What is the most suitable tool to replace Squid?

jucelio_rosa

Good afternoon.
What is the most suitable tool to replace Squid?

At the company where I work, we use Pfsense 2.8.1. Squid no longer starts. I researched and saw that Squid is no longer supported. I'm looking for a tool that can replace it.

KOM

@jucelio_rosa You can either spin up squid/squidguard on a separate system or convert your fw to something that still supports squid.

jucelio_rosa

@KOM At the company where I work, we use Pfsense 2.8.1. Squid no longer starts. I researched and saw that Squid is no longer supported. I'm looking for a tool that can replace it.

KOM

@jucelio_rosa Squid runs on 2.8.1 but there was a library bug IIRC. If you manually start squid then check the system log, do you see this error?

The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'ld-elf.so.1: /usr/local/sbin/squid: Undefined symbol "_ZTVNSt3__117bad_function_callE"'

michmoor

You have several choices depending on budget but none of them will be on your pfsense.
Your options will be

Replace pfsense with another vendor that can do content filtering
Use another service while keeping pfsense in line .

jucelio_rosa

@KOM Good morning. The goal is to keep Pfsense and have another proxy option in case Squid really doesn't work anymore (from what I've researched, Squid has been discontinued).

JonathanLee

@jucelio_rosa Squid has been updated upstream were just waiting for it to be merged here. All the issues security concerns etc have been fixed upstream.

Per email from Squid community..

"The Squid HTTP Proxy team is very pleased to announce the availability
of the Squid-7.3 release!

This release is, we believe, stable enough for general production use.
We encourage all users of any previous version of Squid to upgrade to it.

It can be downloaded from GitHub, at
https://github.com/squid-cache/squid/releases/tag/SQUID_7_3

The main change since version 7.2 is the fix for regression bug 5520
"host or domain with leading digits rejected with ERR_INVALID_URL",
along with a handful of other improvements and fixes.

Please remember to run "squid -k parse" when testing the upgrade to a new
version of Squid. It will audit your configuration files and report
any identifiable issues the new release will have in your installation
before you "press go".

If you encounter any issues with this release please file a bug report at
https://bugs.squid-cache.org/"

This software works so good big tech hates when its used...HATES it it's light a giant flashlight on privacy abuses, it like gives Google a heart attack when its running so I assume it will be updated here eventually

jucelio_rosa

@JonathanLee use Pfsense 2.8.1.