Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fix the squid package {completed}

    Scheduled Pinned Locked Moved Completed Bounties
    46 Posts 14 Posters 57.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mhab12
      last edited by

      I'm not seeing CPU spikes like that, but my bandwidth is all over the place.

      squid1.jpg
      squid1.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • jahonixJ
        jahonix
        last edited by

        Can you easily switch off squid and test without it?
        Just to make sure the hardware, cables and stuff work as expected.

        1 Reply Last reply Reply Quote 0
        • M
          mhab12
          last edited by

          Same file download, without using the proxy.

          nosquid.jpg
          nosquid.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • jahonixJ
            jahonix
            last edited by

            This is a full install and you're using single or MP kernel?

            1 Reply Last reply Reply Quote 0
            • M
              mhab12
              last edited by

              MP kernel AFAIK, it's a dual processor machine.  I have had the same results on a single processor box as well.  Is there a shell command I can run to tell me which kernel I am running?

              1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix
                last edited by

                For sure it's somewhere here:  https://<your-pfsense-ip>/status.php</your-pfsense-ip>

                1 Reply Last reply Reply Quote 0
                • M
                  mhab12
                  last edited by

                  Just a sampling…
                  FreeBSD 6.2-RELEASE-p11 #0: Mon Feb 18 01:25:40 EST 2008
                      sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense_SMP.6

                  FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs

                  1 Reply Last reply Reply Quote 0
                  • E
                    eri--
                    last edited by

                    Are you by any case heeting swap?!

                    1 Reply Last reply Reply Quote 0
                    • M
                      mhab12
                      last edited by

                      Heeting swap?  I don't understand what that means.

                      1 Reply Last reply Reply Quote 0
                      • S
                        Sn3ak
                        last edited by

                        I am guessing 'needing swap'?

                        Have you checked your throttling settings? More specifically is 'Throttle only specific extensions' [Proxy / traffic management] Checked? From my understanding, if that is not checked all file transfers get throttled by default, which may be contributing to your speed loss?

                        1 Reply Last reply Reply Quote 0
                        • M
                          mhab12
                          last edited by

                          Just tried it again both ways, checked and unchecked on 'Throttle only specific extensions'…no change.

                          1 Reply Last reply Reply Quote 0
                          • E
                            eri--
                            last edited by

                            Are you by any case heeting swap?!

                            I mean, is swap getting used?!

                            1 Reply Last reply Reply Quote 0
                            • M
                              mhab12
                              last edited by

                              The top output on my 1.2RC3 box that is working properly shows 100k of swap in use.  The 1.2RC5 with the new squid package just shows 1024M available, 1024M free.  Perhaps you're on to something.

                              1 Reply Last reply Reply Quote 0
                              • E
                                eri--
                                last edited by

                                Can you please post the generated squid.conf.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mhab12
                                  last edited by

                                  Here are two squid.conf, one from our working box and one from the new slower box.  I have tested with only two interfaces on different boxes and see the same result.  I have the newer box in non-transparent mode so the few people who use it won't have to put up with the slowness.

                                  squid.conf.2.6.5.pf.1.2.rc3.txt
                                  squid.conf.2.6.18.pf.1.2.rc5.txt

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    sullrich
                                    last edited by

                                    So basically the differences are:

                                    diff squid.conf.2.6.5.pf.1.2.rc3.txt squid.conf.2.6.18.pf.1.2.rc5.txt

                                    1c1
                                    http_access deny allto be sureterface(s)nsacl/blacklist.acl"s.acl"025-65535
                                    \ No newline at end of file
                                    –-
                                    http_access deny allto be sureterface(s)nsquid/acl/throttle_exts.acl"-65535
                                    \ No newline at end of file

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mhab12
                                      last edited by

                                      The diff related to throttle went away after I changed the box for 'Throttle only specific extensions'.  The do not cache entries are diff because there are no donotcache entries on the 2.6.18 box.  Other than that, they look the same to me, aside from a couple of cache size cfg and IP changes.

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        databeestje
                                        last edited by

                                        He means to ask if you are running into swap space. I asume you are not since you are on a Dual core machine and likely have atleast 1GB of ram.

                                        Can you try using the single processor kernel and see if the problem persists?

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mhab12
                                          last edited by

                                          Is there an easier way to change kernel besides reinstall?

                                          1 Reply Last reply Reply Quote 0
                                          • dotdashD
                                            dotdash
                                            last edited by

                                            Mount the install CD (or copy the kernel to a USB key), backup the old kernel, copy the new one off the CD, reboot.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.