This afternoon, squid in the office collapsed, then collapsed a second time. The symptoms were the same - the squid process ate all the memory on the machine, and stopped responding. "Investigation" revealed a funny bug.
Viewing cache.log after the first fall did not reveal anything criminal, the squid was restarted, but after a few hours the symptoms were repeated.
After the second fall and restart, I climbed into access.log, and my hair stood on end - a
huge number of requests to post.audioscrobbler.com with the answer TCP_DENIED.
The answer was simple: it was this morning that I put the clementine player on my car, set it up for my last.fm account, and started using it, leaving the proxy setting at the default value - “use system proxy settings”.
And now, instead of swearing at the inability to connect to last.fm, and offering to enter a username and password, clementine continued to bombard the proxies with requests, as a result of which he surrendered under the pressure of such an inadvertent dos.
In numbers:
The total size of the SQUID log file was 365 megabytes.
Of these, requests to last.fm at 310 megabytes
Total 2.998.894 requests to last.fm with the status TCP_DENIED.
')
Considering that clementine worked without interruption from 10 am to approximately 3:30 pm, we get roughly 151 requests per second. For our little proxy (a virtual machine with 1GHz and 1GB of RAM allocated) is a lot.
Link to the buggy bug report.Moral - do not trust the default settings :)