Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2105 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Just one Website very slowly

dextrobull
Hello

I'm new here and hope I won't ask some stupid questions. First I apologize for my bad English but I hope someone understand what I try to tell.

I have a problem with a ASG Version 7.504

The Astaro is configure also as proxyserver and everything works fine. except one website is very slowly. When I check the proxy live log, so I can't catch any errors or blocked content. The Nat log, seems also be okay and no drops.

If I turn of the proxy function, the website works fine and is opening without any delays.

what could be the reason?

More Details to the environment:

Website:
wupnet.wuestundpartner.com

Proxy Log:
2010:07:14-11:30:03 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1150" time="37 ms" request="0xb0c3f538" url="wupnet.wuestundpartner.com/.../x-icon" 
2010:07:14-11:30:10 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="21018 ms" request="0xb0c6b820" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:30:35 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="46048 ms" request="0xb0cd6050" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:31:35 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="11646" time="87299 ms" request="0xb0c6dda8" url="wupnet.wuestundpartner.com/.../html" 
2010:07:14-11:31:35 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="426" time="26 ms" request="0xb0c22410" url="wupnet.wuestundpartner.com/.../x-javascript" 
2010:07:14-11:31:35 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="702" time="28 ms" request="0xb0c6b820" url="wupnet.wuestundpartner.com/.../css" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3373" time="21037 ms" request="0xb0c51410" url="wupnet.wuestundpartner.com/.../css" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2538" time="21041 ms" request="0xb0cd6628" url="wupnet.wuestundpartner.com/.../css" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="17087" time="21076 ms" request="0xb0c187c0" url="wupnet.wuestundpartner.com/.../x-javascript" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" time="14 ms" request="0xb0c22410" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" time="21 ms" request="0xb0c6dda8" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:31:56 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="584" time="22 ms" request="0xb0cd6628" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:32:17 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="34049" time="21137 ms" request="0xb0c6b820" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:32:40 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1550" time="43861 ms" request="0xb0c51410" url="wupnet.wuestundpartner.com/.../gif" 
2010:07:14-11:32:40 gw httpproxy[3760]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.150" user="" statuscode="200" cached="0" profile="REF_wHjkAUNAdq (Immo Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1150" time="25 ms" request="0xb0c605d0" url="wupnet.wuestundpartner.com/.../x-icon"


This site need more than 2 minute to load!

QoS:
Not configure

CPU/RAM Load:
CPU 8%
RAM 29%

I hope somebody can help me

thanks a lot


This thread was automatically locked due to age.
Parents
  • 0
    I also have read the thread in the German forum.  You asked about DNS - it is configured on the Astaro at 'Network Services >> DNS'.  If that were not configured and the HTTP/S Proxy were not in "Transparent" mode, every web access would be slow, so I don't think that's the problem with this one website.

    One of the lines above gives a hint: size="1550" time="43861 ms"

    That usually makes me think that the site needs an Exception for Anti-Virus.  They may have a web server that won't play well with the Proxy, so the only solution might be to put a DNS-Host definition for wupnet.wuestundpartner.com into the 'Transparent mode skiplist'.

    It looks like your customer also might be a customer of that company.  If I were your customer, before skipping Anti-Virus or the Proxy altogether, I would want to know that Wuest und Partner has world-class internet security like that provided by Astaro with all subscriptions.  I also would want to see their formal network security policy.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Thank a lot for you help.

    I've made a lot of test so I'm sure, that only this site which this symptoms so I can say, thats not a global problem with my webfilter.

    I checked the DNS Entries into my astaro and made sure that there the right DNS entries are. 

    funnily enough, I found a problem with the logo gif grafik. Sometime when I refresh the WUPNET Website, I get a "content blocked" entry from the logo gif. But just from the file, all the other gifs will load without any problems, so I get a red x where the logo should be.

    I've also tried to experiment with the antivirus, without any results.

    I setup a rule into the PF to allow any http access to wupnet.wuestundpartner.com so I'm able to skip the proxy for just this site.

    I know that's not really the perfect solution, but I don't have more time to experimental.

    I thanks everybody for help
Reply
  • 0 in reply to BAlfson
    Thank a lot for you help.

    I've made a lot of test so I'm sure, that only this site which this symptoms so I can say, thats not a global problem with my webfilter.

    I checked the DNS Entries into my astaro and made sure that there the right DNS entries are. 

    funnily enough, I found a problem with the logo gif grafik. Sometime when I refresh the WUPNET Website, I get a "content blocked" entry from the logo gif. But just from the file, all the other gifs will load without any problems, so I get a red x where the logo should be.

    I've also tried to experiment with the antivirus, without any results.

    I setup a rule into the PF to allow any http access to wupnet.wuestundpartner.com so I'm able to skip the proxy for just this site.

    I know that's not really the perfect solution, but I don't have more time to experimental.

    I thanks everybody for help
Children
No Data