LinuxForum.Fans
Тема

странности со скоростью интернет

Автор: W03L 3 сообщений 753 просмотров
#166724

Привет.

Столкнулся с проблемой:
скорость интернета на сервере не превышает 560 kbit/s, хотя у клиентов через squid 1000 kbit/s
если я удаляю squid (dpkg -P squid) и раздаю интернет через iptables, то и у клиентов скорость становиться не выше 560 kbit/s

squid.conf

Показать
text

acl all src 0.0.0.0/0.0.0.0

acl usr src 192.168.1.2-192.168.1.49

acl manager proto cache_object

acl localhost src 127.0.0.1/32

acl SSL_ports port 443 # https

acl SSL_ports port 563 # snews

acl SSL_ports port 873 # rsync

acl SSL_ports port 5222 # jabber0

acl SSL_ports port 5223 # jabber1

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 123 # NTP

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl Safe_ports port 631 # cups

acl Safe_ports port 873 # rsync

acl Safe_ports port 901 # SWAT

acl purge method PURGE

acl CONNECT method CONNECT

http_access allow manager localhost

http_access deny manager

http_access allow purge localhost

http_access deny purge

http_access deny CONNECT !SSL_ports

http_access deny !Safe_ports

http_access allow usr

http_access deny usr

http_access deny all

http_port 8085 transparent

icp_port 0

hierarchy_stoplist cgi-bin ?

access_log /SQUID/log/access.log squid

logfile_rotate 4

refresh_pattern ^ftp: 1440 20% 10080

refresh_pattern ^gopher: 1440 0% 1440

refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880

refresh_pattern . 0 20% 4320

acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]

upgrade_http0.9 deny shoutcast

acl apache rep_header Server ^Apache

broken_vary_encoding allow apache

extension_methods REPORT MERGE MKACTIVITY CHECKOUT

hosts_file /etc/hosts

coredump_dir /SQUID

cache_mem 64 MB

maximum_object_size 4096 KB

maximum_object_size_in_memory 512 KB

cache_dir ufs /SQUID/cache 4096 16 256

cache_log /SQUID/log/cache.log

cache_store_log /SQUID/log/store.log

pid_filename /SQUID/log/squid.pid

cache_effective_user proxy

cache_effective_group proxy

iptables-save

Показать
text

# Generated by iptables-save v1.4.4 on Tue May 31 16:21:55 2011

*filter

:INPUT ACCEPT [0:0]

:FORWARD ACCEPT [5:4556]

:OUTPUT ACCEPT [0:0]

-A INPUT -i eth0 -j ACCEPT

-A INPUT -i eth1 -p udp -j ACCEPT

-A INPUT -i eth1 -p tcp -j ACCEPT

-A FORWARD -j ACCEPT

-A OUTPUT -j ACCEPT

COMMIT

# Completed on Tue May 31 16:21:55 2011

# Generated by iptables-save v1.4.4 on Tue May 31 16:21:55 2011

*mangle

:PREROUTING ACCEPT [414:389052]

:INPUT ACCEPT [26:1820]

:FORWARD ACCEPT [388:387232]

:OUTPUT ACCEPT [21:9869]

:POSTROUTING ACCEPT [409:397101]

COMMIT

# Completed on Tue May 31 16:21:55 2011

# Generated by iptables-save v1.4.4 on Tue May 31 16:21:55 2011

*nat

:PREROUTING ACCEPT [0:0]

:POSTROUTING ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

-A PREROUTING ! -d 192.168.1.0/24 -p tcp -m multiport --dports 80,443 -j REDIRECT --to-ports 8085 COMMIT

# Completed on Tue May 31 16:21:55 2011

если только через iptables

Показать
text

...
-A POSTROUTING -s 192.168.1.0/24 ! -d 192.168.1.0/24 -p udp -j SNAT --to-source 192.168.50.254 
-A POSTROUTING -s 192.168.1.0/24 ! -d 192.168.1.0/24 -p tcp -j SNAT --to-source 192.168.50.254
...

здесь
192.168.1.0/24 - локалка
192.168.50.254 - сетевуха на ADSL модем

подскажите, чё за ... :'(

#166914

W03L, скорее всего, ваши клиенты просто "ускоряются" за счёт друг друга.

#166924

mtu выравнивайте

Войдите или зарегистрируйтесь, чтобы ответить.