Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [SHARE] Update Lusca Release - r14371 (November 18, 2009)

    Scheduled Pinned Locked Moved Indonesian
    72 Posts 13 Posters 41.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      serangku
      last edited by

      thanks om @grage95 atas pencerahannya …

      dapat disimpulkan masih aman2 saja  :D
      keragu2 an hilang sudah, waktunya swapping ke LUSCA

      om ...
      sekiranya dibuat thread baru ttg performance LUSCA, gimana om ...
      sekedar "mengintimidasi" kawan2 utk tidak ragu pake LUSCA sebagai aternatif dari yg sudah ada
      juga ... ubek2 di sub international sptnya belum ada
      regional Indo bisa jadi pelopornya ...  ;D :o

      1 Reply Last reply Reply Quote 0
      • G
        grage95
        last edited by

        mungkin yang perlu di bahas bareng2:

        1. Sarat2 &  formula ideal  (hardisk & ram)
        2. optimasi cache dengan fitur  store_rewrite_url (hanya ada di lusca & squid-2.7.x)
        3. optimasi refresh_pattern
        4. optimasi kernel
        5. optimasi dnsmasq utk menghandle client besar
        6. ….

        silahkan barangkali ada yang perlu di tambahkan, nanti kita garap bareng2, masukan/saran di tunggu, kita bongkar rahasia proxy highperformance

        berita menarik, setelah penasaran dengan performance freebsd, opensolaris & linux, ternyata dengan install minimalis OS dan optimasi kernel,  spek mesin dan config yang hampir sama (beda di pengaturan di directory log saja ) lebih unggul di freebsd, saking penasaranya dengan freebsd ini, kernel freebsd ini di ganti dengan mengcopy kernel dari pfsense saja tepar hihihi.  monitoring dengan menggunakan mrtg eksternal (mrtg di box lain hanya menyedot snmp proxy "enable-snmp"), urutannya keunggulan ini di tinjau dari  efisiensi memory, kecepatan untuk menyimpan cache dan ke stabilan dari req/hits yang tinggi.

        1. freebsd-7.2-release (ufs dgn option noatime mantap tenan)
        2. opensolaris (zfs nya edun euy, quick tapi boros memory hiks hiks)
        3. linux (reiserfs (utk file2 kecil) dan ext4 (utk file2 besar) podo wae walopun udah di tuning di fstab notail, noatime, nyoba reiser4 waktu load tinggi kernel panic, udah utak atik sysctl.conf tetep saja hiks)

        servis yang jalan hanya dns cache dan lusca

        utk cache hits di total hampir sama, cuma beda timing saja
        salute 4 jempol untuk developer pfsense ini (quick, easy, fast & stable)

        1 Reply Last reply Reply Quote 0
        • Z
          zass
          last edited by

          Salam , mahu bertanya, bagaimana mahu aktifkan SNMP ,  sudah cuba baca di cacti forum , tapi tak berhasil

          T/K
          zass

          1 Reply Last reply Reply Quote 0
          • G
            grage95
            last edited by

            ![](http://lethe.uwa.edu.au/munin/Servers/styx.uwa.edu.au-squid_hits-month.png[/img<br /><br /><br />[img]http://lethe.uwa.edu.au/munin/Servers/styx.uwa.edu.au-squid_requests-week.png)

            download package pfSense Lusca Release - r14371 (November 18, 2009) with patch + snmp + arp

            pkg_delete lusca*
            or
            pkg_delete squid*

            and then install
            pkg_add -rv http://squid-proxy-pkg.googlecode.com/files/lusca-pfsense-arp-snmp-r14371_2.tbz

            enable snmp on squid.inc

            acl snmp_host src 127.0.0.1
            snmp_port 3401
            acl snmppublic snmp_community public
            snmp_access allow snmppublic snmp_host
            snmp_access deny all

            info :
            build with

            pf-bsd72# squid -v
Squid Cache: Version LUSCA_HEAD
configure options:  '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--with-pthreads' '--enable-storeio=aufs coss' '--enable-delay-pools' '--enable-snmp' '--disable-carp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=English' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.2' 'build_alias=i386-portbld-freebsd7.2' 'CC=cc' 'CFLAGS=-O2 -pipe -funroll-loops -ffast-math  -fno-strict-aliasing' 'LDFLAGS=' 'CPPFLAGS='

            patch with  : aggressive.patch, 2451x.patch,lusca-vary.patch,loop2.patch (fix bug looping for use store_url_rewrite)

            tips install squidstats

            pkg_add -rv squidstats

            after finisih, lets go config

            _mkdir -p /var/db/squidstats/graphs
            mkdir -p /var/db/squidstats/rrd
            chown www:wheel /var/db/squidstats/graphs
            chown proxy:wheel /var/db/squidstats/rrd

            ln -s /var/db/squidstats/graphs /usr/local/www/data/
            ln -s /usr/local/www/cgi-bin/graph-summary.cgi /usr/local/www/graph-summary.cgi
            su -m proxy -c "/usr/local/bin/squidstats.pl createdb"
            su -m proxy -c "/usr/local/bin/squidstats.pl gather 2"_
            edit /etc/crontab
            add this line

