Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [SHARE] Update Lusca Release - r14371 (November 18, 2009)

    Scheduled Pinned Locked Moved Indonesian
    72 Posts 13 Posters 41.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      grage95
      last edited by

      delete dulu squid/lusca yang lama

      pkg_delete squid*
      pkg_delete lusca*
      http://squid-proxy-pkg.googlecode.com/files/pfsense-lusca-head-r14281_3.tbz
      rehash
      squid -v

      restart squid dengan mengclick stop/start di webgui services squid

      NB: LUSCA hanya support file system  COSS dan AUFS tdk support UFS dan DISKD

      1 Reply Last reply Reply Quote 0
      • I
        ipoelnet
        last edited by

        Sebelum coba, tanya dulu…. dukung ARP ACL g' OM?

        Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

        1 Reply Last reply Reply Quote 0
        • G
          grage95
          last edited by

          @ipoelnet:

          Sebelum coba, tanya dulu…. dukung ARP ACL g' OM?

          support sedot disini : http://shakau.googlepages.com/vanila-arp-lusca-1.4_2.tbz

          1 Reply Last reply Reply Quote 0
          • I
            ipoelnet
            last edited by

            Ouw,.,., sama yg itu, kalau itu udah Om… hi hi hi

            Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

            1 Reply Last reply Reply Quote 0
            • G
              grage95
              last edited by

              beda bro, arp yang lama menggunakan versi release agustus,

              vanila-arp-lusca-1.4.tbz (agustus)
              vanila-arp-lusca-1.4_2.tbz (november)

              1 Reply Last reply Reply Quote 0
              • S
                serangku
                last edited by

                wewh …

                speechless deh buat om @grage95  8) 8)

                om nanya ...
                delay body max size sudah bisa di pake belum om ?
                info dr sini msh belum bisa http://www.techienuggets.com/commentList.jsp;jsessionid=49E99F73B18BCF12A6FC8D365CA4360F?tx=31762&tx=31762&d-49653-p=2

                lanjutkan ...

                1 Reply Last reply Reply Quote 0
                • G
                  grage95
                  last edited by

                  masih belum bisa utk lebih dr 1 class

                  delay_body_max_size masih ada bug jika lebih dari 1 class
                  kalo di squidclient mgr:delay2 class defaultnya itu class 0
                  kalo cuma 1 class masih bisa jalan,

                  1 Reply Last reply Reply Quote 0
                  • Z
                    zass
                    last edited by

                    Salam , saya sekarang guna ver 2.7.7 , pertanyaan apa beza nya dengan lusca vanilla dan satu lagi ,

                    dalm pfsense doc mengatakan max mem cache gunakan seberapa banyak kalau ada ram tapi jangan melebihi 50% fizikal ram

                    tapi saudara kambeeng gunakan 8 mb saja (photo) - untuk meggunakan harddisk drp ram (cache) - mana yang lebih bagus

                    maaf soalan newbie  ;D

                    1 Reply Last reply Reply Quote 0
                    • G
                      grage95
                      last edited by

                      http://code.google.com/p/lusca-cache/wiki/LuscaChangeLog

                      Changes between Squid-2.HEAD and Lusca-1.0

                      * Squid-2 defaults to use async disk operations for disk read() / open() ; Lusca uses the async disk operations for -all- operations. This improves performance on FreeBSD/Solaris, where write() / close() may block more often than not.
                          * Wide-scale source reorganisation into separate libraries - facilitating code modularity, code reuse and much easier unit testing.
                          * An IPv4/IPv6 aware socket address type has been added - see libsqinet/ in the top-level source directory.
                          * Various core modules have been prepared for IPv6 support - including core networking support and internal DNS routines.
                          * An example single-threaded TCP proxy - see app/tcptest/ in the top-level source directory - which demonstrates re-using the core libraries in other applications.

