Hardware:
Dell PowerEdge SC1430
Processor(s): 2x DualCore Intel Xeon 5110 1.6Ghz
RAM: 2x 2Gb
HD: 80GB (boot) and 2x 1Tb Hitachi drives (RAID 1)
Network: Built-in NIC and Intel EXPI9402PT
Software:
SME Server 7.3 (2.6.9-67.0.1.ELsmp)
DansGuardian (dansguardian.i386 2.9.9.2-el4.sme) per
http://wiki.contribs.org/DansguardianNOTES: I did have to modify some files (/etc/mdadm.conf) in order to make the RAID 1 bootable in the system. Other than that, there are no other "unusual" changes.
------
The question is: Is there something that I can do to fix the speed /connectivity issue with the DansGuardian software?
Problem details:
If I "wget -v --delete-after [SOME WEBSITE]" on the server box it takes approximately 6 seconds for the page to be served this is without the images, of course. My MBP reports the same 6 seconds with "curl -q -v --proxy-anyauth [SOME WEBSITE PAGE]". On the other hand my IE clients (mostly v7), it takes approximately 6 times as long to get the same page.
If I change the clients so that they hit the Squid proxy directly, it seems to shave at least 20 seconds off the page load time.
It also appears that DansGuardian doesn't work with SSL encrypted connections (i.e. HTTP). Right now, I have every client using the Squid port (i.e. 3128) directly for secure connections and it is quite a bit faster at 4 seconds vs no response at all.
Hardware details:
Currently, the two ports on the Intel NIC are being used to connect to each network (oddly enough the one on the motherboard no longer appears in the list). Each connection has a manually assigned IP address. The "internal" port connects into a rack of Cisco switches and the external port connects into a standard consumer WIFI router.
In the server, processor utilization seems to hover between 0.0% and 0.3%. It also seems to only be utilizing 9% (approx. 300Mb) of the available RAM. When I use "netstat -t" it doesn't even come close to the maximum number of ports. Thus, I don't believe that I've reached the maximum number of open ports on the internal NIC (if anyone has a better test, let me know, please!).
Software details:
Other than this software, everything seems to be working perfectly on the SME box. One site advised users to make adjustments in the following areas to improve performance and I have done so here, (obviously, to no great effect).
dansguardian.conf
maxchildren=180
minchildren=32
minsparechildren=8
preforkchildren=10
maxsparechildren=64
maxagechildren=10000
phrasefiltermode=0
PS. Yes, I have re-instantiated the process with "/etc/init.d/dansguardian restart".
2 Replies
1250 Views