squid not starting after several installation

Discussion in 'Technical' started by solidstate, Apr 22, 2011.

  1. solidstate

    solidstate New Member

    hello i 've been trying to install squid several times on debian 6.0 and when i start squid it fails to start in the logs i got

    e (9200 out of 9216 stripes)
    2011/04/22 11:06:47| COSS[16466]: /cache1/coss/stripe: Rebuilding 99.83% complete (9200 out of 9216 stripes)
    2011/04/22 11:06:47| COSS[16339]: /cache1/coss/stripe: Rebuilding 99.83% complete (9200 out of 9216 stripes)


    and it is stuck here i changed the whole hardware i am getting same result it's the 15th time i format debian and install squid and it is not starting any help plz?
     
  2. falko

    falko Super Moderator Howtoforge Staff

    Do you have enough free disk space? What's the output of
    Code:
    df -h
    ?
     
  3. solidstate

    solidstate New Member

    yes it is newly formatted

    root@debian:~# df -h
    Filesystem Size Used Avail Use% Mounted on
    /dev/sda1 141G 866M 133G 1% /
    tmpfs 7.9G 0 7.9G 0% /lib/init/rw
    udev 7.9G 156K 7.9G 1% /dev
    tmpfs 7.9G 0 7.9G 0% /dev/shm
    /dev/cciss/c0d0p1 420G 9.1G 411G 3% /cache1
    /dev/cciss/c0d1p1 420G 9.1G 411G 3% /cache2
    /dev/cciss/c0d2p1 420G 9.1G 411G 3% /cache3
     
  4. solidstate

    solidstate New Member

    other systems used to do the same after several install for debian and squid it works i don't know why this is happening after all the configurations is finished and after trying to start squid

    my squid.conf:
    http_port 8080 http11 transparent
    icp_port 0
    max_filedesc 65536
    icp_query_timeout 10000
    maximum_icp_query_timeout 100000

    cache_peer 192.168.88.10 sibling 8080 3130
    cache_peer 192.168.88.11 sibling 8080 3130
    #cache_peer 192.168.88.12 sibling 8080 3130


    visible_hostname Debian
    cache_mgr [email protected]
    access_log /var/log/squid/access.log
    cache_log /var/log/squid/cache.log
    cache_store_log none
    #shutdown_lifetime 3 seconds


    ######## Added new 30-12-2009 ##########
    pipeline_prefetch on
    shutdown_lifetime 1 second
    ########################################

    # Allow local network(s) on interface(s)
    #acl localnet src 192.100.100.0/255.255.255.0
    acl localnet src 192.168.88.0/24
    acl localnet src 219.29.217.0/24

    forwarded_for off
    via off
    httpd_suppress_version_string on
    uri_whitespace strip
    dns_nameservers 127.0.0.1 8.8.8.8
    memory_replacement_policy heap GDSF
    cache_replacement_policy heap LFUDA

    cache_dir coss /cache1/coss 9216 max-size=131072 max-stripe-waste=16384 membufs=500 block-size=1024
    cache_dir coss /cache2/coss 9216 max-size=131072 max-stripe-waste=16384 membufs=500 block-size=1024
    cache_dir coss /cache3/coss 9216 max-size=131072 max-stripe-waste=16384 membufs=500 block-size=1024


    cache_dir aufs /cache1/aufs 409600 16 256 min-size=131072
    cache_dir aufs /cache2/aufs 409600 16 256 min-size=131072
    cache_dir aufs /cache3/aufs 409600 16 256 min-size=131072


    cache_mem 4000 MB
    maximum_object_size 281600 KB
    minimum_object_size 0 KB
    offline_mode off
    #dns_children 32
    cache_swap_low 98
    cache_swap_high 99