            */5  *  *  *  *    /usr/local/bin/squidstats.pl gather 2 > /dev/null

            restart crontab /etc/rc.d/cron restart

            test open with your browser

            http://your-ip/graph-summary.cgi

            1 Reply Last reply Reply Quote 0
            • Z
              zass
              last edited by

              Ertinya kalau saya buat sampai di sini saja :

              "pkg_delete lusca*
              or
              pkg_delete squid*

              and then install
              pkg_add -rv http://squid-proxy-pkg.googlecode.com/files/lusca-pfsense-arp-snmp-r14371_2.tbz

              enable snmp on squid.inc

              acl snmp_host src 127.0.0.1
              snmp_port 3401
              acl snmppublic snmp_community public
              snmp_access allow snmppublic snmp_host
              snmp_access deny all  "

              squid sudah support snmp > dan boleh di ambil datanya dari server lain ,

              misalnya gunakan cacti ?

              tq

              1 Reply Last reply Reply Quote 0
              • G
                grage95
                last edited by

                jika menggunkan mrtg di cacti other box

                acl snmp_host src your-ip-cacti
                acl snmp_host src  127.0.0.1
                snmp_port 3401
                acl snmppublic snmp_community public
                snmp_access allow snmppublic snmp_host
                snmp_access deny all  "

                dan di firewall open port 3401 protocol udp

                di box cacti install net-snmp dan cacti-template-squidstats

                edit /etc/snmpd.conf
                tambahkan line ini :

                #sec.name                source          community
                com2sec local            localhost        public
                com2sec mynetwork  1.2.3.0/24      public

                check with snmpwalk

                snmpwalk -v2c -c public your-ip-pfsense-squid-box:3401 .1.3.6.1.4.1.3495.1.1

                1 Reply Last reply Reply Quote 0
                • Z
                  zass
                  last edited by

                  tq,tq.tq  ;D saya coba dulu !

                  1 Reply Last reply Reply Quote 0
                  • Z
                    zass
                    last edited by

                    Grage5, mengapa saya punya tiada option snmp ?

                    $ squid -v
                    Squid Cache: Version LUSCA_HEAD
                    configure options:  '–bindir=/usr/local/sbin'
                    '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid'
                    '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid'
                    '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap'
                    '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll'
                    '--with-pthreads' '--enable-storeio=aufs' '--enable-delay-pools'
                    '--disable-carp' '--disable-wccp' '--disable-ident-lookups'
                    '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files'
                    '--enable-err-languages=English' '--enable-default-err-language=English'
                    '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/'
                    '--build=i386-portbld-freebsd7.2' 'build_alias=i386-portbld-freebsd7.2'
                    'CC=cc' 'CFLAGS=-O2 -pipe -funroll-loops -ffast-math  -fno-strict-aliasing'
                    'LDFLAGS=' 'CPPFLAGS='

                    tq

                    1 Reply Last reply Reply Quote 0
                    • G
                      grage95
                      last edited by

                      sudah mengupdate package dnegan http://squid-proxy-pkg.googlecode.com/files/lusca-pfsense-arp-snmp-r14371_2.tbz
                      dan sudah di rehash ?

                      1 Reply Last reply Reply Quote 0
                      • D
                        dedieko
                        last edited by

                        Bos Grage, ada sedikit masalah:

                        su -m proxy -c "/usr/local/bin/squidstats.pl createdb"

                        Can't locate RRDs.pm in @INC (@INC contains: /usr/local/lib/perl5/5.8.8/BSDPAN /usr/local/lib/perl5/site_perl/5.8.8/mach /usr/local/lib/perl5/site_perl/5.8.8 /usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.8.8/mach /usr/local/lib/perl5/5.8.8 .) at /usr/local/bin/squidstats.pl line 4.
                        BEGIN failed–compilation aborted at /usr/local/bin/squidstats.pl line 4.

