При дебаг уровне ALL,2 фиксирую такие записи, во время зависаний, но это все быстро проходит поэтому, вот такими кусками. Могу привести весь лог, если потребуется. Такое ощущение что он меджленно считывает группы из АД, плюс медленно резолвит ip адреса.
Код: Выделить всё
----------
2018/01/11 16:28:12.449 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:28:12.449 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:28:12.449 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = ALLOWED
2018/01/11 16:28:12.449 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT www.google.com:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:28:12.450 kid1| 85,2| client_side_request.cc(719) clientAccessCheck2: No adapted_http_access configuration. default: ALLOW
2018/01/11 16:28:12.450 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT www.google.com:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(258) peerSelectDnsPaths: Find IP destination for: www.google.com:443' via www.google.com
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(280) peerSelectDnsPaths: Found sources for 'www.google.com:443'
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(281) peerSelectDnsPaths: always_direct = DENIED
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(282) peerSelectDnsPaths: never_direct = DENIED
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.103:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.99:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.104:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.106:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.147:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.105:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=[::] remote=[2a00:1450:4010:c05::68]:443 flags=1
2018/01/11 16:28:12.450 kid1| 44,2| peer_select.cc(295) peerSelectDnsPaths: timedout = 0
2018/01/11 16:28:13.002 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.7:64627 flags=1
2018/01/11 16:28:13.002 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:28:13.002 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.7:64627 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
ecked: localnet
2018/01/11 16:31:34.688 kid1| 85,2| client_side_request.cc(719) clientAccessCheck2: No adapted_http_access configuration. default: ALLOW
2018/01/11 16:31:34.688 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT www.google.ru:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:31:34.688 kid1| 44,2| peer_select.cc(258) peerSelectDnsPaths: Find IP destination for: www.google.ru:443' via www.google.ru
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(280) peerSelectDnsPaths: Found sources for 'www.google.ru:443'
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(281) peerSelectDnsPaths: always_direct = DENIED
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(282) peerSelectDnsPaths: never_direct = DENIED
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=209.85.233.94:443 flags=1
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=[::] remote=[2a00:1450:4010:c01::5e]:443 flags=1
2018/01/11 16:31:34.697 kid1| 44,2| peer_select.cc(295) peerSelectDnsPaths: timedout = 0
018/01/11 16:34:07.090 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:07.090 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:07.090 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = ALLOWED
2018/01/11 16:34:07.090 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT play.google.com:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:34:07.090 kid1| 85,2| client_side_request.cc(719) clientAccessCheck2: No adapted_http_access configuration. default: ALLOW
2018/01/11 16:34:07.090 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT play.google.com:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(258) peerSelectDnsPaths: Find IP destination for: play.google.com:443' via play.google.com
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(280) peerSelectDnsPaths: Found sources for 'play.google.com:443'
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(281) peerSelectDnsPaths: always_direct = DENIED
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(282) peerSelectDnsPaths: never_direct = DENIED
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=173.194.222.200:443 flags=1
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=[::] remote=[2a00:1450:4010:c01::c8]:443 flags=1
2018/01/11 16:34:07.091 kid1| 44,2| peer_select.cc(295) peerSelectDnsPaths: timedout = 0
2018/01/11 16:34:07.982 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.17:54551 flags=1
2018/01/11 16:34:07.982 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:07.982 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.17:54551 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
2018/01/11 16:34:08.278 kid1| 4,2| errorpage.cc(1262) BuildContent: No existing error page language negotiated for ERR_CONNECT_FAIL. Using default error file.
2018/01/11 16:34:08.278 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.7:65213 flags=1
2018/01/11 16:34:08.278 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:08.278 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.7:65213 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
2018/01/11 16:34:08.288 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.17:54393 flags=1
2018/01/11 16:34:08.288 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:08.289 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.17:54393 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
2018/01/11 16:34:08.289 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.17:54395 flags=1
2018/01/11 16:34:08.289 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:08.289 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.17:54395 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
2018/01/11 16:34:09.347 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.7:65362 flags=1
2018/01/11 16:34:09.348 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:34:09.348 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.7:65362 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
2018/01/11 16:34:11.110 kid1| 33,2| client_side.cc(816) swanSong: local=192.168.0.131:3128 remote=192.168.0.7:65160 flags=1
2018/01/11 16:34:11.110 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = ALLOWED
2018/01/11 16:34:11.110 kid1| 33,2| client_side.cc(787) setAuth: WARNING: Graceful closure on local=192.168.0.131:3128 remote=192.168.0.7:65160 flags=1 due to connection-auth erase from ConnStateData::SwanSong cleanup
MJpc/lE9hL+qxzBAtbfEH6RuHMVjB3VgtMwXpkRgL6sN9bJv3cl28l6l/G5yj0CA2Dg+EZrHewqHcqOvfQqyNf8O4Lrck
----------
2018/01/11 16:38:11.115 kid1| 33,2| client_side.cc(737) setAuth: Adding connection-auth to local=192.168.0.131:3128 remote=192.168.0.7:10335 FD 289 flags=1 from new Negotiate handshake request
2018/01/11 16:38:11.127 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:38:11.127 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:38:11.127 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = DENIED
2018/01/11 16:38:11.127 kid1| 82,2| external_acl.cc(822) aclMatchExternal: memberof = ALLOWED
2018/01/11 16:38:11.127 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT push.yandex.ru:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:38:11.127 kid1| 85,2| client_side_request.cc(719) clientAccessCheck2: No adapted_http_access configuration. default: ALLOW
2018/01/11 16:38:11.127 kid1| 85,2| client_side_request.cc(743) clientAccessCheckDone: The request CONNECT push.yandex.ru:443 is ALLOWED; last ACL checked: localnet
2018/01/11 16:38:11.127 kid1| 44,2| peer_select.cc(258) peerSelectDnsPaths: Find IP destination for: push.yandex.ru:443' via push.yandex.ru
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(280) peerSelectDnsPaths: Found sources for 'push.yandex.ru:443'
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(281) peerSelectDnsPaths: always_direct = DENIED
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(282) peerSelectDnsPaths: never_direct = DENIED
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=0.0.0.0 remote=213.180.204.179:443 flags=1
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(286) peerSelectDnsPaths: DIRECT = local=[::] remote=[2a02:6b8::179]:443 flags=1
2018/01/11 16:38:11.137 kid1| 44,2| peer_select.cc(295) peerSelectDnsPaths: timedout = 0