    ########################## NEW

    client_persistent_connections on
    server_persistent_connections on

    digest_generation off
    fqdncache_size 51200
    nonhierarchical_direct off
    check_hostnames off


    negative_ttl 3 minutes
    positive_dns_ttl 48 hours
    negative_dns_ttl 10 minutes
    range_offset_limit 0 KB
    request_header_max_size 20 KB
    request_body_max_size 0 KB

    acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
    upgrade_http0.9 deny shoutcast
    #http_reply_access allow localhost

    #icp_access allow fakeips
    #icp_access deny all

    #reply_body_max_size 0 allow all
    acl hotmail_domains dstdomain .hotmail.msn.com
    acl ie6 browser MSIE[[:space:]]6
    header_access Accept-Encoding deny ie6 hotmail_domains

    ######################################

    # No redirector configured



    # Setup some default acls
    acl all src 0.0.0.0/0.0.0.0
    acl localhost src 127.0.0.1/255.255.255.255
    acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 1025-65535
    acl sslports port 443 563
    acl manager proto cache_object
    acl purge method PURGE
    acl connect method CONNECT

    http_access allow manager localhost

    #
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !safeports
    http_access deny CONNECT !sslports

    # Always allow localhost connections
    http_access allow localhost

    quick_abort_min 0 KB
    quick_abort_max 0 KB
    quick_abort_pct 99
    request_body_max_size 0 KB


    # Allow local network(s) on interface(s)
    http_access allow localnet
    #http_access allow all

    cachemgr_passwd none config reconfigure offline_toggle
    acl snmppublic snmp_community public

    #***********************storeurl******************
    acl store_rewrite_list urlpath_regex \/(get_video|videoplayback\?id|videoplayback.*id) \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf)\?
    acl store_rewrite_list_domain url_regex ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
    acl store_rewrite_list_domain url_regex (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
    acl store_rewrite_list_path urlpath_regex \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
    acl store_rewrite_list_domain_CDN url_regex (khm|mt)[0-9]?.google.com streamate.doublepimp.com.*\.js\? photos-[a-z].ak.fbcdn.net \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/$

    acl dontrewrite url_regex redbot\.org (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\?
    acl getmethod method GET

    storeurl_access deny dontrewrite
    storeurl_access deny !getmethod
    storeurl_access allow store_rewrite_list_domain_CDN
    storeurl_access allow store_rewrite_list
    storeurl_access allow store_rewrite_list_domain store_rewrite_list_path
    storeurl_access deny all
    storeurl_rewrite_program /etc/squid/storeurl.pl
    storeurl_rewrite_children 1
    storeurl_rewrite_concurrency 99
    #**********************storeurl********************

    # 1 year = 525600 mins, 1 month = 43800 mins
    refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 10080 50% 40320 ignore-no-cache override-expire override-lastmod store-stale
    refresh_pattern imeem.*\.flv 0 0% 0
    refresh_pattern ^ftp: 40320 20% 40320 override-expire reload-into-ims store-stale
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern ^.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\$
    refresh_pattern \.rapidshare.*\/[0-9]*\/.*\/[^\/]* 161280 90% 161280 ignore-reload store-stale
    refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?) 5259487 99999999% 5259487 overrid$
    refresh_pattern \.(ico|video\-stats) 5259487 90% 5259487 override-expire ignore-reload ignore-no-cache ignore-private ignore-auth override-lastmod ignore-must-revalidate $
    refresh_pattern \.etology\? 5259487 90% 5259487 override-expire ignore-reload ignore-no-cache store-stale
    refresh_pattern galleries\.video\? 10080 50% 40320 override-expire ignore-reload ignore-no-cache store-stale
    refresh_pattern brazzers\? 10080 50% 40320 override-expire ignore-reload ignore-no-cache store-stale
    refresh_pattern \.adtology\? 10080 50% 40320 override-expire ignore-reload ignore-no-cache store-stale
    refresh_pattern ^.*safebrowsing.*google 5$

