Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update LUSCA_HEAD-r14535

    Scheduled Pinned Locked Moved Indonesian
    18 Posts 6 Posters 9.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pria_aneh
      last edited by

      Minta saRAN untuk konfigurasi cache management pada pf sense

      saya sudah pake pfsense123+lusca-nya om grage

      konfigurasi cache managemen yg sekarang

      cache size 30Gb
      memory cache size 8
      minimum object size 0
      maximum object size 64000

      Mesin pfsense :
      HDD 80 GB SATA /II
      RAM 1 GB

      ![New Picture (4).jpg](/public/imported_attachments/1/New Picture (4).jpg)
      ![New Picture (4).jpg_thumb](/public/imported_attachments/1/New Picture (4).jpg_thumb)
      ![New Picture (5).jpg](/public/imported_attachments/1/New Picture (5).jpg)
      ![New Picture (5).jpg_thumb](/public/imported_attachments/1/New Picture (5).jpg_thumb)

      1 Reply Last reply Reply Quote 0
      • A
        anto_DIGIT
        last edited by

        @grage95:

        kalau menggunakan videocache + storeurl dynamic content salah satu harus di hilangkan utk video2 tertentu, misal youtube, ya jangan semuanya di enable, squid jadi bingung.

        cek config tunning.conf dan storeurl.pl apakah ada regex video yang sama dengan di videocache.conf, jika ada pilih salah satu saja biar gak crowded

        OK .. dicoba dulu, tks ..
        Ada lagi pertanyaan, kalau kita tdk menginstall squidguard, apakah fitur safesearch di google dan bing, bisa diaktifkan dng menambah di storeurl:

        if ($url =~ m@^http://([^.].)?bing.[^/]/[^?]?.@i) {
            # Replace any previous safe directives
            $url =~ s@(adlt=[^&]*&?)@@ig;

        # Add safe search directive
            $url .= '&adlt=strict&cc=au';

        } elsif ($url =~ m@^http://([^.].)?google.[^/]/[^?]?.@i) {

        # Replace any previous safe directives
            $url =~ s@(safe=[^&]*&?)@@ig;

        # Add safe search directive
            $url .= '&safe=active';
        }

        Kemudian untuk caching google map, apa sudah benar kalau kita insert ini di storeurl :

        #google map
        elsif (m/kh(.?).google.com(.?)/(.?) /) {
              print "http://keyhole-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                        # print STDERR "KEYHOLE\n";
        } elsif (m/mt(.        ?).google.com(.?)/(.?) /) {
                print "http://map-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                        # print STDERR "MAPSRV\n";
        }

        dan di tunning.conf :

        acl store_rewrite_list dstdomain mt.google.com mt0.google.com mt1.google.com mt2.google.com
        acl store_rewrite_list dstdomain mt3.google.com
        acl store_rewrite_list dstdomain kh.google.com kh0.google.com kh1.google.com kh2.google.com
        acl store_rewrite_list dstdomain kh3.google.com khm0.google.com khm1.google.com khm2.google.com khm3.google.com
        acl store_rewrite_list dstdomain kh.google.com.au kh0.google.com.au kh1.google.com.au
        acl store_rewrite_list dstdomain kh2.google.com.au khc3.google.com.au

        storeurl_access allow store_rewrite_list

        1 Reply Last reply Reply Quote 0
        • G
          grage95
          last edited by

          @pria_aneh:

          Minta saRAN untuk konfigurasi cache management pada pf sense

          saya sudah pake pfsense123+lusca-nya om grage

          konfigurasi cache managemen yg sekarang

          cache size 30Gb
          memory cache size 8
          minimum object size 0
          maximum object size 64000

          Mesin pfsense :
          HDD 80 GB SATA /II
          RAM 1 GB

          naikkan nilai :
          cache_mem jadi 32 mb
          cache_dir =40960, LI=64, L2= 256
          buat partisi tersendiri utk  /var/squid/cache

          1 Reply Last reply Reply Quote 0
          • G
            grage95
            last edited by

            @anto_DIGIT:

            @grage95:

            kalau menggunakan videocache + storeurl dynamic content salah satu harus di hilangkan utk video2 tertentu, misal youtube, ya jangan semuanya di enable, squid jadi bingung.

            cek config tunning.conf dan storeurl.pl apakah ada regex video yang sama dengan di videocache.conf, jika ada pilih salah satu saja biar gak crowded

            OK .. dicoba dulu, tks ..
            Ada lagi pertanyaan, kalau kita tdk menginstall squidguard, apakah fitur safesearch di google dan bing, bisa diaktifkan dng menambah di storeurl:

            if ($url =~ m@^http://([^.].)?bing.[^/]/[^?]?.@i)
                # Replace any previous safe directives
                $url =~ s@(adlt=[^&]*&?)@@ig;

