• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Fix the squid package {completed}

Scheduled Pinned Locked Moved Completed Bounties
46 Posts 14 Posters 60.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M Offline
    mhab12
    last edited by Feb 18, 2008, 5:47 PM

    MP kernel AFAIK, it's a dual processor machine.  I have had the same results on a single processor box as well.  Is there a shell command I can run to tell me which kernel I am running?

    1 Reply Last reply Reply Quote 0
    • J Offline
      jahonix
      last edited by Feb 18, 2008, 5:56 PM

      For sure it's somewhere here:  https://<your-pfsense-ip>/status.php</your-pfsense-ip>

      1 Reply Last reply Reply Quote 0
      • M Offline
        mhab12
        last edited by Feb 18, 2008, 6:10 PM

        Just a sampling…
        FreeBSD 6.2-RELEASE-p11 #0: Mon Feb 18 01:25:40 EST 2008
            sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense_SMP.6

        FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs

        1 Reply Last reply Reply Quote 0
        • E Offline
          eri--
          last edited by Feb 18, 2008, 9:11 PM

          Are you by any case heeting swap?!

          1 Reply Last reply Reply Quote 0
          • M Offline
            mhab12
            last edited by Feb 18, 2008, 9:25 PM

            Heeting swap?  I don't understand what that means.

            1 Reply Last reply Reply Quote 0
            • S Offline
              Sn3ak
              last edited by Feb 19, 2008, 12:41 AM

              I am guessing 'needing swap'?

              Have you checked your throttling settings? More specifically is 'Throttle only specific extensions' [Proxy / traffic management] Checked? From my understanding, if that is not checked all file transfers get throttled by default, which may be contributing to your speed loss?

              1 Reply Last reply Reply Quote 0
              • M Offline
                mhab12
                last edited by Feb 19, 2008, 1:00 AM

                Just tried it again both ways, checked and unchecked on 'Throttle only specific extensions'…no change.

                1 Reply Last reply Reply Quote 0
                • E Offline
                  eri--
                  last edited by Feb 19, 2008, 8:46 AM

                  Are you by any case heeting swap?!

                  I mean, is swap getting used?!

                  1 Reply Last reply Reply Quote 0
                  • M Offline
                    mhab12
                    last edited by Feb 19, 2008, 11:59 AM

                    The top output on my 1.2RC3 box that is working properly shows 100k of swap in use.  The 1.2RC5 with the new squid package just shows 1024M available, 1024M free.  Perhaps you're on to something.

                    1 Reply Last reply Reply Quote 0
                    • E Offline
                      eri--
                      last edited by Feb 19, 2008, 12:56 PM

                      Can you please post the generated squid.conf.

                      1 Reply Last reply Reply Quote 0
                      • M Offline
                        mhab12
                        last edited by Feb 19, 2008, 3:21 PM

                        Here are two squid.conf, one from our working box and one from the new slower box.  I have tested with only two interfaces on different boxes and see the same result.  I have the newer box in non-transparent mode so the few people who use it won't have to put up with the slowness.

                        squid.conf.2.6.5.pf.1.2.rc3.txt
                        squid.conf.2.6.18.pf.1.2.rc5.txt

                        1 Reply Last reply Reply Quote 0
                        • S Offline
                          sullrich
                          last edited by Feb 19, 2008, 8:35 PM

                          So basically the differences are:

                          diff squid.conf.2.6.5.pf.1.2.rc3.txt squid.conf.2.6.18.pf.1.2.rc5.txt

                          1c1
                          http_access deny allto be sureterface(s)nsacl/blacklist.acl"s.acl"025-65535
                          \ No newline at end of file
                          –-
                          http_access deny allto be sureterface(s)nsquid/acl/throttle_exts.acl"-65535
                          \ No newline at end of file

                          1 Reply Last reply Reply Quote 0
                          • M Offline
                            mhab12
                            last edited by Feb 19, 2008, 9:01 PM

                            The diff related to throttle went away after I changed the box for 'Throttle only specific extensions'.  The do not cache entries are diff because there are no donotcache entries on the 2.6.18 box.  Other than that, they look the same to me, aside from a couple of cache size cfg and IP changes.

