Squid 3.1 proxy server -

[knev]

Hi

I have build a new squid server with version 3.1 on centos Os, this new squid proxy gives the option to block https protocol. https blocking required to block https://facebook.com in my office.

The DHCP Server gives 252 Proxy Autodiscovery option to client pc which helps in discovery the squid for internet access.
IE enabled with Automatically detect settings.
Is there way to speed up the discovery as the internet page takes few seconds to actually open a site?

How to increase the performance of the squid?


Thanks
Knev

 

[Savatar]

I noticed you didn't get any replies here yet. While I can't make any specific recommendations, as I've not set up a squid proxy before, you can start with a guide like this for squid performance in general:
http://vietlux.blogspot.com/2012/07/squid-proxy-tuning-for-high-perfomance.html

Here's an article about proxy auto-discovery in general, and it acknowledges that it's slow (and, as a security risk, implies that manually setting the proxy by administrative policy would be safer and faster): http://perimetergrid.com/wp/2008/01/11/wpad-internet-explorers-worst-feature/

Be careful to research and understand what each setting does before making any changes. I would also check to see if you might be able to update to the latest version (3.3 or later), instead of 3.1, as that could contain some important fixes or performance improvements over previous releases: http://wiki.squid-cache.org/SquidFaq/BinaryPackages#KnowledgeBase.2BAC8-CentOS.Squid-3.3

 

[knev]

Thanks Savatar for the reply.

I found that DNS was causing the issue, Here the PAC file loaded with different IP's of different LAN IP's of different office, The reason for this that they can access then intranet sites without sending request to Proxy.
I made few changes and it works fine.

Now the bigger challenge is that https site like facebook getting blocked in IE and Firefox, but unable to block in CHROME...