                      Changes between Lusca-1.0 and Lusca-HEAD

                      * COSS now does not write out swap log files which it doesn't use - improving performance during normal operation and logfile rotation.
                          * The server-side code (src/http.c) has been restructured to remove extra data copying and in preparation for further improvements performance and memory utilisation.
                          * The memory caching layer ("MemPools") has been turned into purely statistics - this is in preparation for fully threading the core libraries.
                          * The majority of code which uses String has been adapted (and rewritten in some places) in preparation for reference counted string management.
                          * The threaded IO code (via aufs) has been turned into a generic library for doing asynchronous IO. A new option exists for tweaking the number of IO threads to use - "n_aiops_threads" The default is to use 4 threads per AUFS storedir and 3 threads per COSS storedir.
                          * The diskd and ufs storage types have been removed, leaving only aufs, coss and null. These types will return later on when the disk io layers have been tidied up and re-unified.
                          * The ZPH code has been slightly reworked (in r14164 /  issue 40 ) to make the evaluation order both clearer (it now is documented in the configuration file!) and hopefully more useful in production.

                      cache_mem untuk menyimpan hot transit object
                      cache_mem default 8 mb
                      disalah satu warnet sy gunakan 6 mb
                      di parent proxy sy gunakan 256 mb

                      terserah, cache mau banyak di taroh di ram/hadisk, jika cache_mem besar, agak lambat write ke hardiks, keuntungan cache lebih cepat diakses  client

                      depen on your situation

                      1 Reply Last reply Reply Quote 0
                      • Z
                        zass
                        last edited by

                        Tapi kalu tinggikan max filesize kan terjadi begini

                        " If you wish to increase speed more than you want to save bandwidth, this should be set to a low value. "

                        maknanya kita kena gunakan hardware yng lebih tinggi spt harddisk yng lebih cepat  - thanks

                        1 Reply Last reply Reply Quote 0
                        • G
                          grage95
                          last edited by

                          yes

                          syarat server squd ideal jika request perdetik > 100/s
                          rpm hardisk besar,jumlah hardisk fisik minimal 2 buah (recomended scasi 10000 rpm)  & memory ram minimal 2 Gb

                          atau  kita bisa membuat
                          cache_dir null 0 /dev/null  = (0 Mb)
                          cache_mem 1024M

                          hanya menggunakan RAM sahaja, tidak menggunakan hardisk

                          1 Reply Last reply Reply Quote 0
                          • Z
                            zass
                            last edited by

                            Salam , satu lagi pertanyaan selepas update ke lusca ini bolehkah kita buat tuning seperti

                            di http://forum.pfsense.org/index.php/topic,20001.0.html

                            "fetch http://shakau.googlepages.com/tunning.conf
                            fetch http://shakau.googlepages.com/storeurl.pl
                            chmod +x storeurl.pl
                            chown proxy:proxy storeurl.pl
                            chown proxy:proxy tunning.conf "

                            harap bantuan  :)

                            1 Reply Last reply Reply Quote 0
                            • G
                              grage95
                              last edited by

                              boleh,
                              di sesuikan lagi option refresh_pattern
                              silahkan lihat option-nya di /usr/local/etc/squid.conf.default

                              1 Reply Last reply Reply Quote 0
                              • S
                                serangku
                                last edited by

                                streaming indowebster masih belum bersahabat om …
                                ada yg ngerasain juga gak ...

                                utak-atik belum ketemu juga

                                1 Reply Last reply Reply Quote 0
                                • I
                                  ipoelnet
                                  last edited by

                                  @serangku:

                                  streaming indowebster masih belum bersahabat om …
                                  ada yg ngerasain juga gak ...

                                  utak-atik belum ketemu juga

                                  Btw Mau ngeblock apa mau nglimit?

                                  Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    serangku
                                    last edited by

                                    gak utk ngeblock
                                    atau juga ngelimit

                                    hanya kok gak smooth streamingnya, alias loading mulu, lama ….
                                    gak langsung streaming gitu ... seperti youtube
                                    apa yah yg salah yah ...

                                    thanks atas pencerahan lbh lanjut

                                    1 Reply Last reply Reply Quote 0
                                    • 4
                                      4r31
                                      last edited by

                                      @grage95:

                                      delete dulu squid/lusca yang lama

                                      pkg_delete squid*
                                      pkg_delete lusca*
                                      pkg_add -rv http://shakau.googlepages.com/vanila-lusca-1.4_2.tbz
                                      rehash
                                      squid -v

                                      restart squid dengan mengclick stop/start di webgui services squid

                                      NB: LUSCA hanya support file system  COSS dan AUFS tdk support UFS dan DISKD

                                      Mas grage95 …Mantab..2 jempol buat grage95  ;D

                                      lansung uninstall squid

                                      pkg_delete squid*

                                      trus..

