follow-x-forwarded-for' '--enable-htcp' '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-inline' '--enable-linux-netfilter' '--enable-removal-policies=lru,heap' '--enable-security-cert-validators=fake' '--enable-storeid-rewrite-helpers=file' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-url-rewrite-helpers=fake' '--enable-zph-qos' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-snmp' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-truncate' '--enable-useragent-log' '--enable-wccpv2' '--with-aio' '--with-build-environment=default' '--with-default-user=squid' '--with-large-files' '--disable-ipv6' '--with-openssl' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CXXFLAGS=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' > Can you tell how your Squids name their > shared memory segment "files"? For example, on some Linux OSes, > those segments could be in /var/run/shm/ > with names like squid-tr_map_anchors.shm and squid-tr_spaces.shm. Alex, I can not find these files. There is no the /var/run/shm/ directory in my host. I tried running the "locate .shm" command, but it did not find anything. Moreover, I do not see any squid's shared memory segments when I run the "ipcs -m" command. There are some files in /dev/shm, which I found using lsof the main squid's pid: # the first instance lsof -p 1318 | grep shm squid 1318 root DEL REG 0,23 30205 /dev/shm/squid-cf__queues.shm squid 1318 root DEL REG 0,23 30206 /dev/shm/squid-cf__readers.shm squid 1318 root DEL REG 0,23 30204 /dev/shm/squid-cf__metadata.shm squid 1318 root 8u REG 0,23 8 30204 /dev/shm/squid-cf__metadata.shm (deleted) squid 1318 root 9u REG 0,23 525572 30205 /dev/shm/squid-cf__queues.shm (deleted) squid 1318 root 10u REG 0,23 136 30206 /dev/shm/squid-cf__readers.shm (deleted) # the second instance lsof -p 1514 | grep shm squid.use 1514 root mem REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm squid.use 1514 root mem REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm squid.use 1514 root mem REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm squid.use 1514 root mem REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm squid.use 1514 root 6u REG 0,23 8 31494 /dev/shm/squid-cf__metadata.shm squid.use 1514 root 7u REG 0,23 525572 31495 /dev/shm/squid-cf__queues.shm squid.use 1514 root 8u REG 0,23 136 31496 /dev/shm/squid-cf__readers.shm squid.use 1514 root 9u REG 0,23 2093368 31497 /dev/shm/squid-tls_session_cache.shm Maybe I'm not experiencing any difficulties because I have caching turned off on both instances? Kind regards, Ankor. чт, 6 мар. 2025 г. в 17:11, Alex Rousskov <rouss...@measurement-factory.com >: > On 2025-03-06 08:59, Amos Jeffries wrote: > > On 6/03/25 19:17, Andrey K wrote: > >> Hello, > >> > >> I have a similar configuration: two SMP squids running on the same OEL > >> host. > >> > >> They were built with different configurations: with different > >> installation path prefixes and different names of binary files: squid > >> and squid.user and they listen to different ports. > >> They are launched from two different services:squid.service and > >> squid.user.service with the service Type=forking: > >> > >> ExecStart=/usr/sbin/squid -sYC > >> ExecStart=/sbin/squid.user -f /etc/squid.user/squid.conf > >> > >> I have not experienced any troubles with this configuration yet. > >> > >> /> Please be aware that "squid -n ..." is a REQUIREMENT for running/ > >> /multiple Squid instances on the same machine regardless of what > features > >> are used./ > >> > >> Could you please tell me if I should use the -n option in the > >> ExecStart strings? > >> The arguments of the options should be the service names? > >> > >> ExecStart=/usr/sbin/squid -sYC -n squid.service > >> ExecStart=/sbin/squid.user -f /etc/squid.user/squid.conf -n > >> squid.user.service > >> > > Yes you should. The different ./configure options has helped you avoid > > major issues, but some may still appear. > > I agree. Moreover, I do not understand how your two SMP Squids could > work correctly without distinct service names because (on OEL) I would > expect them to share the same shared memory segments (which they must > not do to remain distinct instances). > > What is your Squid version? Can you tell how your Squids name their > shared memory segment "files"? For example, on some Linux OSes, those > segments could be in /var/run/shm/ with names like > squid-tr_map_anchors.shm and squid-tr_spaces.shm. > > > Thank you, > > Alex. > > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > https://lists.squid-cache.org/listinfo/squid-users >
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