                        1 Reply Last reply Reply Quote 0
                        • G
                          grage95
                          last edited by

                          kok perl nya versinya beda ya,
                          perl5/5.8.8

                          kalau di saya

                          perl5/5.8.9
                          pfsense vesi 1.3.xx

                          perlu di upgrade perlnya mungkin,

                          jika menggunakan pfsense 1.3

                          setenv PACKAGESITE "ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/"

                          pkg-delete -f perl-5*
                          pkg_add -rv perl

                          1 Reply Last reply Reply Quote 0
                          • D
                            dedieko
                            last edited by

                            @grage95:

                            kok perl nya versinya beda ya,
                            perl5/5.8.8

                            kalau di saya

                            perl5/5.8.9
                            pfsense vesi 1.3.xx

                            perlu di upgrade perlnya mungkin,

                            jika menggunakan pfsense 1.3

                            setenv PACKAGESITE "ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/"

                            pkg-delete -f perl-5*
                            pkg_add -rv perl

                            Saya pakai Pfsense 1.2.3 bos, upgraded from 1.2

                            1 Reply Last reply Reply Quote 0
                            • Z
                              zass
                              last edited by

                              Akhir , berhasil tkasih grage5  ;D

                              ssnmp.JPG_thumb
                              ssnmp.JPG
                              ssnmp2.JPG
                              ssnmp2.JPG_thumb

                              1 Reply Last reply Reply Quote 0
                              • 1
                                111ichael
                                last edited by

                                @grage95:

                                kok perl nya versinya beda ya,
                                perl5/5.8.8

                                kalau di saya

                                perl5/5.8.9
                                pfsense vesi 1.3.xx

                                perlu di upgrade perlnya mungkin,

                                jika menggunakan pfsense 1.3

                                setenv PACKAGESITE "ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/"

                                pkg-delete -f perl-5*
                                pkg_add -rv perl

                                tolong dong di bantuin saya pkg_add -rv perl hasilx nongol seperti ini….

                                # pkg_add -rv perl
                                pkg_add: can't stat package file 'perl'
                                pkg_add: 1 package addition(s) failed

                                perl saya sudah tdak ada… gimana????  :-[

                                1 Reply Last reply Reply Quote 0
                                • D
                                  dedieko
                                  last edited by

                                  Hi everybody,

                                  LUSCA sudah running selama 2/3 hari di pfsense 1.2.3

                                  Pagi ini saya memperhatikan ada yang line seperti ini:

                                  2009/12/13 07:25:22| Ready to serve requests.
                                  2009/12/13 07:25:23| Store rebuilding is 100.0% complete
                                  2009/12/13 07:25:23|   /var/squid/cache: completed rebuild
                                  2009/12/13 07:25:23| Done scanning /var/squid/cache (27283 entries)
                                  2009/12/13 07:25:23| Finished rebuilding storage from disk.
                                  2009/12/13 07:25:23|     27283 Entries scanned
                                  2009/12/13 07:25:23|         0 Invalid entries.
                                  2009/12/13 07:25:23|         0 With invalid flags.
                                  2009/12/13 07:25:23|     24072 Objects loaded.
                                  2009/12/13 07:25:23|         0 Objects expired.
                                  2009/12/13 07:25:23|      1338 Objects cancelled.
                                  2009/12/13 07:25:23|       221 Duplicate URLs purged.
                                  2009/12/13 07:25:23|      1426 Swapfile clashes avoided.
                                  2009/12/13 07:25:23|   Took 1.0 seconds (24494.6 objects/sec).
                                  2009/12/13 07:25:23| Beginning Validation Procedure
                                  2009/12/13 07:25:23|   Completed Validation Procedure
                                  2009/12/13 07:25:23|   Validated 22734 Entries
                                  2009/12/13 07:25:23|   store_swap_size = 363114k
                                  2009/12/13 07:25:24| storeLateRelease: released 0 objects
                                  2009/12/13 07:41:38| squidaio_queue_request: WARNING - Queue congestion
                                  2009/12/13 07:53:28| squidaio_queue_request: WARNING - Queue congestion

                                  Hasil penelusuran di google menunjukkan kalo "Queue Congestion" terjadi jika CPU overload atau disk saya I/O-nya sudah mentok

                                  Berikut Data System

                                  # dmesg | grep CPU

                                  CPU: Intel(R) Celeron(R) CPU 2.00GHz (1999.95-MHz 686-class CPU)
                                  cpu0: <acpi cpu="">on acpi0
                                  p4tcc0: <cpu frequency="" thermal="" control="">on cpu0

                                  atacontrol list

                                  ATA channel 0:
                                     Master:  ad0 <st340014a 8.01="">ATA/ATAPI revision 6
                                     Slave:       no device present
                                  ATA channel 1:
                                     Master:      no device present
                                     Slave:       no device present

                                  dmesg | grep memory

                                  real memory  = 1065287680 (1015 MB)
                                  avail memory = 1028685824 (981 MB)
                                  agp0: detected 8060k stolen memory

