Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense update Squid 2.7.7 [official]

    Scheduled Pinned Locked Moved Indonesian
    26 Posts 8 Posters 20.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Y
      yantisna
      last edited by

      makasih, matur nuwun, thanks om.. penjelasannya jelas banget, saya coba dulu ya… makasih

      1 Reply Last reply Reply Quote 0
      • Y
        yantisna
        last edited by

        2009/11/11 17:22:44| ACL name 'all' not defined!
        FATAL: Bungled tunning.conf line 21: storeurl_access deny all
        Squid Cache (Version 2.7.STABLE7): Terminated abnormally.

        mohon pencerahan om, matur nuwun

        1 Reply Last reply Reply Quote 0
        • G
          grage95
          last edited by

          @yantisna:

          2009/11/11 17:22:44| ACL name 'all' not defined!
          FATAL: Bungled tunning.conf line 21: storeurl_access deny all
          Squid Cache (Version 2.7.STABLE7): Terminated abnormally.

          mohon pencerahan om, matur nuwun

          ACL name 'all' not defined!

          maaf salah naro urutannya,
          utk tunning harusnya di taruh setelah acl (acl dynamic urlpath_regex cgi-bin ?)
          jadinya seperti ini
          _acl all src 0.0.0.0/0.0.0.0
          acl localhost src 127.0.0.1/255.255.255.255
          acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 $webgui_port $port 1025-65535
          acl sslports port 443 563 $webgui_port
          acl manager proto cache_object
          acl purge method PURGE
          acl connect method CONNECT
          acl dynamic urlpath_regex cgi-bin ?

          include /usr/local/etc/squid/tunning.conf

          EOD;_

          posting penempatan tunning.conf diatas saya sudah saya perbaiki.

          kalau squid.inc terbaru silahkan buka di

          http://www.pfsense.org/packages/config/squid/squid.inc

          1 Reply Last reply Reply Quote 0
          • Y
            yantisna
            last edited by

            siap boz terima kasih

            1 Reply Last reply Reply Quote 0
            • Y
              yantisna
              last edited by

              Mohon bimbingannya om grage95
              setelah saya pindah include tuning nya, acl sudah tidak bermasalah tetapi saya menemukan masalah lagi seperti ini :

              2009/11/11 20:16:42| parse_refreshpattern: Unknown option '.(ico|video-stats)': ignore-must-revalidate
              2009/11/11 20:16:42| parse_refreshpattern: Unknown option '^.*(utm.gif|ads?|advertising.com|ad.yieldmanager.com|doubleclick.net|adserving.cpxinteractive.com)': ignore-must-revalidate
              2009/11/11 20:16:42| parse_refreshpattern: Unknown option '^.*safebrowsing.clients.clients.com/safebrowsing': ignore-must-revalidate

              berikut configurasi squid saya
              http_port 10.10.0.252:3128 transparent
              http_port 127.0.0.1:80 transparent
              icp_port 0

              pid_filename /var/run/squid.pid
              cache_effective_user proxy
              cache_effective_group proxy
              error_directory /usr/local/etc/squid/errors/English
              icon_directory /usr/local/etc/squid/icons
              visible_hostname localhost
              cache_mgr admin@arya-gemilang.com
              access_log /var/squid/log/access.log
              cache_log /var/squid/log/cache.log
              cache_store_log none
              logfile_rotate 1
              shutdown_lifetime 3 seconds

              Allow local network(s) on interface(s)

              acl localnet src  10.10.0.0/255.255.255.0
              uri_whitespace strip

              cache_mem 8 MB
              maximum_object_size_in_memory 32 KB
              memory_replacement_policy heap GDSF
              cache_replacement_policy heap LFUDA
              cache_dir aufs /var/squid/cache 6000 16 256
              minimum_object_size 0 KB
              maximum_object_size 128 KB
              offline_mode off
              cache_swap_low 98
              cache_swap_high 99

              No redirector configured

              Setup some default acls

              acl all src 0.0.0.0/0.0.0.0
              acl localhost src 127.0.0.1/255.255.255.255
              acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 6789 3128 1025-65535
              acl sslports port 443 563 6789
              acl manager proto cache_object
              acl purge method PURGE
              acl connect method CONNECT
              acl dynamic urlpath_regex cgi-bin ?
              include /usr/local/etc/squid/tunning.conf
              cache deny dynamic
              http_access allow manager localhost

              http_access deny manager
              http_access allow purge localhost
              http_access deny purge
              http_access deny !safeports
              http_access deny CONNECT !sslports

