Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fix the squid package {completed}

    Scheduled Pinned Locked Moved Completed Bounties
    46 Posts 14 Posters 57.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      ProZe
      last edited by

      Okay I've tested another configuration.
      Machine was a dual Xeon 3 GHz with 2 Gigs of dual channel RAM and a 500 Gig HDD.
      Unfortunately the problem persists: w/o squid -> full speed, w/ squid -> only nearly 70% is reachable.

      The CPU usage was constantly 1% which was predictable. :)
      btw. CPU usage @ the Celeron was about 15-20% so this couldn't be the problem.

      1 Reply Last reply Reply Quote 0
      • M
        mhab12
        last edited by

        Care to contribute to the bounty?

        1 Reply Last reply Reply Quote 0
        • P
          ProZe
          last edited by

          I would but I'm in apprenticeship so I do not earn enough money to contribute. :/

          1 Reply Last reply Reply Quote 0
          • S
            scott1234
            last edited by

            My download is 13000KB/s with squid it goes down to around 22xxKB/s.

            Spec is:  Dual P3 600MHz, 512MB, Asus P2B-DS, 40GB HDD 7200rpm 16MB Cache.

            I've yet to test the "update" above never really have time to take the firewall down.

            1 Reply Last reply Reply Quote 0
            • H
              heiko
              last edited by

              For me, i´m waiting for 1.21 and then i will speak about the bounty and the squid problem with mhab12, so we will see..

              1 Reply Last reply Reply Quote 0
              • C
                chudy
                last edited by

                Same here. A single connection like video stream downloads full speed without squid. using squid as proxy it slows down from 54kBps to 4kBps. using squid as transparent proxy it became worse 2kBps. I only get 54kbps when connecting multiple video stream download.

                Now I try to test to sort things out. Using PCBSD installed squid head (bec i like the store_rewrite feature).
                using the squid as proxy video stream is like a digital signal 4sec full  2sec 2kBps. Tuning the squid gives me 5 4mins full  2sec 2kBps.

                Then try to copy squid compiled from pcbsd (after all they are the same freeBSD environment) run it at pfsense shell. connections still the same(even the squid tweked for performance).

                On the other side im using in Windows XP (compiled using MinGW) squid as proxy.  I got the speed full(at least the fullest speed i can get behind the router + windows XP squid as proxy).

                1 Reply Last reply Reply Quote 0
                • E
                  eri--
                  last edited by

                  I have studied this and it needs some work at how the squid transparent works.
                  There is even some tweaks at squid for not transparent proxy.

                  I have not time for this right now but will come back later at it if nobody beats me at it.

                  1 Reply Last reply Reply Quote 0
                  • M
                    mhab12
                    last edited by

                    Looking forward to it, Ermal.

                    1 Reply Last reply Reply Quote 0
                    • C
                      chudy
                      last edited by

                      To Fix Squid

                      add this to the /boot/loader.conf

                      kern.ipc.nmbclusters=32768
                      kern.maxfiles=65536
                      kern.maxfilesperproc=32768
                      net.inet.ip.portrange.last=65535

                      or just delete it and replace with

                      autoboot_delay="1"
                      #kern.ipc.nmbclusters="0"
                      hint.apic.0.disabled=1
                      kern.hz=100
                      #for squid
                      kern.ipc.nmbclusters="32768"
                      kern.maxfiles="65536"
                      kern.maxfilesperproc="32768"
                      net.inet.ip.portrange.last="65535"

                      you might ask why squid is so slow? its because default configuration of pfsense is router not as a server
                      thats why kern.ipc.nmbclusters="0" <- is set to zero. if you just simply remove this squid will be just fine.

                      but to tune the squid i add this
                      kern.ipc.nmbclusters=32768
                      kern.maxfiles=65536
                      kern.maxfilesperproc=32768
                      net.inet.ip.portrange.last=65535

                      i just figure out why squid is slow. but i don't like the binary package of squid. i'll be using the squid HEAD bec of the store_rewrite feature for caching youtubes videos and other video files and mp3.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mhab12
                        last edited by

                        This likely is the cause of/solution to the problem.  I just checked my loader.conf, almost empty in my 1.2/6.3 pfSense build.  Perhaps the older 1.2 Release had the offending line.  I'll try adding the new lines later, but as stated before we were already at moving along pretty well.  Thanks for the details chudy.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.