Question

Squid download speed for large files

Asked by: sonnenschein987

We have a proxy here, squid 2.6 on a Mandriva box. It performs extremely well for browsing, but it turns out to be a pain in the b.tt when downloading large files. It limits somehow the bandwidth to somewhere around 40 kbs while by just bypassing squid it goes up to everything available here, means 300 kbs.

I took the standard distribution that came with mandiva and it should not have delay pools, anyway there are none configured.

So the only thing I really need to know is, how can I get squid to download large files faster. I assume I have some bug in my conf.

# NETWORK OPTIONS
# -----------------------------------------------------------------------------
 
http_port 3128
icp_port 0
htcp_port 0
 
hierarchy_stoplist cgi-bin ?
 
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
 
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
 
 
# OPTIONS WHICH AFFECT THE CACHE SIZE
# -----------------------------------------------------------------------------
 
cache_mem 256 MB
 
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
maximum_object_size_in_memory 128 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024 KB
cache_replacement_policy lru
memory_replacement_policy lru
 
 
# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# -----------------------------------------------------------------------------
 
cache_dir ufs /data/squid/cache0 10000 64 256
cache_dir ufs /data/squid/cache1 10000 64 256
 
access_log /data/squid/log/access.log squid
cache_log /data/squid/log/cache.log
cache_store_log /data/squid/log/store.log
debug_options ALL,1
log_fqdn off
client_netmask 255.255.255.255
 
 
# OPTIONS FOR TUNING THE CACHE
# -----------------------------------------------------------------------------
 
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320
 
 
# TIMEOUTS
# -----------------------------------------------------------------------------
 
forward_timeout 4 minutes
connect_timeout 1 minute
persistent_request_timeout 120 minutes
 
 
# ACCESS CONTROLS
# -----------------------------------------------------------------------------
 
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
 
acl FTP proto FTP
acl HTTPS proto HTTPS
 
acl CONNECT method CONNECT
 
acl SSL_ports port 443
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
 
acl mynet src ...
 
acl adminnet src ...
acl adminnet src ...
 
acl ourdomains dstdomain me.com
 
http_access allow manager localhost
http_access allow manager adminnet
http_access deny manager
 
always_direct allow FTP
always_direct allow HTTPS
 
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
 
http_access allow adminnet
http_access allow ourdomains
 
acl support.microsoft.com dstdomain support.microsoft.com
header_access Accept-Encoding deny support.microsoft.com
 
acl blockfiles urlpath_regex "/etc/squid/blocks.files.acl"
# see /usr/lib/squid/error/...
deny_info ERR_BLOCKED_FILES blockfiles
http_access deny blockfiles
 
http_access allow mynet
http_access deny all
 
 
# ADMINISTRATIVE PARAMETERS
# -----------------------------------------------------------------------------
 
cache_mgr #####
cachemgr_passwd ###### all
mail_from squidcache@we.com
 
visible_hostname wpad.we.com
 
 
# OPTIONS FOR THE CACHE REGISTRATION SERVICE
# -----------------------------------------------------------------------------
 
announce_period 0
 
 
# HTTPD-ACCELERATOR OPTIONS
# -----------------------------------------------------------------------------
 
httpd_accel_no_pmtu_disc off
 
 
# MISCELLANEOUS
# -----------------------------------------------------------------------------
 
# dns_testnames google.com
 
logfile_rotate 9
memory_pools on
 
memory_pools_limit 5 MB
 
coredump_dir /var/spool/squid

                                  
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:

Select allOpen in new window

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2008-06-03 at 10:14:16ID23453894
Tags

