Re: [K12OSN] Dan's Guardian

[Eric Harrison <eharrison mail mesd k12 or us>]

Looks like everyone is off to watch the ball game. I never was
much of a football fan, so I'll do something more interesting
like trying to build a Dan's Guardian package for K12LTSP ;-)

I've only used older versions of Dan's Guardian, which were too 
slow for my needs. Version 2.7 is in beta, the docs say this
version scales much better. Time to check it out.

Below are my answers for squidGuard, useful for comparison if
nothing else.

On Sun, 1 Feb 2004, Eric Feldhusen wrote:

>Just curious, does anyone here on the list use Dan's Guardian for 
>filtering?  If you do, or have in the past, I'm interested in
>
>-how big is your pipe is to the internet?

50Mbps, usually run around 20-25Mbps or so. Most of the traffic
is http, which is cached, so the real demand is larger. Demand
peaked around 35MB.

>-how many clients you have going through the filter?

On Friday we had 3,858,130 hits from 5,175 unique IP addresses.
99.9% of this is between 8:00am and 3:00pm, which works out to
be an average of about 150 hits/s. We have a bi-polar distribution,
big spikes in the morning and afternoon.

During interesting events, we tend to see around 10M hits/day.

>-are you using DG to just block url's or are you using the content 
>filtering of DG?

squidGuard only supports url blocking.

>-what is your DG server spec's for your setup?

I over-bought on the hardware, in case we moved to DG. I'm not
under any pressure to move to DG, but I may want to since SG is
not under active development (it is small, simple, program that
works perfectly, but it is always a good idea to hedge your bets)

Currently we are running three servers, two dual Xeon 2.4G with
2Gig of ram & Ultra 320 SCSI drives and a dual PIII 1.13G with
1Gig of ram & a bunch of small SCSI II drives.

The Dual Xeons are running RH9, the PIII is running Fedora.

Another set of proxies I manage handel similar loads just fine
with single 1.8G P4s & 1G ram.

>-what's your general opinion of DG?

TBA ;-)


-Eric