    refresh_pattern ^http:\/\/((cbk|mt|khm)[0-9]?)\.google\.co(m|\.uk) 5259487 90% 5259487 override-expire ignore-reload store-stale
    refresh_pattern ytimg\.com.*\.jpg 5259487 90% 5259487 override-expire ignore-reload store-stale
    refresh_pattern avgate.*(idx|gz)$ 5259487 90% 5259487 ignore-no-cache reload-into-ims store-stale max-stale=1440
    refresh_pattern kaspersky.*\.avc$ 1440 50% 161280 ignore-reload store-stale
    refresh_pattern kaspersky 1440 50% 161280 ignore-no-cache store-stale
    refresh_pattern images\.friendster\.com.*\.(png|gif) 5259487 90% 5259487 override-expire ignore-reload store-stale
    refresh_pattern facebook.com.*\.(png|gif) 5259487 90% 5259487 override-expire ignore-reload store-stale
    refresh_pattern photobucket.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png) 5259487 999999% 5259487 o$
    refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 5259487 999999% 5$
    refresh_pattern .fbcdn.net.*\.(jpg|gif|png) 5$
    refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\.
    refresh_pattern ^http:\/\/www.onemanga.com.*\/ 5259487 9$
    refresh_pattern mediafire.com\/images.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png) 5259487 999999% 5259487 reload-in$

    refresh_pattern garena\.com 5259487 90% 5259487 override-expire reload-into-ims store-stale

    refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png) 5259487 9$
    refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu) 5259487 999999% 5259487 override-$
    refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape) 5259487 999999% 5259487 o$
    refresh_pattern \.(exe|msi|dmg|bin|xpi|iso|swf|mar|psf|cab) 5259487 999999% 5$
    refresh_pattern \.(mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2) 5259487 9999999% 5259487 override-expire reload-into-ims
    #### Caching windows updates
    refresh_pattern windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims
    refresh_pattern download.microsoft.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims
    refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims

    #### Caching AVG defs#####

    refresh_pattern guru.avg.com/.*\.(bin) 4320 100% 43200 reload-into-ims

    refresh_pattern -i (cgi-bin) 0 0% 0
    refresh_pattern \.(php|jsp|cgi|asx)\? 0 0% 0
    refresh_pattern \.(php|jsp) 0 0% 0
    refresh_pattern . 0 50% 161280 store-stale

    maximum_object_size_in_memory 32 KB

    ie_refresh on
    reload_into_ims on
    buffered_logs on
    #pipeline_prefetch on
    collapsed_forwarding on
    vary_ignore_expire on
    cache_vary on
    ipcache_size 51200
    check_hostnames off
    max_stale 4 year
    update_headers off

    #range_offset_limit -1 # to cache partial contents
    strip_query_terms off
    deny_info TCP_RESET localnet
    negative_ttl 1 seconds
    snmp_port 3401
    snmp_access allow snmppublic all
    retry_on_error on
    logfile_rotate 1
    ####### Hide Proxy ####

    header_access Via deny all
    header_access proxy-connection deny all
    header_access X-Forwarded-For deny all

    # df -h squid size

    ###########################################



    zph_mode tos
    zph_local 0x30



    my sysctl.conn:
    # /etc/sysctl.conf - Configuration file for setting system variables
    # See /etc/sysctl.d/ for additonal system variables
    # See sysctl.conf (5) for information.
    #
    ################# Tunes addon ############

    net.ipv4.tcp_tw_recycle=1
    net.ipv4.tcp_tw_reuse=1
    net.ipv4.tcp_max_syn_backlog = 8192
    fs.file-max = 65535
    net.ipv4.tcp_low_latency = 1
    net.core.wmem_max=8388608
    net.core.rmem_max=8388608
    net.ipv4.tcp_rmem=4096 87380 8388608
    net.ipv4.tcp_wmem=4096 87380 8388608
    net.ipv4.ip_local_port_range = 1024 65000
    net.ipv4.tcp_fin_timeout = 30
    net.ipv4.tcp_keepalive_time = 1800
    kernel.threads-max = 40920
    kernel.msgmax = 32768
    kernel.msgmni = 64
    kernel.msgmnb = 65536
    net.ipv4.ip_forward = 1
    net.ipv4.tcp_timestamps = 0
    net.ipv4.conf.all.accept_redirects = 0
    net.ipv4.tcp_window_scaling = 0
    net.ipv4.tcp_sack = 0
    net.ipv4.tcp_syncookies = 1
    net.ipv4.ip_dynaddr = 1
    net.core.netdev_max_backlog = 8192