                                  swapinfo -k

                                  Device          1K-blocks     Used    Avail Capacity
                                  /dev/ad0s1b       2097152        0  2097152     0%

                                  #top
                                  last pid:  6357;  load averages:  0.12,  0.11,  0.09                                                                                 up 0+00:42:45  08:06:17
                                  111 processes: 2 running, 92 sleeping, 17 waiting
                                  CPU:  0.0% user,  0.0% nice,  100% system,  0.0% interrupt,  0.0% idle
                                  Mem: 70M Active, 32M Inact, 54M Wired, 632K Cache, 52M Buf, 829M Free
                                  Swap: 2048M Total, 2048M Free
                                  …</st340014a></cpu></acpi>

                                  Mohon pencerahannya
                                  Terima kasih, Matur nuwun, thank you

                                  1 Reply Last reply Reply Quote 0
                                  • G
                                    grage95
                                    last edited by

                                    kalau menggunakan lusca
                                    perbesar  n_aiops_threads jadi 32

                                    1 Reply Last reply Reply Quote 0
                                    • G
                                      grage95
                                      last edited by

                                      @111ichael:

                                      # pkg_add -rv perl
                                      pkg_add: can't stat package file 'perl'
                                      pkg_add: 1 package addition(s) failed

                                      perl saya sudah tdak ada… gimana????  :-[

                                      [/quote]

                                      cek dengan pkg_info |grep perl
                                      jika sudah tidak ada install ulang, tapi harus sesuaikan dengan versi kernel pfsensenya
                                      jika masih ada silangkan di uninstall
                                      pkg_delete -f perl*

                                      coba di uname -a

                                      kalau menggunakan
                                      FreeBSD 7.2-Release : pkg_add -rv http://125.160.17.22/freebsd/ports/i386/packages-7.2-release/lang/perl-5.8.9_2.tbz
                                      FreeBSD 7-STABLE : pkg_add -rv http://125.160.17.22/freebsd/ports/i386/packages-7-stable/lang/perl-5.8.9_3.tbz

                                      dan jangan lupa di rehash

                                      1 Reply Last reply Reply Quote 0
                                      • 1
                                        111ichael
                                        last edited by

                                        @grage95:

                                        @111ichael:

                                        cek dengan pkg_info |grep perl
                                        jika sudah tidak ada install ulang, tapi harus sesuaikan dengan versi kernel pfsensenya
                                        jika masih ada silangkan di uninstall
                                        pkg_delete -f perl*

                                        coba di uname -a

                                        kalau menggunakan
                                        FreeBSD 7.2-Release : pkg_add -rv http://125.160.17.22/freebsd/ports/i386/packages-7.2-release/lang/perl-5.8.9_2.tbz
                                        FreeBSD 7-STABLE : pkg_add -rv http://125.160.17.22/freebsd/ports/i386/packages-7-stable/lang/perl-5.8.9_3.tbz

                                        dan jangan lupa di rehash

                                        Makasih atas pencerahannya…..  om Grage ;D

                                        1 Reply Last reply Reply Quote 0
                                        • I
                                          ipoelnet
                                          last edited by

                                          Kalau keluar gini pada cache.log

                                          2009/12/15 17:57:10| Beginning Validation Procedure
                                          2009/12/15 17:57:10|    262144 Entries Validated so far.
                                          2009/12/15 17:57:10|    524288 Entries Validated so far.
                                          2009/12/15 17:57:10|  Completed Validation Procedure
                                          2009/12/15 17:57:10|  Validated 559523 Entries
                                          2009/12/15 17:57:10|  store_swap_size = 6777879k
                                          2009/12/15 17:57:10| storeLateRelease: released 0 objects

                                          apa penyebabnya, dan apa berpengaruh Om2?

                                          Iso cak, Asal sesuai aturan | Belajarlah seperti orang bodoh

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tomplee
                                            last edited by

                                            om grage saya pake pfsense 1.2.2 lusca pake yang versi ini http://shakau.googlepages.com/vanila-arp-lusca-1.4_2.tbz
                                            yang lusca vanila versi ini kok gak mau di gabung ma adzap versi ini  adzap-20090301.tbz dia pake perl 5.8.9_3 kalau perl-nya yang tak pake yang ini sesuai permintaan adzap luscanya gak mau jalan. solusinya kira bgm ya..

                                            MB : ASUS
                                            PROC : Intel(R) Pentium(R) 4 CPU 2.40GHz
                                            RAM : 1GB
                                            HD : 20 GB
                                            NETWORK : REALTEK 10/100
                                            NETWORK : TP-LINK 10/100
                                            PFESENSE :  1.2.2   
                                            DIGUNAKAN UNTUK : RTRWNET

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.