Dramatically improve HAVP performance and save CF lifetime

Home Page Forums Network Management ZeroShell Dramatically improve HAVP performance and save CF lifetime

This topic contains 26 replies, has 0 voices, and was last updated by  Marcelo 3 years, 10 months ago.

Viewing 13 posts - 16 through 28 (of 28 total)
  • Author
    Posts
  • #49467

    Marcelo
    Member

    Seems correct.

    Interesting that it didn’t improve performance for you. At least it is preserving you CF life (in case you use a CF installation).

    In that case, I see no other suggestion to you other than disabe the image scanning as you are not interested in the AV anyway.

    BTW, chances are you are facing some other problem not directly related to the proxy itself.

    Regards,
    Marcelo Vianna

    #49468

    Marcelo
    Member

    I also see you have a very limited amount of RAM (128MB). In this circumnstance, even having On-Memory-Scan enabled probably is forcing the system to swap this memory, so disk access will be performed anyway.

    Suggest increasing memory (at least to 256MB), if possible.

    #49469

    Not sure if i stated it in my original post but I have already disabled image scanning.

    #49470

    as far as the small amount of ram is concerned, I realize that 128mb is not alot, however as I stated in my original post I am only using the proxy for url blocking, if there is a way to disable the A/V scanning that would be ideal.

    #49471

    Marcelo
    Member

    Understand, unfortunately, as far as I know, this is not possible.

    Anyway, if your blacklist is not too big and doesn’t make extensive use of wildcards, I believe that it would be preferrable to exclude the access using the IPs via firewall rules. This is specially important because your users might know the URL’s IPs and skip your blacklist while firewall rules are more effective.

    Good luck

    #49472

    giancagianca
    Member

    you can use opendns for Web content filter and parental control-

    http://www.zeroshell.net/eng/opendns/

    bye-

    #49473

    I have located a number of cidr blocks that I can block in the FORWARD chain to affect my blocking desires thank you for your input.

    I will also consider using opendns, but I am not sure that I wish to use a 3rd party service for this. not that i do not believe it would work very well, but I would prefer to keep everything in one place.

    I have a post in another topic regarding vpn if anyone would care to help me out with that.

    http://www.zeroshell.net/eng/forum/viewtopic.php?t=2119

    #49474

    Jiellen29
    Member

    Thank you so much for the help,i really appreciate it,btw i’m newbie here too…

    Thanks a lot aand God bless!!!

    #49475

    Rover
    Member

    well, i tried this tutorial, but there is no perfomance increase.

    Im using a Alix 2d3 board with a CF Kingston 4 GB.

    🙁

    #49476

    siloen
    Member

    The tutorial hasn’t worked for me either…
    I have 1x Alix 2d3 Kit and 1GB CF card

    Regards,
    siloen

    _____________________________
    spy phone

    #49477

    cyberman
    Member

    I found a workaround to use UrlFiltering but “disable” che ClamAV.

    Edit the HAVP configuration file at:
    /root/kerbynet.cgi/template/havp.config

    Change the MAXSCANSIZE from 5000000 to 1

    The scan size is now 1 byte and speed up the Antivirus engine.

    #49478

    Utteru
    Member

    Thank you for sharing much nice information here.

    #49479

    DiliaK
    Member

    @rover wrote:

    well, i tried this tutorial, but there is no perfomance increase.

    Im using a Alix 2d3 board with a CF Kingston 4 GB.

    🙁

    Hello,

    I use same board. If you dont see a performance increasing, your CF card say : “oh, i will be able to be used more time !”.

    I found it on the web that you should add to preserve CF cards :


    mount -t tmpfs -o size=64m,mode=1777,nosuid,nodev,exec tmpfs /tmp
    mount -t tmpfs -o size=16m,mode=755,nosuid,nodev tmpfs /var/run
    mount -t tmpfs -o size=16m,mode=755,nosuid,nodev tmpfs /var/lock
    mount -t tmpfs -o size=64m,mode=755,nosuid,nodev tmpfs /Database/LOG
    mount -t tmpfs -o size=16m,mode=755,nosuid,nodev tmpfs /Database/var/register/system/mrtg/counters
    mount -t tmpfs -o size=32m,mode=755,nosuid,nodev tmpfs /Database/var/register/system/mrtg/html

    Add it at the end of your pre-boot after the lines proposed here…

    DiliaK

Viewing 13 posts - 16 through 28 (of 28 total)

You must be logged in to reply to this topic.