dns timeout/slow webpages

[Dime I]

Oftentimes web surfing is slow because we block unclassified sites and the webpages get stuck too long trying to contact domains like facebook and twitter that every website hits these days and then our users complain 'internet is slow.'   Where can we adjust the timeout to be very quick, like for example how do we tell the browser to stop trying to pull information from that blacklisted domain after 4 seconds or something?

[Jinhee]

It's not DNS timeout. It's more about webserver connection timeout. You use NxClient for them? Did you not have the problem without NxClient?

If it's about browser timeout try 'set browser connection timeout' on Google. 

[Dime I]

it was before and after nxclient.  Just going through the nxfilter it happens.  I'm just thinking it is the browser trying to contact a blocked domain and the timeout is long so the webpage loading gets held up.  For firefox, in about:config, maybe the network.http.response.timeout setting will help?  I don't know.

[Jinhee]

Can't tell if it's from connection timeout. If it's for a blocked domain you get the block page as they are redirected to NxFilter's webserver. Do you see them getting the block page eventually? Or do you see them being blocked with many domains on 'Logging > Request'. If you try to access a webpage having slow response how many DNS requests being blocked?

[jeroen...@gmail.com]

NXfilter config ssl disabled?

That slows things down.

make sure you are running on port 80 and 443.

Make sure that clents have correct time to avoid ssl warnings.

Hope this helps.