              Always allow localhost connections

              http_access allow localhost

              quick_abort_min 0 KB
              quick_abort_max 0 KB
              request_body_max_size 0 KB
              reply_body_max_size 0 allow all
              delay_pools 1
              delay_class 1 2
              delay_parameters 1 -1/-1 38912/38912
              delay_initial_bucket_level 100

              Throttle extensions matched in the url

              acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
              delay_access 1 allow throttle_exts
              delay_access 1 deny all

              Allow local network(s) on interface(s)

              http_access allow localnet

              Default block all to be sure

              http_access deny all

              kalo menurut om ini yg harus saya perbaiki yang dimananya, soalnya terus terang saja saya baru sekali ini pegang pfsense dan squidnya,
              maaf kalau merepotkan

              1 Reply Last reply Reply Quote 0
              • G
                grage95
                last edited by

                waduh salah upload, squid-2.7 tidak support itu

                ignore-must-revalidate
                hapus aja

                silahlan sedot ulang

                cd /usr/local/etc/squid/
                fetch http://shakau.googlepages.com/tunning.conf
                chown proxy:proxy tunning.conf

                atau delet  manual menggunakan winscp,

                kalau di lusca ganti saja dengan ignore-no-store, squid-2.7 belum support

                btw itu maximum_object_size 128 KB, ganti bro masak cuma 128Kb, misal 128MB (satuan di pfsense itu menggunakan KB) edit di squid.inc ganti dengan MB atau kalau enggak 128000 KB

                1 Reply Last reply Reply Quote 0
                • Y
                  yantisna
                  last edited by

                  SOLVED om …. dah jalan normal
                  waktu edit /etc/sysctl.conf kurang teliti... akirnya ada parameter yang dobel...
                  makasih makasih...

                  1 Reply Last reply Reply Quote 0
                  • 4
                    4r31
                    last edited by

                    @grage95:

                    ^^^
                    package diatas hanya bisa running di pfsense versi 1.2.xx (freebsd 7.xx)
                    versi 2.xx (freebsd 8.xx) tidak akan jalan,

                    package utk pfsense versi 2.xx (freebsd 8)
                    http://dl2.foss-id.web.id/freebsd/ports/i386/packages-8-stable/www/squid-2.7.7.tbz

                    catatan: tidak support delay_pool

                    ===============================================

                    Mas grage95 …

                    Pfsense nya saya sudah berhasil saya upgrade
                    "Welcome to pfSense 1.2.3-RC3-pfSense....

                    Trus squidnya dah saya upgrade juga  :)
                    squid-2.7.7        HTTP Caching Proxy

                    kemudian saya mau update squid.inc nya ..opsss..file nya ngga ada  ???
                    "File not found /usr/local/pkg/squid.inc"

                    cd /usr/local/pkg/

                    ls

                    carp.xml                openntpd.inc            parse_config
                    carp_settings.xml      openntpd.xml            pf
                    miniupnpd.inc          openvpn.xml            routed
                    miniupnpd.xml          openvpn_cli.xml        sasyncd.xml
                    olsrd.xml              openvpn_csc.xml

                    Trus ....selanjutnya apa ya..om ?

                    1 Reply Last reply Reply Quote 0
                    • 4
                      4r31
                      last edited by

                      satu lagi om grage95 …

                      kalau dah di upgrade memang di web gui ngga nampak untuk squid status + proxy settingnya ya ?

                      Trima kasih.

                      1 Reply Last reply Reply Quote 0
                      • G
                        grage95
                        last edited by

                        yang di update/install cuma binary files (file exe dlm windows) jadi tidak merubah web gui,
                        kalau cuma update harusnya tdk meremove squid.inc

                        silahkan download squid.inc disini :

                        http://www.pfsense.org/packages/config/squid/squid.inc

                        1 Reply Last reply Reply Quote 0
                        • D
                          dedieko
                          last edited by

                          Bos Grage, this tutorial is very good, sangat jempol, Request Hit Ratios rata2 40-60% - much better than standard squid

                          Question:

                          1. Which one is better? Squid 2.7.7 from shakau.google or Lusca 1.4(or newer) by looking at request hit/Byte Hit/ etc?
                          2. I just realized that Videocache is no longer free, does your tunning.conf enough to replace it? If not, perlu/tweak install apa lagi?
                          3. I get a lot of "storeClientReadHeader: no URL!" in cache.log - What is this? Safe to ignore?

