Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

We are using squid web cache transparent proxy in our company and we usually have 450 users browsing during peak hours. We get lists of URLs (upto even 1600 URLs per list) from the national telecom authority for blocking. We block them using Squid ACL with a black list file but we experience significant performance degradation as soon as we apply the ACL in squid.conf. What is the remedy of this problem? How can we block such huge number of URLs?.

share|improve this question
1  
Just FYI, you're probably not going to see a lot of sympathy or support based on the fact that you're implementing government-mandated censorship. Might be time to look for a consultant or some other form of paid help, because I don't know anyone who'd help do what you're doing for free. – HopelessN00b Feb 24 at 3:36

1 Answer

up vote 0 down vote

So. you are experiencing a performance issue with squids native acl.

What version of squid are you using and what about specs on the box?

I am also curious if you are getting warnings in your logs when you reconfigure or restart squid when you apply new blacklists.

Keep in mind that .somesite.com also blocks all subdomains from the TLD down, so there is no need to have crap.somesite.com and .somesite.com, it will cause performance issues and flood out your log files. If this is an issue for you, make sure you parse out all the dupes/subs and keep only tlds in there unless otherwise neccesary to only have a sub blocked.

Also, have you tried the squid-prime blacklist from squidblacklist.com?

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.