Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are using squid web cache transparent proxy in our company and we usually have 450 users browsing during peak hours. We get lists of URLs (upto even 1600 URLs per list) from the national telecom authority for blocking. We block them using Squid ACL with a black list file but we experience significant performance degradation as soon as we apply the ACL in squid.conf. What is the remedy of this problem? How can we block such huge number of URLs?.

share|improve this question
Just FYI, you're probably not going to see a lot of sympathy or support based on the fact that you're implementing government-mandated censorship. Might be time to look for a consultant or some other form of paid help, because I don't know anyone who'd help do what you're doing for free. – HopelessN00b Feb 24 '13 at 3:36

So. you are experiencing a performance issue with squids native acl.

What version of squid are you using and what about specs on the box?

I am also curious if you are getting warnings in your logs when you reconfigure or restart squid when you apply new blacklists.

Keep in mind that also blocks all subdomains from the TLD down, so there is no need to have and, it will cause performance issues and flood out your log files. If this is an issue for you, make sure you parse out all the dupes/subs and keep only tlds in there unless otherwise neccesary to only have a sub blocked.

Also, have you tried the squid-prime blacklist from

share|improve this answer

Whenever the Squid configuration is reloaded, everything Squid does is paused.

I suggest to use ufdbGuard, a free URL filter for Squid. When ufdbGuard reloads the URL database there is no negative effect for Squid or users browsing. One can download ufdbGuard from SourceForge and URLfilterDB.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.