Squid cache size? (was Linux firewall vs Windows and Hardware based firewalls)

[Karsten M. Self]

on Sun, Aug 03, 2003 at 08:24:14PM +0100, Pigeon (jah.pigeon@ukonline.co.uk) wrote:

> On Sat, Aug 02, 2003 at 09:18:22PM -0700, Paul Johnson wrote:

> > On Fri, Aug 01, 2003 at 06:14:12PM +0100, Pigeon wrote:

> > > In order to make it work, I didn't have to touch anything in squid's
> > > own config, just put appropriate gateway entries in the machines'
> > > /etc/network/interfaces and proxy entries in my browser's proxy config.

> >
> > Well, if you've got a beefy gateway, you could move the adzapping
> > squid there, then use iptables to make it a transparent proxy and save
> > yourself the trouble of having to point everything at the proxy.

>
> So, given that squid-on-a-firewall is apparently a negligible security
> risk, this is all about ease of configuration, rather than performance
> once configured? Cool, I know what I'm dealing with now.
>
> The "new" gateway is a 120MHz Pentium with 40MB RAM, which should just
> about handle squid/adzapper. Previously I was using a 600MHz/128MB
> box, which ended up having loads of other services on it to make good
> use of its capacity, hence the decision to move the security function
> to a separate box.

Incidentally, how much space are you dedicating to your Squid cache? I
know that this can't be assigned directly, so either the segment size,
or net use (du -s on cache) would be useful.

Peace.

--
Karsten M. Self <kmself@ix.netcom.com> [url]http://kmself.home.netcom.com/[/url]
What Part of "Gestalt" don't you understand?
Windows Refund Day II: fight for your right to refund
[url]http://www.windowsrefund.net/[/url]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/Liw7efG8443k044RAv56AJ9nmHfQ+zqwkH4T/FVRxtR3Agk9UQCeLNhA
N+UDkIhLE0S7A6ARpM0vmfY=
=aPJB
-----END PGP SIGNATURE-----

[Paul Johnson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Aug 04, 2003 at 10:49:47AM +0100, Karsten M. Self wrote:

> Incidentally, how much space are you dedicating to your Squid cache? I
> know that this can't be assigned directly, so either the segment size,
> or net use (du -s on cache) would be useful.

A gigabyte does pretty nicely for my users.

- --
.''`. Paul Johnson <baloo@ursine.ca>
: :' : proud Debian admin and user
`. `'`
`- Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/LjYgJ5vLSqVpK2kRAlHoAKCGXXdLoDg7Df5hn7mGG5mzwJ6dsg CfQiMQ
cH79lyswm6LOjD2eDS9hptE=
=yHAj
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to [email]debian-user-request@lists.debian.org[/email]
with a subject of "unsubscribe". Trouble? Contact [email]listmaster@lists.debian.org[/email]

[Pigeon]

On Mon, Aug 04, 2003 at 10:49:47AM +0100, Karsten M. Self wrote:

>
> Incidentally, how much space are you dedicating to your Squid cache? I
> know that this can't be assigned directly, so either the segment size,
> or net use (du -s on cache) would be useful.

Currently (offline) /var/spool/squid is 109340kB; /var is a 1.25GB
partition with just over 1GB free. I've set up a script to run
while [ I'm online ]; do sleep 30; du -sk /var/spool/squid; done
into a log file, and I'll send you a summary of the results (or
the whole thing if you want :-) ) offlist once it's accumulated a
reasonable amount of data. Most times I connect, however, I'm only
on for a couple of minutes and only visit one or two sites and fetch
mail, so it might be a while before I've done enough lengthy browsing
sessions to produce useful data.

As far as memory usage goes, I haven't played with the settings (yet),
so they're all at their default installation values (cache_mem 8MB,
etc.) The machine Squid's on at the moment has 128MB RAM and 0.75GB
swap, so I might find it worthwhile to bump some of the settings up a
bit.

--
Pigeon

Be kind to pigeons
Get my GPG key here: [url]http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x21C61F7F[/url]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see [url]http://www.gnupg.org[/url]

iD8DBQE/LuwpUxADjyHGH38RAgTOAJ4+LOlUKS8qw0iu0D+CXj6GSKmDTw Cgr+6e
KNuiNSexQFqK/gu5Cp3hY8E=
=BfBf
-----END PGP SIGNATURE-----