Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Reverse Squid no longer working on latest development branch

    Scheduled Pinned Locked Moved 2.5 Development Snapshots (Retired)
    32 Posts 6 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nafeasonto
      last edited by

      What should I change it to?

      1 Reply Last reply Reply Quote 0
      • MikeV7896M
        MikeV7896
        last edited by MikeV7896

        I think Steve is saying to remove the Array: part of the line, so it should be just http_port 80 accel...

        Stop the service, edit the file, and restart the service. Just remember that making any changes to Squid settings via the GUI will likely reintroduce the Array: bit back into the file, at least until the issue is fixed.

        The S in IOT stands for Security

        1 Reply Last reply Reply Quote 0
        • S
          serbus
          last edited by

          Hello!

          For reference:

          http://www.squid-cache.org/Versions/v3/3.5/cfgman/http_port.html

          John

          Lex parsimoniae

          N 1 Reply Last reply Reply Quote 0
          • N
            nafeasonto @serbus
            last edited by

            @serbus That worked. Thanks. But why is it doing that? Who can inform the devs to fix that for PFSENSE?

            1 Reply Last reply Reply Quote 0
            • kiokomanK
              kiokoman LAYER 8
              last edited by kiokoman

              @nafeasonto said in Squid no longer working on latest development branch:

              /usr/local/etc/squid/squid.conf

              i'm unable to reproduce this, everything seems to work fine on my side
              the generation of the squid.conf is ok idk maybe some glich on your pfsense

              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
              Please do not use chat/PM to ask for help
              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

              stephenw10S 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                It looks like it should be producing a line like: http_port ipaddress:80 accel defaultsite=mysite.com vhost

                It should be choosing the IP address from an array of the ip addresses on the interfaces by the interface it's listening on.

                I would guess that last change that went in to add IPv6 missed something for the reverse proxy case.

                I also note 'vhost' is a deprecated option. Reverse Squid could use some love. 😉

                Steve

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator @kiokoman
                  last edited by

                  @kiokoman said in Squid no longer working on latest development branch:

                  i'm unable to reproduce this

                  In reverse mode?

                  1 Reply Last reply Reply Quote 0
                  • kiokomanK
                    kiokoman LAYER 8
                    last edited by

                    i put some random stuff inside and it was working, i will try again 🤷

                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                    Please do not use chat/PM to ask for help
                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      May be something else required to 'tickle' it. Like something in the array contents... or a lack of contents etc.

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK
                        kiokoman LAYER 8
                        last edited by kiokoman

                        ah ok found it.. yeah it put Array in the config
                        bug https://redmine.pfsense.org/issues/10367

                            foreach (explode(",", $ifaces) as $i => $iface) {
                                    $real_ifaces[] = squid_get_real_interface_address($iface);
                                    if ($real_ifaces[$i][0]) {
                        

                        $real_ifaces[] contain only "Array"

                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                        Please do not use chat/PM to ask for help
                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                        1 Reply Last reply Reply Quote 3
                        • N
                          nafeasonto
                          last edited by nafeasonto

                          Good job finding it. I love when people listen to me. Thanks for taking the time to read the post.

                          1 Reply Last reply Reply Quote 0
                          • viktor_gV
                            viktor_g Netgate
                            last edited by

                            Fix:
                            https://github.com/pfsense/FreeBSD-ports/pull/805

                            1 Reply Last reply Reply Quote 3
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Rapido! 😁

                              1 Reply Last reply Reply Quote 0
                              • kiokomanK
                                kiokoman LAYER 8
                                last edited by kiokoman

                                nice work as always viktor 👏 👏 😀

                                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                Please do not use chat/PM to ask for help
                                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                N 1 Reply Last reply Reply Quote 0
                                • N
                                  nafeasonto @kiokoman
                                  last edited by

                                  @kiokoman you updating the package on Pfsense?

                                  1 Reply Last reply Reply Quote 0
                                  • kiokomanK
                                    kiokoman LAYER 8
                                    last edited by

                                    nope, i'm just a regular user like you, viktor have done the work, now Jim and Renato will do the update

                                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                    Please do not use chat/PM to ask for help
                                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                    1 Reply Last reply Reply Quote 1
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Pretty simple patch, you could just modify /usr/local/pkg/squid_reverse.inc yourself to test it.

                                      https://github.com/pfsense/FreeBSD-ports/commit/7716b1cb15b3d5ad7985118bc4716565a1c7dbfc?diff=unified

                                      Steve

                                      1 Reply Last reply Reply Quote 1
                                      • N
                                        nafeasonto
                                        last edited by nafeasonto

                                        @stephenw10 The modifications in the link you told me worked. Thanks.

                                        Will you be modifying the package for the future?

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Not me personally but it will almost certainly be pulled in, yes.

                                          Steve

                                          N 1 Reply Last reply Reply Quote 1
                                          • N
                                            nafeasonto @stephenw10
                                            last edited by

                                            @stephenw10 okay great, thank you.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.