                          1 Reply Last reply Reply Quote 0
                          • G
                            grage95
                            last edited by

                            @dedieko:

                            Bos Grage, this tutorial is very good, sangat jempol, Request Hit Ratios rata2 40-60% - much better than standard squid

                            Question:

                            1. Which one is better? Squid 2.7.7 from shakau.google or Lusca 1.4(or newer) by looking at request hit/Byte Hit/ etc?
                            2. I just realized that Videocache is no longer free, does your tunning.conf enough to replace it? If not, perlu/tweak install apa lagi?
                            3. I get a lot of "storeClientReadHeader: no URL!" in cache.log - What is this? Safe to ignore?

                            1.Lusca, with 2000 client,Hit Ratios average 50-60%  , thx to facebook ::)
                            2.heheh jangan di bandingkan dengan videocache yg powerfull utk mengcache file2 streaming video, use old videocache-1. 9.2 its free  ::), http://ftp2.za.freebsd.org/pub/FreeBSD/ports/distfiles/videocache-1.9.2.tar.gz
                            cuman kelemahannya karena menggunakan lang phyton,jika cache full, resource CPU usage full juga, si CPU bisa stuck dan si lusca jadi bengong  ;D, katanya musti upgrade ke quad core duo  :(
                            3. abaikan saja, selama masih nyaman browsing

                            1 Reply Last reply Reply Quote 0
                            • A
                              anto_DIGIT
                              last edited by

                              Kok waktu itu coba videocache di pfsense, hasilnya waktu buka youtube, malah tdk ada gambar … setelah cache selesai download baru muncul gambar ... Jadi ga nyaman liatnya .. user juga keburu kabur ...

                              1 Reply Last reply Reply Quote 0
                              • G
                                grage95
                                last edited by

                                aneh, dulu saya setting di freebsd nyontoh dari sebuah forum normal2 sahaja, utk yang pertama buka file langsung dr youtube memang agak lambat,tapi masih bisa streaming. yang kedua baru cepet karena masuk dalam rules ZPH HITS, menggunaan lighttpd / apache sama sahaja jalan normal. kalau di pfsense menggunakan lighttpd dan sama2 normal.
                                sudah lama tak bermain2 dengan aplikasi buatan india ini semenjak websitenya down dan sekarang sudah aktif lagi di videocache.com
                                coba utak atik saja di videocache.py nya

                                utk pfsense contek disini http://doc.pfsense.org/index.php/Setup_VideoCache_with_Squid

                                1 Reply Last reply Reply Quote 0
                                • I
                                  ipoelnet
                                  last edited by

                                  Perasaan Q g' penah nemuin hal spt ini?

                                  2009/11/30 00:47:08|        0 Objects expired.
                                  2009/11/30 00:47:08|        65800 Objects cancelled.
                                  2009/11/30 00:47:08|        5846 Duplicate URLs purged.

                                  kok tiba-tiba muncul ini OM, pengaruh yach jika keluar itu?? apa ada yang perlu di tambahkan.

                                  Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

                                  1 Reply Last reply Reply Quote 0
                                  • G
                                    grage95
                                    last edited by

                                    @ipoelnet:

                                    Perasaan Q g' penah nemuin hal spt ini?

                                    2009/11/30 00:47:08|         0 Objects expired.
                                    2009/11/30 00:47:08|         
                                    2009/11/30 00:47:08|         5846 Duplicate URLs purged.

                                    kok tiba-tiba muncul ini OM, pengaruh yach jika keluar itu?? apa ada yang perlu di tambahkan.

                                    65800 Objects cancelled. 
                                    ada duakemungkinana
                                    1. client mengabort/cancle browsing karena emang pengen di abbort
                                    2. client mengabort karena terjadi bottleneck, bisa jadi dari perfomance squidnya / performance jaringan
                                    3. solusi : cek configurasi squidnya, bottlnecknya di config squid (cache_dir, spindel hardisk, ram, dns dll) / kualitas jaringan yang penuh dengan broadcast virus

                                    5846 Duplicate URLs purged.

                                    proses ini akan mengclearkan cache swap dari duplikasi url yang sudah di cache, tapi kok banyak banget ya, kalo saya amati punya saya sendiri paling banyak cuma 20

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.