Squid read/write failures - PFSense 2.7.2
-
Hi,
A week ago we installed PFSense 2.7.2 as previous 2.6 stopped passing traffic with no obvious reasons. The new version was ok for a while and now in squid access log we are seeing:
FD (number)=1: read/write failure: (60) Operation timed out
Any idea what it might be?
Thanks,
Rafal
-
@rafi1975 do a “squid -k parse” at CMD prompt and see the output
-
There you go:
2025/02/08 06:06:35| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2025/02/08 06:06:35| Processing: http_port 10.129.49.20:8080
2025/02/08 06:06:35| Processing: http_port 127.0.0.1:8080
2025/02/08 06:06:35| Processing: tcp_outgoing_address 10.129.49.149
2025/02/08 06:06:35| Processing: icp_port 0
2025/02/08 06:06:35| Processing: digest_generation off
2025/02/08 06:06:35| Processing: dns_v4_first on
2025/02/08 06:06:35| ERROR: Directive 'dns_v4_first' is obsolete.
2025/02/08 06:06:35| dns_v4_first : Remove this line. Squid no longer supports preferential treatment of DNS A records.
2025/02/08 06:06:35| Processing: pid_filename /var/run/squid/squid.pid
2025/02/08 06:06:35| Processing: cache_effective_user squid
2025/02/08 06:06:35| Processing: cache_effective_group proxy
2025/02/08 06:06:35| Processing: error_default_language en
2025/02/08 06:06:35| Processing: icon_directory /usr/local/etc/squid/icons
2025/02/08 06:06:35| Processing: visible_hostname localhost
2025/02/08 06:06:35| Processing: cache_mgr admin@localhost
2025/02/08 06:06:35| Processing: access_log /var/squid/logs/access.log
2025/02/08 06:06:35| Processing: cache_log /var/squid/logs/cache.log
2025/02/08 06:06:35| Processing: cache_store_log none
2025/02/08 06:06:35| Processing: netdb_filename /var/squid/logs/netdb.state
2025/02/08 06:06:35| Processing: pinger_enable off
2025/02/08 06:06:35| Processing: pinger_program /usr/local/libexec/squid/pinger
2025/02/08 06:06:35| Processing: logfile_rotate 0
2025/02/08 06:06:35| Processing: debug_options rotate=0
2025/02/08 06:06:35| Processing: shutdown_lifetime 3 seconds
2025/02/08 06:06:35| Processing: acl localnet src 10.129.49.0/25 127.0.0.0/8
2025/02/08 06:06:35| Processing: forwarded_for on
2025/02/08 06:06:35| Processing: httpd_suppress_version_string on
2025/02/08 06:06:35| Processing: uri_whitespace strip
2025/02/08 06:06:35| Processing: acl dynamic urlpath_regex cgi-bin ?
2025/02/08 06:06:35| Processing: cache deny dynamic
2025/02/08 06:06:35| Processing: cache_mem 64 MB
2025/02/08 06:06:35| Processing: maximum_object_size_in_memory 256 KB
2025/02/08 06:06:35| Processing: memory_replacement_policy heap GDSF
2025/02/08 06:06:35| Processing: cache_replacement_policy heap LFUDA
2025/02/08 06:06:35| Processing: minimum_object_size 0 KB
2025/02/08 06:06:35| Processing: maximum_object_size 4 MB
2025/02/08 06:06:35| Processing: cache_dir ufs /var/squid/cache 102400 16 256
2025/02/08 06:06:35| Processing: offline_mode off
2025/02/08 06:06:35| Processing: cache_swap_low 90
2025/02/08 06:06:35| Processing: cache_swap_high 95
2025/02/08 06:06:35| Processing: cache allow all
2025/02/08 06:06:35| Processing: refresh_pattern ^ftp: 1440 20% 10080
2025/02/08 06:06:35| Processing: refresh_pattern ^gopher: 1440 0% 1440
2025/02/08 06:06:35| Processing: refresh_pattern -i (/cgi-bin/|?) 0 0% 0
2025/02/08 06:06:35| Processing: refresh_pattern . 0 20% 4320
2025/02/08 06:06:35| Processing: acl allsrc src all
