Reverse Squid no longer working on latest development branch

[nafeasonto]

@stephenw10 yes that line is in squid.conf. been running this for over a year. The latest dev branch seems to have broken something.

[stephenw10]

So the actual line in the file is?:
http_port Array:80 accel defaultsite=mysite.com vhost

Is it only the reverse proxy failing?

That line looks like it's from a much older Squid version. The only recent thing I'm seeing is this:
https://github.com/pfsense/FreeBSD-ports/pull/776

What snapshot were you running previously when it was working?

Steve

[nafeasonto]

Yes, mysite.com is obliviously my outside DNS not mysite.com. And i am running the latest package I can get from the available packages. About 3 snaphots ago, i don't remember which on. Omg i forgot to mention I have Pfsense firewall on what it is running on.

[stephenw10]

'Array' there looks like it might be incorrect. It should be the listening listening interface

Try editing the file to correct that and starting the service. It will be overwritten if you make changes but will prove the issue.

Steve

[nafeasonto]

What should I change it to?

[MikeV7896]

I think Steve is saying to remove the Array: part of the line, so it should be just http_port 80 accel...

Stop the service, edit the file, and restart the service. Just remember that making any changes to Squid settings via the GUI will likely reintroduce the Array: bit back into the file, at least until the issue is fixed.

[serbus]

Hello!

For reference:

http://www.squid-cache.org/Versions/v3/3.5/cfgman/http_port.html

John

[nafeasonto]

@serbus That worked. Thanks. But why is it doing that? Who can inform the devs to fix that for PFSENSE?

[kiokoman]

@nafeasonto said in Squid no longer working on latest development branch:

/usr/local/etc/squid/squid.conf

i'm unable to reproduce this, everything seems to work fine on my side
the generation of the squid.conf is ok idk maybe some glich on your pfsense

[stephenw10]

It looks like it should be producing a line like: http_port ipaddress:80 accel defaultsite=mysite.com vhost

It should be choosing the IP address from an array of the ip addresses on the interfaces by the interface it's listening on.

I would guess that last change that went in to add IPv6 missed something for the reverse proxy case.

I also note 'vhost' is a deprecated option. Reverse Squid could use some love.

Steve

[stephenw10]

@kiokoman said in Squid no longer working on latest development branch:

i'm unable to reproduce this

In reverse mode?

[kiokoman]

i put some random stuff inside and it was working, i will try again

[stephenw10]

May be something else required to 'tickle' it. Like something in the array contents... or a lack of contents etc.

[kiokoman]

ah ok found it.. yeah it put Array in the config
bug https://redmine.pfsense.org/issues/10367

    foreach (explode(",", $ifaces) as $i => $iface) {
            $real_ifaces[] = squid_get_real_interface_address($iface);
            if ($real_ifaces[$i][0]) {

$real_ifaces[] contain only "Array"

[nafeasonto]

Good job finding it. I love when people listen to me. Thanks for taking the time to read the post.

[viktor_g]

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/805

[stephenw10]

Rapido!

[kiokoman]

nice work as always viktor

[nafeasonto]

@kiokoman you updating the package on Pfsense?

[kiokoman]

nope, i'm just a regular user like you, viktor have done the work, now Jim and Renato will do the update