SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0004343: slow - MantisBT
MantisBT - Endian Firewall
View Issue Details
0004343Endian FirewallProxy HTTPpublic2012-04-30 17:352012-08-09 15:35
mario79 
 
normalcrashalways
feedbackopen 
2.5 
 
0004343: slow
When I enable the proxy, the navigation becomes extremely slow.

When I disable the proxy, the navigation is smooth.

Thank you for your attention.
Conexion internet = 10Mb.

User = 60

Version 2.5.1 endian community.
No tags attached.
Issue History
2012-04-30 17:35mario79New Issue
2012-05-02 14:16mario79Note Added: 0007853
2012-05-10 21:57juankamiloNote Added: 0007864
2012-07-30 09:29lorenzo-endianNote Added: 0007963
2012-07-30 09:29lorenzo-endianStatusnew => feedback
2012-08-02 16:37mario79Note Added: 0007985
2012-08-09 14:52lorenzo-endianNote Added: 0008001
2012-08-09 15:35mario79Note Added: 0008003

Notes
(0007853)
mario79   
2012-05-02 14:16   
Good day,

Sorry,how I can check if I find errors in the command-level proxy? Thank you.
(0007864)
juankamilo   
2012-05-10 21:57   
I have the same problem
do not know if this has to do, but i found these errors in /var/log/httpd/error_log

Use of uninitialized value in substitution (s///) at /home/httpd/html/proxy.pac line 287.
Use of uninitialized value in substitution (s///) at /home/httpd/html/proxy.pac line 163.
Use of uninitialized value in substitution (s///) at /home/httpd/html/proxy.pac line 160.
Use of uninitialized value in substitution (s///) at /home/httpd/html/proxy.pac line 163.
(0007963)
lorenzo-endian   
2012-07-30 09:29   
hi mario79 and juankamilo,

on which hardware are you running the EFW? which is the load when the HTTP proxy is running? and when it is switched off?

Thanks in advance!

Lo
(0007985)
mario79   
2012-08-02 16:37   
Hi.

Ok my hardware: Procesor i7, RAM 4GB, HDD 500Gb, 4 Nic, EFW version 2.5.1, of moment, I revolved as doing this:

change:

/usr/lib/efw/dansguardian/default/settings

PICS_ENABLE=off
NAUGHTYNESSLIMIT=160
BLACKLIST=
PHRASELIST=
HAVP=on
PORT=
MAXCHILDREN=500
MINCHILDREN=128
MINSPARECHILDREN=32
PREFORKCHILDREN=16
MAXSPARECHILDREN=256
MAXAGECHILDREN=10000
DANSGUARDIAN_LOG_ROTATE=
UPDATEFREQUENCE=monthly
BLACKLIST_URL=http://cri.univ-tlse1.fr/blacklists/download/blacklists.tar.gz [^]
BLACKLIST_ETAG=
BLACKLIST_TAR_PREFIX=blacklists
BLACKLIST_SYSTEM_PATH=/var/signatures/dansguardian/blacklists/
PHRASELIST_URL=http://contentfilter.futuragts.com/phraselists/phraselistsoct23.tar.gz [^]
PHRASELIST_ETAG=
PHRASELIST_TAR_PREFIX=_current phraselists
PHRASELIST_SYSTEM_PATH=/var/signatures/dansguardian/phraselists/
CREDENTIALS=off
SIGNATURES_VERSION=2.10.1.1

save and exit. Type "restartdansguardian -d"

then, change:

/var/efw/havp/settings

MAXSCANSIZE=50
HAVP_ACCESS_LOG_ROTATE=
MAXSERVERS=150
HAVP_LOG_ROTATE=
NTOP_ENABLED=off
SERVERNUMBER=50

Save and exit.

In this moment, all work good.

Those options, I found in the foro, I not remember where, helped me much.

Thanks you.
(0008001)
lorenzo-endian   
2012-08-09 14:52   
hi mario79,

thanks a lot for the info provided!

the fact here is that you are fine tuning your machine and this, from my point of view, cannot be done in a standard way when we create the pkgs and the contained configuration files.

in your case, the hardware is really powerful, but using that settings on a less powerfull machine could lead to problems due to the number of processes and resources used by the proxy.

so, starting from the fact that the info you provided will save a lot of effort for other guys who are tuning the machine (so, thanks for sharing them), I see this as a matter of configuration and not a bug.

what do you think?

again, thanks a lot for the info provided!

bye

Lo
(0008003)
mario79   
2012-08-09 15:35   
Hi all,

Thanks for answering, what would the proper configuration for this hardware.

What parameters should I change in my hardware?

Sorry for may english.

Bye.