2025/02/08 06:06:35| Processing: acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 8080 3129 1025-65535 21 70 80 210 280 443 488 563 591 631 777 901 1025-65535
2025/02/08 06:06:35| Processing: acl sslports port 443 563 8080 4443 44303 8443
2025/02/08 06:06:35| Processing: acl purge method PURGE
2025/02/08 06:06:35| Processing: acl connect method CONNECT
2025/02/08 06:06:35| Processing: acl HTTP proto HTTP
2025/02/08 06:06:35| Processing: acl HTTPS proto HTTPS
2025/02/08 06:06:35| Processing: acl allowed_subnets src 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
2025/02/08 06:06:35| Processing: http_access allow manager localhost
2025/02/08 06:06:35| Processing: http_access deny manager
2025/02/08 06:06:35| Processing: http_access allow purge localhost
2025/02/08 06:06:35| Processing: http_access deny purge
2025/02/08 06:06:35| Processing: http_access deny !safeports
2025/02/08 06:06:35| Processing: http_access deny CONNECT !sslports
2025/02/08 06:06:35| Processing: http_access allow localhost
2025/02/08 06:06:35| Processing: request_body_max_size 0 KB
2025/02/08 06:06:35| Processing: delay_pools 1
2025/02/08 06:06:35| Processing: delay_class 1 2
2025/02/08 06:06:35| Processing: delay_parameters 1 -1/-1 -1/-1
2025/02/08 06:06:35| Processing: delay_initial_bucket_level 100
2025/02/08 06:06:35| Processing: delay_access 1 allow allsrc
2025/02/08 06:06:35| Processing: logformat CEF CEF:0|Squid|Squid Web Proxy Server|3.25|%Hs|%Ss|Unknown| requestClientApplication=%'{User-Agent}>h dst=%<A deviceExternalId=%sn suser=%un cs4Label=Referer cn1=%tr aclTagReturned=%ea fileType=%mt cn1Label=Response Time userName_from_ident=%ui deviceSeverity=%Hs request=%ru rt=%ts000 spt=%>p shost=%>A cs4=%{Referer}>h cs1Label=Squid Hierarchy Status cs1=%Sh requestURLPath=%rp userName_from_ssl=%un requestProtocol=HTTP/%rv requestMethod=%rm dvc=%la userName_from_auth=%ul userName_from_external_acl_helper=%ue src=%>a in=%st
2025/02/08 06:06:35| WARNING: The "Hs" formatting code is deprecated. Use the ">Hs" instead.
2025/02/08 06:06:35| WARNING: The "Hs" formatting code is deprecated. Use the ">Hs" instead.
2025/02/08 06:06:35| WARNING: The "rp" formatting code is deprecated. Use the ">rp" instead.
2025/02/08 06:06:35| Processing: access_log /var/squid/logs/CEF.log CEF
2025/02/08 06:06:35| Processing: url_rewrite_bypass off
2025/02/08 06:06:35| Processing: url_rewrite_children 400 startup=40 idle=40 concurrency=0
2025/02/08 06:06:35| Processing: via off
2025/02/08 06:06:35| Processing: forwarded_for delete
2025/02/08 06:06:35| Processing: forward_max_tries 25
2025/02/08 06:06:35| Processing: acl youtubedst dstdomain -n www.youtube.com m.youtube.com youtubei.googleapis.com youtube.googleapis.com www.youtube-nocookie.com
2025/02/08 06:06:35| Processing: request_header_access YouTube-Restrict deny all
2025/02/08 06:06:35| Processing: request_header_add YouTube-Restrict none youtubedst
2025/02/08 06:06:35| Processing: http_access allow allowed_subnets
2025/02/08 06:06:35| Processing: http_access allow localnet
2025/02/08 06:06:35| Processing: http_access deny allsrc
2025/02/08 06:06:35| WARNING: HTTP requires the use of Via
2025/02/08 06:06:35| Requiring client certificates.
-
@rafi1975 have you attempted to rebuild your cache ??
squid -z -f /path/to/X.conf
Maybe it needs to redo the directories again for the cache
-
