Dhcp + Squid Muito Lento - !socorro!

rodrigogriffo
(usa CentOS)

Enviado em 19/09/2009 - 23:54h

Boa noite a todos.
Estou com um servidor dhcp, dns e squid. O squid funfa que e uma blz (nao esta em modo transparente)o dhcp e dns tambem. So que apos algum tempo com as maquinas clientes (sao 40 no total) do nada o tempo de resposta do squid fica impraticavel, ele fica tao lento mas tao lento que da erro de pagina direto, se eu reiniciar a maquina ou dar um release/renew na placa de rede ele volta normalmente.

squid
==================================================
http_port 3128
icp_port 3130
#htcp_port 4827
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 396 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB
cache_dir ufs /var/spool/squid 10000 16 256
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
mime_table /etc/squid/mime.conf
pid_filename /var/run/squid.pid
ftp_user micgri@
ftp_passive on
#cache_dns_program /usr/lib64/squid/dnsserver
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

#Autenticação de Usuários
#auth_param basic program /usr/lib64/squid/pam_auth
#auth_param basic children 3
#auth_param basic realm Digite seu usuario e senha
#auth_param basic credentialsttl 2 hours


acl all src 192.168.100.0/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost


# Regras Pessoais
#acl usuario proxy_auth REQUIRED
acl blist url_regex -i "/etc/squid/blist"
acl wlist url_regex -i "/etc/squid/wlist"
acl liberados src 192.168.100.199 192.168.100.198 192.168.100.197 192.168.100.196
##########################################################

#Permissao de Regra Pessoal
http_access allow liberados
http_access allow wlist
http_access deny all blist
http_access allow all
##########################################################

http_access deny all
http_reply_access allow all
icp_access allow all
#htcp_access allow all
coredump_dir /var/spool/squid
visible_hostname zeus.micgri
error_directory /usr/share/squid/errors/Portuguese
=======================================================
dhcp
=======================================================
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.sample

#colocando o servidor dhcp com prioridade
authoritative;
#intergração do dhcp com o dns
ddns-update-style interim;

subnet 192.168.100.0 netmask 255.255.255.0 {
ddns-hostname "192.168.100.200";
ddns-domainname "MICGRI";
authoritative;
option routers 192.168.100.200;
option subnet-mask 255.255.255.0;
option domain-name "micgri";
option domain-name-servers 192.168.100.200;
option ntp-servers 192.168.100.200;
range 192.168.100.20 192.168.100.150;
default-lease-time 216000;
max-lease-time 432000;

ddns-updates on;
ddns-domainname "micgri.";

}
key chave {
algorithm hmac-md5;
secret "who31zSrHt7ZlS7xgZaUZQ==";
};

zone micgri. {
primary 192.168.100.200;
key chave;
}

===========================================================

onde esta o meu erro de configuração para acontecer isso ?

agradeço a ajuda

Rodrigo Griffo
rodrigogriffo@gmail.com