Squid

,

Squid 2.6

,

2.6

,

Mandriva Linux 2007

Topics

Linux Networking

,

Unix Networking

Participating Experts
3
Points
500
Comments
25

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Squid Configuration
    Hi all. Can anyone help me configuring delay-pools in squid.
  2. Setup delay_pools in squid
    Hi, I'm wanting to configure squid to limit the total speed from each ip to 60kB/s. So say 192.168.0.1 and 192.168.0.2 both try to download files, I want each to be limited to 60kB/s. I also want to place an overall limit so that total bandwidth ever consumed = 130 kB/s Ho...
  3. A Problem With Squid
    dear friends i have a cisco router which this router is gateway and access server too. i have a linux box too and used for caching with squid and monitoring. operation is fedora core 3 and squid is updated with squid-stable9 rpm package and work correct. my problem is low spe...
  4. Squid configuaration error
    Dear Expert I am using red hat linux 8.0 and I am using squid proxy , it is woking fine, but now I want to implement bandwidth restriction , that is why I want to implement squid with delay pool. So I unintall squid.rpm file from my server and download squid-2.4.STABLE1-src....
  5. squid
    does squid have ip based ACL?

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: uetian1707Posted on 2008-06-03 at 11:40:24ID: 21703180

Hi,

Try out squeezer for optimizing Squid:

http://maciej_kozinski.webpark.pl/squeezer.html

 

by: sonnenschein987Posted on 2008-06-03 at 12:20:12ID: 21703617

I ran it and it comes up with some nice statistics that show that we have alot of traffic and that the hit quote is pretty low (makes sense, we have a certain large file traffic). But otherwise I do not see how this will help me.

Thanks!

 

by: IgorALPosted on 2008-06-03 at 23:10:42ID: 21707316

And from what assumptions your get that server that serving file to you could make connection faster? Try to use direct http(not FTP) connection to check that your channel on big files give your faster than squid do

 

by: gheistPosted on 2008-06-05 at 04:58:53ID: 21718282

Looks like out of free RAM.

Set
high_memory_warning to some 90% of your RAM

like

high_memory_warning 900 MB

After reload/restart examine cache logfile.

fqdncache_size is in cache records. Yours is thousand times default.

 

by: sonnenschein987Posted on 2008-06-05 at 05:27:13ID: 21718525

Sorry it took me so long. I just upgraded to stable 3 in the hope it would help, also I compiled in the delay pools (which I still don't use).

First, it did not change anything with the performance. Now my results:
I tweaked lots of parameters and tested. If I "optimize" cache_mem (16MB) and max_object_size (4 MB) I can get it to go up to 90 kbps, but that is it. All other parameters that I touched did not have an effect.

If I use a direct connection I get 300 kbps.

As for the memory, definetively an option, I will add this parameter and see what the log says, but the machine has 3GB and it tells me it uses just 500 MB. All other hardware parameters of the machine should be acceptable, 1.8GHz processor, two non raid scsi drives for the cache_dirs.

 

by: gheistPosted on 2008-06-05 at 07:52:36ID: 21720175

Please post output of
$ rpm -q squid

and output of

squid -v

How do you find "it" uses 500MB ??? Do you get logged errors in cache log or dmesg?

Is your machine 32bit or 64bit ???

Does disabling store log and debug options help???

Using 'none' cache type instead of ufs ?

Post output of df -k ; mount -v

Post uname -a

netstat -ina

for me squid fetches at link speed no matter configuration.

and get rid of mindlessly large fqdn cache - it is not btree it is chained array

 

by: sonnenschein987Posted on 2008-06-05 at 12:16:03ID: 21722970

rmp -q squid:
package squid is not installed

squid -v
Squid Cache: Version 3.0.STABLE6
configure options:  '--prefix=/opt/squid' '--exec-prefix=/opt/squid' '--enable-delay-pools' '--enable-cache-digest' '--enable-poll' '--disable-ident-lookup' '--enable-truncate' '--enable-removal-policies'

500 MB: using webmin 3GB total 2.6GB free, squid runs right now on 44MB

32 bit

log disabling does not help, it just saves a lot of space

fqdn reduced

how do I change to "none" cache type?

