Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Load Balancing + Failover with Squid - Not working PLS HELP…....

    Scheduled Pinned Locked Moved Routing and Multi WAN
    13 Posts 4 Posters 8.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      abcvidu
      last edited by

      I have tried as per wht u have instructed me. But still not workingg ??? ??? ???

      Please help

      1 Reply Last reply Reply Quote 0
      • J
        jikjik101
        last edited by

        1. Update to the latest snapshot

        2. Create a gateway group (example: LoadBalance) with your WAN and Opt1 in same tier.

        3. In your LAN firewall rule, below the Anti-Lockout rule, make another rule like this:  * * * * * LoadBalance none
        Interface: LAN
        Protocol: Any
        Source: Any
        Destination: Any
        Gateway: LoadBalance

        4. In the floating rule, select the following:
        Interface: WAN AND Opt1 - you can control+click the interfaces to select more than one
        Direction: Out
        Protocol: Any
        Source: Any
        Destination: Any

                • LoadBalance none

        5. Under NAT>Outbound
        Select Manual Outbound NAT rule generation
        Protocol: Any
        Source: Any
        Destination: Any
        Translation: Interface Address

        Interface Source Source Port Destination Destination Port NAT Address NAT Port Static Port Description
        WAN   any * * * * * NO
        Opt1   any * * * * * NO

        6. In the Proxy Server:
        General:
        Custom Options: tcp_outgoing_address 127.0.0.1;redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

        Access Control:
        External Cache-Managers: <Your LAN IP Address>

        1 Reply Last reply Reply Quote 0
        • A
          abcvidu
          last edited by

          Hi,

          My version is 2.0-RC3 (i386)
          built on Tue Jun 21 16:50:25 EDT 2011

          is there any latest update than this? I've clicked on the available update at dashboard. But it displayed "Unable to get updates". How can I get the latest snapshot? Please past the link on your answer.

          I did every thing as what you have said to me but unfortunately my internet is still not working. Is there any thing to do with my client pc setting (Ex: Default GW or DNS setting). I think i don't want to change any thing on the client side. Just entering the 192.168.0.110 as proxy ip and 3128 as a port.

          But I have notice I cannot clear my state table. When I click Clear the state at Diagnostics -> state -> Reset State. It seems PC is hung. but after the several minits I clicked refresh, then it goes. But my state tables are not cleared. is it a problem? how can i clear it?

          I've attached every thing here for kind reference.

          Please check and let me know the problem.

          Thank you very much

          Best Regards

          Nuwan

          ![GW Group.PNG](/public/imported_attachments/1/GW Group.PNG)
          ![GW Group.PNG_thumb](/public/imported_attachments/1/GW Group.PNG_thumb)
          Floating.PNG
          Floating.PNG_thumb
          ![LAN Rule.PNG](/public/imported_attachments/1/LAN Rule.PNG)
          ![LAN Rule.PNG_thumb](/public/imported_attachments/1/LAN Rule.PNG_thumb)
          NAT.PNG
          NAT.PNG_thumb
          Proxy1.PNG
          Proxy1.PNG_thumb
          Proxy2.PNG
          Proxy2.PNG_thumb
          Proxy3.PNG
          Proxy3.PNG_thumb
          ![Access Control.PNG](/public/imported_attachments/1/Access Control.PNG)
          ![Access Control.PNG_thumb](/public/imported_attachments/1/Access Control.PNG_thumb)
          ![Browser Settings.PNG](/public/imported_attachments/1/Browser Settings.PNG)
          ![Browser Settings.PNG_thumb](/public/imported_attachments/1/Browser Settings.PNG_thumb)

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            To fix your update problem

            1 Reply Last reply Reply Quote 0
            • J
              jikjik101
              last edited by

              In your browsing settings, select no proxy…

              I don't know why your settings doesn't work, I am just a newbie also. I just want to share my setup which works and hopefully thinking that it will work with yours.
              Sorry if it didn't help.

              Maybe the more experienced members here can help.

              1 Reply Last reply Reply Quote 0
              • A
                abcvidu
                last edited by

                Hi Everybody,

                Thanks to Heper and jikjik101 finally I could get internet through squid proxy server with Load Balancing and Fail over. I will explain to you each and every steps with my screen shots. ;) ;)

                1. You should update your Version up to the latest version

                2.0-RC3 (i386)
                built on Fri Aug 12 16:23:11 EDT 2011

                Then …...

                GW.PNG
                GW.PNG_thumb
                ![GW Group.PNG](/public/imported_attachments/1/GW Group.PNG)
                ![GW Group.PNG_thumb](/public/imported_attachments/1/GW Group.PNG_thumb)
                NAT.PNG
                NAT.PNG_thumb
                Floating.PNG
                Floating.PNG_thumb
                ![LAN Rule.PNG](/public/imported_attachments/1/LAN Rule.PNG)
                ![LAN Rule.PNG_thumb](/public/imported_attachments/1/LAN Rule.PNG_thumb)
                Proxy1.PNG
                Proxy1.PNG_thumb
                Proxy2.PNG
                Proxy2.PNG_thumb
                Proxy3.PNG
                Proxy3.PNG_thumb
                Proxy4.PNG
                Proxy4.PNG_thumb
                ![Browser Settings.PNG](/public/imported_attachments/1/Browser Settings.PNG)
                ![Browser Settings.PNG_thumb](/public/imported_attachments/1/Browser Settings.PNG_thumb)

                1 Reply Last reply Reply Quote 0
                • M
                  Metu69salemi
                  last edited by

                  Question, why you need to assign proxy for the browsers if it is already transparent?

                  1 Reply Last reply Reply Quote 0
                  • A
                    abcvidu
                    last edited by

                    I need to keep default GW of my PC as my Firewall IP. Coz I'm having to access DMZ.  if i applied "No Proxy" settings how can I access to internet?

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by

                      @abcvidu:

                      I need to keep default GW of my PC as my Firewall IP.

                      Naturally
                      @abcvidu:

                      Coz I'm having to access DMZ.  if i applied "No Proxy" settings how can I access to internet?

                      Usually transparent proxy works like it's named "transparently" aka no need to tell browsers it's existent

                      1 Reply Last reply Reply Quote 0
                      • A
                        abcvidu
                        last edited by

                        So if I checked "No Proxy" with PC Default GW= Firewall IP, is there any way to access internet?

                        1 Reply Last reply Reply Quote 0
                        • N
                          Nachtfalke
                          last edited by

                          @abcvidu:

                          So if I checked "No Proxy" with PC Default GW= Firewall IP, is there any way to access internet?

                          If you browse the web with port 80 (http) the squid automatically redirects this packets and so the traffic is going through squid. This is why you call it "transparent". You do not need any additional setting on your clients and the clients in general do not (need) to know that there is a TRANSPARENT proxy anywhere in the network.

                          You only need to edit the proxy address in the browser if you squid in NOT usinge transparent mode.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.