ClearFoundation

I am a subscribed user of clearos 5.2
My box is in a larger environment.
600 - 700 users
non-transparent mode,content filter enabled,user authentication enabled.

In peak hours, network slows down.
I am really clueless.I have already increased max children value of dansguardian.conf file.


This is my setting.

# sets the maximum number of processes to spawn to handle the incoming
# connections. Max value usually 250 depending on OS.
# On large sites you might want to try 180.
maxchildren = 600



# sets the minimum number of processes to spawn to handle the incoming
connections.
# On large sites you might want to try 32.
minchildren = 32



# On large sites you might want to try 10000.
maxagechildren = 10000



My machine has enough resources still.
can i increase maxchildren value more?
can anybody have any ideas?
Its very urgent. pls help me

There are a number of possible causes for the performance hit you're experiencing, not just DansGuardian. OpenLDAP and disk I/O spring to mind.

All the 600 instances are being utilized in peak hours.

ps -ea|grep dansguardian-av|wc -l
603

While booting ldapsync takes around 10 minutes to start.
but, "top" result at peak hours doesnt show anything related to ldap.
occasionally i have seen slapd occupies more than 100% of CPU(I have Quad Core Processor).

This is new box with 500GB Hard Disk.
"df -h" shows 450GB as current available space.

free -m says 2240M as available memory.

Whats wrong?
Kindly help me

What sort of internet connection do you have to serve 600 people? you may need to consider to bandwidth shaping / QOS to get the best out of your connection.

If your max children limit is being reached, then you need to push it further, otherwise requests to filter the data will be queued until another process becomes free.

When you say slows down, what exactly do you mean...sites start to timeout? or network traffic to ClearOS slows down?

How much RAM do you have in your server?

If you disable the content filter (but keep the proxy with authentication on) does network speed resume normal speed at peak time? If so would suggest a server resources problem in filtering all the traffic

The top output at peak time would be useful if you can post it

I have 3 External lines.
eth0-LAN
eth1-2Mbps
eth2-4Mbps
eth3-2mbps

I dont know anything about bandwidth shaping /QOS

Yes i keep on increasing max children.Right now i have set 750.
/var/log/messages often shows "system dansguardian[]:Error connecting to proxy".

When i say slow down,websites are getting delay to come into the browser..

I have 4gb of RAM

i have bypassed the content filter by directing my browser requests to 3128(instead of 8080)in peak hours. Comparitvely better. But not normal.

Hi,

I too have a slow internet when i enable user authentication in ClearOS 5.2

Seen 'top' results and 'free' results.

I am seeing just a CPU Load of 1.0 in the DualCore 2.9GHz Server
and a 2GB RAM with 600MB free at these times

ps -ea|grep dansguardian-av|wc -l
105

So what could be the issue.
Note: I didnt change any settings in squid.

Namaskaram Raghaven,

I suggest you to check your bandwidth usage first and monitor your network traffic.

iptraf is a command line utility and that can be used to monitor your real time bandwidth usage.

IPAudit is the software auditing your network and producing result for every 30 Minutes.

See people in your network are using torrent clients.