    vm.swappiness = 0
    vm.vfs_cache_pressure = 50


    vm.min_free_kbytes = 65535


    net.ipv4.tcp_no_metrics_save = 1


    # Controls source route verification
    net.ipv4.conf.default.rp_filter = 0

    # Do not accept source routing
    net.ipv4.conf.default.accept_source_route = 0




    #kernel.domainname = example.com

    # Uncomment the following to stop low-level messages on console
    #kernel.printk = 4 4 1 7

    ##############################################################3
    # Functions previously found in netbase
    #

    # Uncomment the next two lines to enable Spoof protection (reverse-path filter)
    # Turn on Source Address Verification in all interfaces to
    # prevent some spoofing attacks
    #net.ipv4.conf.default.rp_filter=1
    #net.ipv4.conf.all.rp_filter=1

    # Uncomment the next line to enable TCP/IP SYN cookies
    # This disables TCP Window Scaling (http://lkml.org/lkml/2008/2/5/167),
    # and is not recommended.
    #net.ipv4.tcp_syncookies=1
    # Uncomment the next line to enable packet forwarding for IPv4
    #net.ipv4.ip_forward=1

    # Uncomment the next line to enable packet forwarding for IPv6
    #net.ipv6.conf.all.forwarding=1


    ###################################################################
    # Additional settings - these settings can improve the network
    # security of the host and prevent against some network attacks
    # including spoofing attacks and man in the middle attacks through
    # redirection. Some network environments, however, require that these
    # settings are disabled so review and enable them as needed.
    #
    # Ignore ICMP broadcasts
    #net.ipv4.icmp_echo_ignore_broadcasts = 1
    #
    # Ignore bogus ICMP errors
    #net.ipv4.icmp_ignore_bogus_error_responses = 1
    #
    # Do not accept ICMP redirects (prevent MITM attacks)
    #net.ipv4.conf.all.accept_redirects = 0
    #net.ipv6.conf.all.accept_redirects = 0
    # _or_
    # Accept ICMP redirects only for gateways listed in our default
    # gateway list (enabled by default)
    # net.ipv4.conf.all.secure_redirects = 1
    #
    # Do not send ICMP redirects (we are not a router)
    #net.ipv4.conf.all.send_redirects = 0
    #
    # Do not accept IP source route packets (we are not a router)
    #net.ipv4.conf.all.accept_source_route = 0
    #net.ipv6.conf.all.accept_source_route = 0
    #
    # Log Martian Packets
    #net.ipv4.conf.all.log_martians = 1
    #
    # The contents of /proc/<pid>/maps and smaps files are only visible to
    # readers that are allowed to ptrace() the process
    # kernel.maps_protect = 1












    root@debian:~# df -h
    Filesystem Size Used Avail Use% Mounted on
    /dev/sda1 141G 866M 133G 1% /
    tmpfs 7.9G 0 7.9G 0% /lib/init/rw
    udev 7.9G 156K 7.9G 1% /dev
    tmpfs 7.9G 0 7.9G 0% /dev/shm
    /dev/cciss/c0d0p1 420G 9.1G 411G 3% /cache1
    /dev/cciss/c0d1p1 420G 9.1G 411G 3% /cache2
    /dev/cciss/c0d2p1 420G 9.1G 411G 3% /cache3
     
    Last edited: Apr 25, 2011

Share This Page