Re: Connection Timed out problem

Umm..yes. With large ACL lists, particularly those involving srcdomain.
At some point you reach 'ACL critical mass' and you start getting 'Connection
timed out' messages for the poor souls near the bottom of the list.

At least...that's what caused the one incidence of it that _I've_ seen. YMMV.

D

Nick O'Brien wrote:

> Hi,
>
> We had a strange problem with Squid (squid 1.NOVM14 on Digital Unix
> 3.2C) this morning.
>
> Connections to www.canterbury.ac.uk (our site's web server) suddenly
> failed - the reason give by Squid on the error page was "(60) Connection
> timed out". However connecting to www.canterbury.ac.uk throught our CERN
> proxy (which runs on the same host as Squid) was fine as was pinging
> www.canterbury.ac.uk from the Squid host.
>
> Also even stranger connections to www.cant.ac.uk (our domain is defined as
> both canterbury.ac.uk and cant.ac.uk in our DNS) through Squid were fine.
>
> The Squid logs did not show the reason for the problem, only
> ERR_CONNECT_FAIL messages for www.canterbury.ac.uk.
>
> Restarting Squid cleared the problem, but has anyone else seen this happen?
>
> Nick.
>
> # Nick O'Brien, Computer Officer "It gives me a headache just to #
> # Canterbury Christ Church College think down to your level", Marvin #
> # Phone: +44 1227 782468 the Paranoid Android, HHGTTG #
> # Email:nick@cant.ac.uk Web:http://www.cant.ac.uk/staff/nick/home.html #

--
Note to evil sorcerers and mad scientists: don't ever, ever summon powerful
demons or rip holes in the fabric of space and time. It's never a good idea.
ICQ UIN: 3225440