            # Add safe search directive
                $url .= '&adlt=strict&cc=au';

            } elsif ($url =~ m@^http://([^.].)?google.[^/]/[^?]?.@i) {

            # Replace any previous safe directives
                 $url =~ s@(safe=[^&]*&?)@@ig;

            # Add safe search directive
                $url .= '&safe=active';
            }

            Kemudian untuk caching google map, apa sudah benar kalau kita insert ini di storeurl :

            #google map
            elsif (m/kh(.?).google.com(.?)/(.?) /) {
                   print "http://keyhole-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                            # print STDERR "KEYHOLE\n";
            } elsif (m/mt(.            ?).google.com(.?)/(.?) /) {
                    print "http://map-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                            # print STDERR "MAPSRV\n";
            }

            dan di tunning.conf :

            acl store_rewrite_list dstdomain mt.google.com mt0.google.com mt1.google.com mt2.google.com
            acl store_rewrite_list dstdomain mt3.google.com
            acl store_rewrite_list dstdomain kh.google.com kh0.google.com kh1.google.com kh2.google.com
            acl store_rewrite_list dstdomain kh3.google.com khm0.google.com khm1.google.com khm2.google.com khm3.google.com
            acl store_rewrite_list dstdomain kh.google.com.au kh0.google.com.au kh1.google.com.au
            acl store_rewrite_list dstdomain kh2.google.com.au khc3.google.com.au

            storeurl_access allow store_rewrite_list

            bisa bro di gabungin, coba dulu, hati2 dengan karakter { },
            sebaiknya coba dulu tanpa squid, langsung eksekusi perl /usr/local/etc/squid/storeurl .pl
            jika tidak ada error berrti jalan, dan buatkan acl di tunning.conf utk safesearch & bing

            1 Reply Last reply Reply Quote 0
            • P
              pria_aneh
              last edited by

              Thx om Grage for your help…
              btw,,,L1 = Level 1 subdirectories
              Each level-1 directory contains 256 subdirectories, so a value of 256 level-1 directories will use a total of 65536 directories for the hard disk cache. This will significantly slow down the startup process of the proxy service, but can speed up the caching under certain conditions.

              Trus yg L2 = 256 di taro dimana om????

              Partisi nya manual….ada 50GB yg dibuat manual untuk /var/squid/log

              Thanks

              1 Reply Last reply Reply Quote 0
              • G
                grage95
                last edited by

                L2=256 sudah default di pfsense
                tinggal set L1

                log kok gede banget  ???

                mending partisi log di rubah mount pointnya ke partisi cache

                1 Reply Last reply Reply Quote 0
                • A
                  anto_DIGIT
                  last edited by

                  @grage95:

                  bisa bro di gabungin, coba dulu, hati2 dengan karakter { },
                  sebaiknya coba dulu tanpa squid, langsung eksekusi perl /usr/local/etc/squid/storeurl .pl
                  jika tidak ada error berrti jalan, dan buatkan acl di tunning.conf utk safesearch & bing

                  Kalau karakter {} ga jadi masalah, kemudian coba tambahkan :

                  acl store_rewrite_list_domain_CDN url_regex    ^http://.www.google.co(m|.id)
                  acl store_rewrite_list_domain_CDN url_regex    ^http://.www.bing.com

                  yang "bing" berhasil, tetapi google tidak….

                  Kemudian utk googlemap tdk ada hambatan ..

                  1 Reply Last reply Reply Quote 0
                  • P
                    pria_aneh
                    last edited by

                    maap…salah ketik om...
                    yg 50Gb itu yg /var/squid/cache...
                    om error nih
                    setelah saya ganti mengkuti opsi itu..., graph squidstats berhenti beroperasi
                    trus, setelah dicek pake perintah tail -f /var/squid/log/cache.log
                    hasilnya

                    2010/04/08 16:10:35|  Took 0.7 seconds (28589.4 objects/sec).
                    2010/04/08 16:10:35| Beginning Validation Procedure
                    2010/04/08 16:10:35|  Completed Validation Procedure
                    2010/04/08 16:10:35|  Validated 18852 Entries
                    2010/04/08 16:10:35|  store_swap_size = 431258k
                    2010/04/08 16:10:35| storeLateRelease: released 0 objects
                    2010/04/08 16:22:53| squidaio_queue_request: WARNING - Queue congestion
                    2010/04/08 16:57:49| squidaio_queue_request: WARNING - Queue congestion
                    2010/04/08 17:54:53| squidaio_queue_request: WARNING - Queue congestion
                    2010/04/08 17:56:05| httpAccept: FD 16: accept failure: (53) Software caused connection abort

                    sudag saya kembalikan trus restart service + restart pFsensenya tapi hasilnya tetap sama saja…
                    any advice????

                    1 Reply Last reply Reply Quote 0
                    • G
                      grage95
                      last edited by

                      sebelum di ganti, apakah cache lamanya  sudah di delete ?

                      1 Reply Last reply Reply Quote 0
                      • P
                        pria_aneh
                        last edited by

                        wah….tidak juga sih....
                        apa ada option yg harus diketik di konsol???
                        trus apa pfsense support LUSCA HEAD-r14535???
                        skalian di update jike memang support

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.