disabling log, nothing changes

uname -a:
Linux servername 2.6.17-13mdv #1 SMP Date i686 Intel(R) Xean(TM) CPU 1.80 GHz GNU/Linux

netstat -ina
Kernel Interface table
Iface       MTU Met    RX-OK RX-ERR RX-DRP RX-OVR    TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0       1500   0 11412898      0      0      0 22019055      0      0      0 BMRU
lo        16436   0     3105      0      0      0     3105      0      0      0 LRU
sit0       1480   0        0      0      0      0        0      0      0      0 O

df -k
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/sdb1             20153140    361012  18768388   2% /data/squid/cache0
/dev/sdc1             20153140    361120  18768280   2% /data/squid/cache1
/dev/sdb5             20153140    199536  18929864   2% /data/squid/log

mount -v
/dev/sdb1 on /data/squid/cache0 type ext3 (rw)
/dev/sdc1 on /data/squid/cache1 type ext3 (rw)
/dev/sdb5 on /data/squid/log type ext3 (rw)

 

by: gheistPosted on 2008-06-05 at 13:25:11ID: 21723582

Install mandriva's squid - pay a brief visit to http://easyurpmi.mandriva.com
Then run "urpmi squid"
Then transfer your access lists into /etc/squid/squid.conf
Then run /etc/init.d/squid start

Kind of they seem to know building trade better than you and I (2008.1 is mine, 2.6 on 2007.0 is fine too) (see proof in code attachment)

I see following deficiencies:
You do not enable any removal policies at build and when memory cache is full documents are transfered into disk using fifo method one object at a time - that makes squid slow, especially when not using async-io or aufs features.
It is somewhere in Squid docs - disk cache is backed by 10% of its size of RAM. Examine memory used by command line 'top' utility, webmin is heap of cow droppings for performance monitoring.

You use 32bit system and process is limited to 2GB unless you overcustomize kernel.
So simple 2048MB config:
1000connectionsx64kB socket buffers=64MB
Process as such - 64MB
So we do have 1920MB at our disposal
cache_mem should be half of that - 960 MB
disk caches can total to 9600 MB using remaining memory
so - 4800 on each disk, not more

all the involved filesystems must use ext2+noatime filesystem since others do write twice, do not use drakdisk - it reboots. umount newfs  and manual fstab editing and mount performs quicker

maximum object sizes - not more than half of cache_mem

You may alter between ufs/aufs storage schemas - i cannot guess which is better in your exact setup, example config file is full of explaining comments.

Squid Cache: Version 3.0.STABLE1
configure options:  '--build=i586-mandriva-linux-gnu' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/sbin' '--sbindir=/usr/sbin' '--sysconfdir=/etc/squid' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/lib/squid' '--localstatedir=/var' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--x-includes=/usr/include' '--x-libraries=/usr/lib' '--enable-shared=yes' '--enable-static=no' '--enable-xmalloc-statistics' '--enable-carp' '--enable-async-io' '--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-disk-io=AIO,Blocking,DiskDaemon,DiskThreads' '--enable-removal-policies=heap,lru' '--enable-icmp' '--enable-delay-pools' '--disable-esi' '--enable-icap-client' '--enable-useragent-log' '--enable-referer-log' '--enable-wccp' '--enable-wccpv2' '--disable-kill-parent-hack' '--enable-snmp' '--enable-cachemgr-hostname=localhost' '--enable-arp-acl' '--enable-htcp' '--enable-ssl' '--enable-forw-via-db' '--enable-cache-digests' '--disable-poll' '--enable-epoll' '--enable-linux-netfilter' '--disable-ident-lookups' '--enable-default-hostsfile=/etc/hosts' '--enable-auth=basic,digest,negotiate,ntlm' '--enable-basic-auth-helpers=getpwnam,LDAP,MSNT,multi-domain-NTLM,NCSA,PAM,SMB,YP,SASL,POP3,DB,squid_radius_auth' '--enable-ntlm-auth-helpers=fakeauth,no_check,SMB' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-digest-auth-helpers=password,ldap,eDirectory' '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--with-default-user=squid' '--with-pthreads' '--with-dl' '--with-openssl=/usr' '--with-large-files' '--with-build-environment=default' '--with-filedescriptors=1024' 'build_alias=i586-mandriva-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -fstack-protector-all -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-I/usr/include/openssl ' 'CXXFLAGS=-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -fstack-protector-all -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64' 'FFLAGS=-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -fstack-protector-all -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables'
                                              
1:
2:

Select allOpen in new window

 

by: sonnenschein987Posted on 2008-06-05 at 13:29:23ID: 21723617

wow, Thank you very much, I will check this this evening when I have free access to the machine, I let you know how things will go

 

by: gheistPosted on 2008-06-05 at 13:34:24ID: 21723683

http://easyurpmi.zarb.org/ - correct URL

And install factory kernel, your custom build is supported by you alone and you see the result in initial question.