                            1 Reply Last reply Reply Quote 0
                            • D Offline
                              databeestje
                              last edited by Feb 19, 2008, 9:09 PM

                              He means to ask if you are running into swap space. I asume you are not since you are on a Dual core machine and likely have atleast 1GB of ram.

                              Can you try using the single processor kernel and see if the problem persists?

                              1 Reply Last reply Reply Quote 0
                              • M Offline
                                mhab12
                                last edited by Feb 20, 2008, 3:58 PM

                                Is there an easier way to change kernel besides reinstall?

                                1 Reply Last reply Reply Quote 0
                                • D Offline
                                  dotdash
                                  last edited by Feb 20, 2008, 4:20 PM

                                  Mount the install CD (or copy the kernel to a USB key), backup the old kernel, copy the new one off the CD, reboot.

                                  1 Reply Last reply Reply Quote 0
                                  • J Offline
                                    jahonix
                                    last edited by Feb 21, 2008, 1:22 AM

                                    I bet it can be found in CVSweb as well, right?
                                    Anyone point me to the right link (still have my problems with this versioning system…)

                                    1 Reply Last reply Reply Quote 0
                                    • P Offline
                                      paulino
                                      last edited by Mar 1, 2008, 4:58 PM

                                      Hi!

                                      I am having the same squid slow transfer problems on my institution.
                                      I have a dual-wan system: one 25 MBps cable connection on WAN for internet access and one institutional adsl 1MBps on WAN OPT3 (also has internet access using another gateway).
                                      The OPT3 is connected to a 1GBps switch and has a public IP (we have 32 public ips for mail, webpage, etc… and a cisco router).
                                      If I download a huge file from our servers (connected on the WAN OPT3 interface) I can easily get 11000 MBytes/sec from our internal lan's, passing through squid.
                                      Nevertheless, accessing the internet (through the cable connection on WAN) I can get maximum 50Kbytes/sec using squid and 2000KBytes/sec using only NAT and proxy off.
                                      Why using the same squid traffic is slow in one interface and normal on another?

                                      Strangely if I discard the cable connection, deactivate WAN OPT3, and connect the 1MBps connection on WAN interface, I can get the full speed of it, downloading at about 200Kbytes/sec from the internet.
                                      Can it be the different modems? On the cable I have a regular Motorola modem, and on the institucional I have a much higher quality adsl modem.
                                      Can it be the NIC? When using cable we connect it to pfsense using a 100MBps 3Com card (xl driver) and the 1Mbps is on one VLAN that enters in pfsense throug a Intel PRO1000 (em driver) together with our internal networks...

                                      Can anyone shed some light on this problem? I am liking a lot pfsense, but I cannot have squid turned on because of such slow transfers!

                                      Yours,
                                      Antonio Paulino

                                      1 Reply Last reply Reply Quote 0
                                      • M Offline
                                        mhab12
                                        last edited by Mar 4, 2008, 2:20 AM

                                        OK - finally got a chance to try 1.2 release on matching HW to our 1.2rc3 fully functional box.  Clean install, no changes except to add squid and setup the WAN interface.  Before squid I was getting 2.7 mbit, after squid barely 300kbit.  This is a single core kernel, pIII 1.7 w/ 1 gb ram, 80gb hd and one 3com, one intel NIC.

                                        1 Reply Last reply Reply Quote 0
                                        • M Offline
                                          mwdiers
                                          last edited by Mar 25, 2008, 3:59 PM

                                          I can confirm. Fresh install of 1.2. Nothing but squid running, latest package as of last night.

                                          With transparent enabled, on our dual-bonded T1 here, I get 600-1100Kbit.
                                          Disabled, I get ~ the full 3Mbit.

                                          Running Pentium D architecture, with SMP kernel.

                                          I monitored CPU usage with top. No difference. 99% idle either way.

                                          Not good.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received