This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[6.001] Some site very slow through proxy.

Unsure if this is IDS/IPS related or the proxy server.

Some sites, like google and www.abc.net.au load very quickly.
Others such as: www.viaarena.com and www.microsoft.com and www.dell.com.au load very slowly.

If I turn proxy use OFF in my browser, they are fast.

No virus scanning or malware scanning active. Just proxying content.
IDS is ON.

Anyone else replicate this?

This thread was automatically locked due to age.

Parents

0 dayne1432 over 20 years ago

Sorry Simon, I am running v6.001 and have both spyware and antivirus running and those sites come up fine. I run my proxy in standard mode. But then again I only have about 4 computers behind my box.
Cancel
Vote Up 0 Vote Down

Cancel
0 Xeno over 20 years ago in reply to dayne1432

On my machine the sites are also very fast. Maybe a DNS related problem? Are the Forwarders in the DNS proxy fast enough? Have you tried to clean up the proxy cache?

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 Xeno over 20 years ago in reply to Simon Shaw

OK, the last request is very slow (46,280 seconds). But the others are fast (~0,082seconds). Anyway, the sites loads fine on my system. I think the problem is somewhere on the tcp layer. Maybe a tcpdump of the communication between website and ASL proxy can give some informations.

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to Xeno

Wanna SSH in and look?
Cancel
Vote Up 0 Vote Down

Cancel
0 Xeno over 20 years ago in reply to Simon Shaw

Just give the login to Astaro support directly, please.

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to Xeno

No, have not tried it in Transparent mode...
Will give that a go soon.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 20 years ago in reply to Simon Shaw

[ QUOTE ]
No, have not tried it in Transparent mode...
Will give that a go soon.

[/ QUOTE ]
I have not tried regular mode on the http proxy. I jsut setup my v4 box as v6 and am using transparent http proxy and your links come up quite quickly. Let me know how the transparent testing goes. If it does not work let me know and i will try to replicate your problem here..[:)]

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to William Warren

Same issue with Transparent mode.

It really hates www.whirlpool.net.au for some reason. It draws the left menu *fairly* quickly then dies on the right hand side. I see a fragment of HTML at the top.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 20 years ago in reply to Simon Shaw

[ QUOTE ]
Same issue with Transparent mode.

It really hates www.whirlpool.net.au for some reason. It draws the left menu *fairly* quickly then dies on the right hand side. I see a fragment of HTML at the top.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 20 years ago in reply to William Warren

try disabling the ips. I run the ips but i do not run the http/php/webserver based rules.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to William Warren

Just proxy. (Even tried with caching off)

Tried with IPS off too.

ASL Support suggest setting up another ASL box and see if it happens with that which i will do as soon as I get some hardware.
Cancel
Vote Up 0 Vote Down

Cancel
0 SveN_01 over 20 years ago in reply to Simon Shaw

Just another idea,
have you enabled HTTP 1.1 over Proxy in your IE?

cu SveN
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 SveN_01 over 20 years ago in reply to Simon Shaw

Just another idea,
have you enabled HTTP 1.1 over Proxy in your IE?

cu SveN
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data