Cache/Proxy

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

T

Youtube content getting filtered on Squid

• • themaharshpatel

31

1
Votes

31
Posts

3.3k
Views

T

@JonathanLee Thats really great news, sorry was not following this since long (I switched from IT to Development). So to clean things up I will be closing PR and Redmine issue.

Best
Maharsh.
B

SSL error with two domains on one WAN with HAProxy

• • bastian.cr

3

0
Votes

3
Posts

84
Views

B

@viragomann
Yes, the host is reachable and the exchange server has the correct certificate.

If I use normal portforwarding without a HAProxy at ports 80+443 from pfsense to the exchange server everything works properly.
P

SSH thru HA with pfSense question

• • planetinse

1

0
Votes

1
Posts

37
Views

No one has replied
J

Hot off the press!!!

• • JonathanLee

1

0
Votes

1
Posts

149
Views

No one has replied
N

503 error with HAProxy

• • NasKar

11

0
Votes

11
Posts

268
Views

N

@viragomann
Thanks so much for your help. I finally got it working with WAN and LAN
M

Squid Proxy Server block any websites

• • makazo

6

0
Votes

6
Posts

268
Views

J

Some sites you need to splice it is complex software to configure. Don't give up you got your splice list keep going...
N

HAProxy

• • natethegreat21

7

0
Votes

7
Posts

889
Views

C

@Tom8 slope

Helpful, thanks.
W

HAproxy unable to reach backends behind VPNs

• • WEBudo

5

0
Votes

5
Posts

137
Views

W

@viragomann Got it working!
I wasn't able to reboot pfSense before because it's on production. Last night I scheduled a window and voilá... it works now.
Thanks!
N

Slow throughput with HAproxy and SSL offload

• • neil31415

1

0
Votes

1
Posts

79
Views

No one has replied
M

Updated binaries of Haproxy

• • maverick_slo

9

0
Votes

9
Posts

220
Views

J

@maverick_slo not always the case.. While sure its good idea to keep your software updated, but if there are no bug fixes to address an issue your seeing, or security fixes that are of concern, or new features you want. There is nothing pushing to running a newer version when your current version is working fine.

Ever hear the term if its not broke, don't fix it ;)

Normally when a new version of pfsense comes out, the packages normally get an update along with that. But they don't always push updates to packages unless the package maintainer updates it, or there is some sort of security issue, etc.
P

How to get error files working after 2.7>/22>

• • planetinse

3

0
Votes

3
Posts

222
Views

P

@jacklynjohnson

start page like this and it will work.

HTTP/1.0 503 Service Unavailable
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<!DOCTYPE html>.........
P

HAproxy websocket vs. certificate - strange behaviours ...

• • planetinse

2

0
Votes

2
Posts

80
Views

P

@planetinse

If someone reads this the problem was related to HTTP/2 and http/1.1
and known issues post Haproxy 2.4

Enforcing traffic in frontend with alpn http/1.1 - solved the issue in my scenario.

btw. the certificates was a blind-track, it was never related.

https://github.com/haproxy/haproxy/issues/162
M

Realtime Stats (SQStat) error

• • makazo

19

0
Votes

19
Posts

359
Views

M

I'm wondering, I changed my mode from "custom" mode to "splice all" mode and added these codes as you can see in the photo, the system and many blocked programs and applications started to work. What exactly is the logic behind this?

@JonathanLee
@stephenw10

Custom Options (SSL/MITM) =

acl splice_it ssl::server_name .microsoft.com
acl splice_it ssl::server_name .windowsupdate.com
acl splice_it ssl::server_name .akamaitechnologies.com
acl splice_it ssl::server_name .akadns.net
acl step1 at_step SslBump1
ssl_bump peek step1
ssl_bump splice splice_it
ssl_bump bump all
ssl_bump peek step1
ssl_bump splice all
My custom refresh_options on the Local Cache tab
refresh_pattern -i windowsupdate.com/..(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims
refresh_pattern -i microsoft.com/..(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims
refresh_pattern -i windows.com/..(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims
refresh_pattern -i microsoft.com.akadns.net/..(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims
refresh_pattern -i deploy.akamaitechnologies.com/.*.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims

If you want to restrict (bypass) ip addresses of your local Network :-
acl splice_it ssl::server_name .microsoft.com
acl splice_it ssl::server_name .windowsupdate.com
acl splice_it ssl::server_name .akamaitechnologies.com
acl splice_it ssl::server_name .akadns.net
acl localnet src 10.0.0.0/8 #local network
acl localnet src 192.168.0.0/16 #local network
acl localnet src 172.16.0.0/12 #local network
acl localnet src 2.2.2.2/32 #just for example
acl step1 at_step SslBump1
ssl_bump peek step1
ssl_bump splice splice_it
ssl_bump splice localnet # splice one more time
ssl_bump bump all
M

HAProxy Native Response Generator support

• • markes20754

3

0
Votes

3
Posts

80
Views

M

@viragomann Thanks -- that worked!
L

SquidGuard - cannot download blacklist from blacklist tab [Solved]

• • laurenzzo

5

0
Votes

5
Posts

2.3k
Views

E

2024 and still the same problem with Firefox... Try Edge or Chrome...
M

Haproxy 100% cpu usage

• • maverick_slo

47

3
Votes

47
Posts

2.5k
Views

S

@coreybrett

Please, SAVE THE CONFIG.XML and try fresh install (and of coarse put config.xml back in place) from scratch (not forgot to cold reboot at the end of install),- may be this help…
S

Forwarding client IP from HAProxy in pfSense to Traefik

• • s0ulf3re

2

0
Votes

2
Posts

206
Views

V

@s0ulf3re said in Forwarding client IP from HAProxy in pfSense to Traefik:

Basically, how can I make it so that the Traefik proxy forwards the actual IP Addresses instead of just 192.168.1.1?

At the bottom of the backend settings there is an option "transparent mode", which does this.

However, I don't recommend this. I'd rather go with "forwarded-for" header. III think, also Traefik should be able to handle this.
D

HAProxy proxies hosts unreachable

• • digimd

15

0
Votes

15
Posts

1.9k
Views

D

@viragomann Yes, I meant to keep all ssl access local. I have the listening interfaces allowed to access all target destinations. I am just throwing the idea although I don't think it's the issue. Thank you for following through.
M

Tidak bisa download video dari savefrom.net (Can't download video from savefrom)

• • masthink

9

0
Votes

9
Posts

6.9k
Views

T

Just use https://y2mate.mov : )
M

Download site Cnes não conclui

• • MarcosPF

1

0
Votes

1
Posts

42
Views

No one has replied

2 / 187