My uname looks like this:
Linux hostname-discarded 2.6.24.5-laptop-1mnb #1 SMP Tue May 27 12:52:18 EDT 2008 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz GNU/Linux


build date is important to identify running kernel. bear in mind that next time.

 

by: sonnenschein987Posted on 2008-06-05 at 13:44:16ID: 21723774

Thanks, but I need the custom kernel for KAV

 

by: gheistPosted on 2008-06-05 at 13:44:45ID: 21723779

You can go easy upgrade way - just update your 2007.x with latest patches (version in /etc/mandriva-release file), or take hard way to get to 2008.1 and couple years of hassle-free support.

 

by: gheistPosted on 2008-06-05 at 13:47:29ID: 21723807

KAV does not contribute to squid operations. When you get squid running check squidclam package - I do not use that.
Please post some web reference to KAV kernel requirements - i will help you configure factory kernel for its requirements.

 

by: gheistPosted on 2008-06-05 at 13:50:14ID: 21723829

As far as I got with KAV - you need to install kernel-server-latest and kernel-server-devel-latest to build KAV module. It may require to set up /usr/src/linux as symlink to server kernel developer sources.
Do you need that module? It was kind of very slow when I last tried it.

 

by: gheistPosted on 2008-06-05 at 13:51:13ID: 21723843

Good luck - it is late there, i will respond in morning.

 

by: sonnenschein987Posted on 2008-06-05 at 14:31:48ID: 21724212

thank you very much, KAV is running stable (and it is not the reason for the server being slow, because it is off). Compilation worked fine with the instructions KAV has on their website

 

by: sonnenschein987Posted on 2008-06-05 at 14:43:40ID: 21724294

ok, I went back to the mandriva rpm squid 2.6, did the file system change and I am back to max 70kbps large file download speed. Now with your recommended memory settings it is flying fast for websites but these large files are just slow motion. I guess if I have to download something large (anyway nobody else can ;-) I just switch my browser from proxy to direct.

I give up!

 

by: gheistPosted on 2008-06-06 at 00:09:50ID: 21726818

What site you are using for download?

 

by: gheistPosted on 2008-06-06 at 00:19:42ID: 21726871

I guess custom kernel is unable to download file at expected speed - use lynx or w3m to confirm. squid is not always guilty in general TCP/IP stack problems.

 

by: sonnenschein987Posted on 2008-06-06 at 06:48:38ID: 21729003

I use several sites to test and I basically also test the download by bypassing squid. I also downloaded directly from the browser on the server and it goes to full speed.

 

by: gheistPosted on 2008-06-06 at 08:42:43ID: 21730103

Have you downloaded at good speed to squid server eg using wget?

 

by: gheistPosted on 2008-07-26 at 15:50:33ID: 22096538

Delete w/o refund.
I assume last remark led asker into suspicion that his overly customized kernel is at fault, not squid, which is now configured close to perfect.

 

by: sonnenschein987Posted on 2008-07-26 at 20:25:47ID: 31463662

It was very helpful, but I am kind of still in the same situation. The weird thing is, that occasionally I get the full bandwidth over squid, sometimes not, fancy. But this machine gets replaced in a few months, so I will address it then if I have to.

 

by: gheistPosted on 2008-07-27 at 01:54:51ID: 22097744

I's assume you have to disable windowscale/sack/timestamp/pmtu tcp options so that other broke tcp stacks and braindead firewalls like from leading makers, do not interfere with your traffic.

echo net.ipv4.ip_no_pmtu_disc=1 >> /etc/sysctl.conf
echo net.ipv4.tcp_sack=0 >> /etc/sysctl.conf


etc etc

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...