HTTP Anti-Virus Proxy

I have installed Havp+clamav+squid on Centos4.4
but it's too slow.
how do I increase performance?

if I use trend replace clamav,what should I do?
TKS.

You need to tell us more about your config. Hardware, users, config? How else to know what's wrong

I had same environment,havp 0.86 is stable and fast ,
use CENTOS 4.4 without any problem and performance issue.


Here is my suggestion
1. reduce havp process , depend on how much memory and how many scanner you used.

Total memory = max server process * pattern size

2. use Trophie or Clamavlib scanner get better performance , especailly you don't need to pre-fork process and pattern file load direct by havp process.
3. use clamavlib instead of clamd , no need to pre-fork clamav process.
4. clamav provide a useful function to block (broken exe and encrypted archive)

beside this , use sanwich architect to boost performance

Internet <-> Squid A <-> havp <-> Squid B <-> client

get better performance , but you need to take care what virus store in cache of Squid B
or safe one

Internet <-> Squid A <-> havp <-> client

What is "pattern size"?

The pattern size doesn't really matter. It is loaded before childs are created, so they all share it in memory. It's more like processes * 10MB that the scanning uses.

Very sorry for I'm come back too later
I Only have 256MB RAM
intel(R) Celeron(R) CPU 2.66GHz

main config:

SERVERNUMBER 15
MAXSERVERS 100
LOG_OKS false

SCANIMAGES false
ENABLECLAMLIB true
CLAMDBDIR /var/lib/clamav

50 users

to butz. I use
Internet <-> Squid A <-> havp <-> client
architect .still too slow

Hardware issue??

You need to set MAXSERVERS to 15 too. Maybe 10 servers or less is more realistically. Ofcourse it's near impossible to run any other programs with 256MB.

Also make sure TEMPDIR points to a tmpfs/ramdisk and not to a slow HD. It just might give a small edge even if you are running out of memory.