                                      pkg_add -rv http://shakau.googlepages.com/vanila-lusca-1.4_2.tbz

                                      then...
                                      squid -v

                                      last tekan stop/start atau restart squid...

                                      jalan tuh Luscanya.. ::)

                                      squid -v

                                      Squid Cache: Version LUSCA_HEAD
                                      configure options:  '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--disable-auth' '--disable-wccpv2' '--with-maxfd=16384' '--with-pthreads' '--enable-storeio=null aufs coss' '--enable-delay-pools' '--disable-carp' '--disable-wccp' '--disable-ident-lookups' '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=English' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.2' 'build_alias=i386-portbld-freebsd7.2' 'CC=cc' 'CFLAGS=-O2 -pipe  -fno-strict-aliasing' 'LDFLAGS=' 'CPPFLAGS='

                                      dah di monitoring selama 4 hari pakai lightsquid :

                                      Date        Group Users Oversize  Bytes  Average  Hit %
                                      25 Nov 2009 grp 28 20     951.4 M     34.0 M       20.46%
                                      24 Nov 2009 grp 29 23     2.3 G     79.8 M       8.38%
                                      23 Nov 2009 grp 29 23     2.5 G     86.8 M     10.15%
                                      19 Nov 2009 grp 21 13     468.6 M     22.3 M     17.31%

                                      Lumayan ...ada perubahan walau pun belum significant.. ;D

                                      Mas grage95 and rekans, Gimana biar bisa hit 50% ya..?  :P

                                      1 Reply Last reply Reply Quote 0
                                      • G
                                        grage95
                                        last edited by

                                        harus di  tunning :
                                        step2nya

                                        tambahkan ini di squid.inc
                                        include /usr/local/etc/squid/tunning.conf
                                        setelah baris
                                        acl dynamic urlpath_regex cgi-bin ?

                                        jadinya nanti
                                        _**acl all src 0.0.0.0/0.0.0.0
                                        acl localhost src 127.0.0.1/255.255.255.255
                                        acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 $webgui_port $port 1025-65535
                                        acl sslports port 443 563 $webgui_port
                                        acl manager proto cache_object
                                        acl purge method PURGE
                                        acl connect method CONNECT
                                        acl dynamic urlpath_regex cgi-bin ?

                                        include /usr/local/etc/squid/tunning.conf

                                        EOD;**_

                                        dan masuk ke directory
                                        cd  /usr/local/etc/squid/
                                        dan download file2 ini :
                                        fetch http://freebsd-squid-system.googlecode.com/files/tunning.conf
                                        fetch http://freebsd-squid-system.googlecode.com/files/storeurl.pl
                                        chmod +x storeurl.pl
                                        chown proxy:proxy storeurl.pl
                                        chown proxy:proxy tunning.conf
                                        cd /etc
                                        fetch http://freebsd-squid-system.googlecode.com/files/sysctl.conf
                                        cd /boot
                                        fetch http://freebsd-squid-system.googlecode.com/files/loader.conf

                                        trus reboot server

                                        1 Reply Last reply Reply Quote 0
                                        • I
                                          ipoelnet
                                          last edited by

                                          Tuning tambahan Experimen:

                                          System -> General Setup :

                                          DNS servers :
                                          127.0.0.1
                                          203.130.196.155 ---> DNS prymary ISP
                                          
                                          

                                          buat file /usr/local/etc/dnsmasq.conf

                                          port=53
                                          cache-size=10000
                                          expand-hosts 
                                          

                                          /etc/sysctl.conf

                                          net.inet.ip.fastforwarding=1
                                          net.inet.ip.portrange.last=65535
                                          net.inet.ip.portrange.first=1024
                                          net.inet.icmp.icmplim=0
                                          net.inet.icmp.icmplim_output=0
                                          net.inet.tcp.msl=3000
                                          net.inet.tcp.hostcache.expire=3900
                                          net.inet.tcp.inflight.enable=0
                                          net.inet.tcp.sendspace=65536
                                          net.inet.tcp.recvspace=65536
                                          net.inet.tcp.delayed_ack=0
                                          net.inet.udp.recvspace=65535
                                          net.inet.udp.maxdgram=57344
                                          net.local.stream.recvspace=1048576
                                          net.local.stream.sendspace=1048576
                                          net.inet.ip.intr_queue_maxlen=5000
                                          net.inet.tcp.sendbuf_max=65536
                                          net.inet.tcp.recvbuf_max=65536
                                          net.inet.tcp.slowstart_flightsize=54
                                          net.inet.tcp.local_slowstart_flightsize=10
                                          net.inet.tcp.nolocaltimewait=1
                                          kern.ipc.maxsockbuf=16777216
                                          kern.ipc.maxsockets=65536
                                          kern.ipc.somaxconn=32768
                                          kern.ipc.nmbclusters=131072
                                          kern.polling.burst_max=1000
                                          kern.polling.each_burst=50
                                          kern.maxfiles=262144
                                          kern.maxfilesperproc=65536
                                          kern.ipc.shmall=32768
                                          kern.ipc.shmmax=134217728
                                          kern.ipc.semmap=256
                                          kern.dirdelay=6
                                          kern.metadelay=5
                                          kern.filedelay=7
                                          
                                          

                                          /boot/loader.conf

                                          autoboot_delay="1"
                                          kern.ipc.maxsockbuf="16777216"
                                          kern.ipc.nmbclusters="131072"
                                          kern.ipc.msgmnb="16384"
                                          kern.ipc.msgssz="64"
                                          kern.ipc.msgtql="4096"
                                          kern.ipc.shmseg="16"
                                          kern.ipc.somaxconn="32768"
                                          kern.ipc.nmbclusters="131072"
                                          kern.ipc.maxsockets="65536"
                                          kern.maxfiles="262144"
                                          kern.maxfilesperproc="65536"
                                          net.inet.tcp.tcbhashsize="4096"
                                          net.inet.tcp.tcbhashsize="4096"
                                          net.inet.tcp.hostcache.hashsize="1024"
                                          
                                          

                                          untuk tuning sysctl.conf silahkan sesuaikan memory dan HW and lihat manual FreeBSD;
                                          lihat configurasi :
                                          sysctl [option]

                                          # sysctl -a
                                          

                                          agar tidak melebihi layar

                                          # sysctl -a | more
                                          

                                          atau jika melihat valunya saja :
                                          sysctl [key]
                                          # sysctl net.inet.tcp.hostcache.hashsize
                                          net.inet.tcp.hostcache.hashsize:1024

                                          untuk ngeset value :
                                          sysctl [key]=[value]
                                          # sysctl net.inet.tcp.hostcache.hashsize=2048
                                          net.inet.tcp.hostcache.hashsize:1024 -> 2048

                                          jika menunjukkan read only, biasanya setting di lettakkan di /boot/loader.conf lalu reboot pf.

                                          Atau pingin melihat key pergroup :
                                          misal key dengan awalan net.inet

                                          # sysctl net.inet
                                          net.inet.tcp.hostcache.hashsize:2048
                                          ---------
                                          ---------
                                          ---------
                                          ---------dst
                                          
                                          # sysctl kern.ipc
                                          kern.ipc.msgssz:64
                                          kern.ipc.msgtql:4096
                                          kern.ipc.shmseg:16
                                          kern.ipc.somaxconn:32768
                                          kern.ipc.nmbclusters:131072
                                          kern.ipc.maxsockets:65536
                                          ---------
                                          ---------
                                          ---------
                                          ---------dst
                                          

                                          Selamat ber-eksperimen.

                                          Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            serangku
                                            last edited by

                                            kawan2 … mohon pencerahan ...

                                            last pid: 29871;  load averages:  0.13,  0.07,  0.03    up 8+01:57:47  11:32:06
                                            237 processes: 6 running, 211 sleeping, 2 zombie, 18 waiting
                                            CPU:  0.0% user,  0.0% nice,  0.0% system,  0.0% interrupt,  0.0% idle
                                            Mem: 378M Active, 1322M Inact, 215M Wired, 34M Cache, 112M Buf, 41M Free
                                            Swap: 2048M Total, 100K Used, 2048M Free

                                            itu hasil top dari mesin LUSCA
                                            ram pisik 2 Gig, cahe dir 100 GB, baru 34% terisi ...
                                            sudah "mau" swapkah ... atau sudah terengah2 LUSCA nya ?

                                            makasih yooo ...

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.