Squid

kambeeng

Lihat Sticky di Atas bro semoga sukses

xaviero

wadoh…. buatin atuh mah, cara inject squid default 2.6.x ke 2.7.6 stable brow... pada buta neh... :D

fadjar340

squid nya bro fajar, emang yang udah di oprek, ato masi standard????

Bro xaviero, memang masih standard karena saya belum ngerti bener, mainan di inc-nya pfsense.

Satu pertanyaan saya yang amsih nggantung nih:
Kalau saya pakai ramdisk untuk simpan cache, apakah itu menaikkan performance squid? Khususnya untuk menampilkan halaman web yang di cache.

Regards,
Fadjar T

kambeeng

coba baca ini bro dan ikuti petunjuknya … squid jadi optimal dan kencang :D http://forum.pfsense.org/index.php/topic,18823.0.html

fadjar340

@kambeeng:

coba baca ini bro dan ikuti petunjuknya … squid jadi optimal dan kencang :D http://forum.pfsense.org/index.php/topic,18823.0.html

Makasih banyak bro kambeeng…

:)

fadjar340

@kambeeng:

http://forum.pfsense.org/index.php/topic,18823.0.html

Setelah dicoba dan dipasang…
Memang mangstabsss...
Tob markotobs...

Makasih ya bro..

kambeeng

Bro … good luck

yellowhat89

Mungkin masalah ini sudah terselesaikan tapi tidak adanya membuat pfSense anda semakin "beringas".
Disadari atau tidak kebanyakan pfSense dengan squid kecepatan bandwidthnya akan turun dari bandwidth yang seharusnya.
Hal ini dikarenakan pada pfsense lebih dimaksimalkan untuk router dibandingkan untuk server oleh karena itu nilai kern.ipc.nmbclusters dibuat "0" (default). Padahal di freeBSD nilainya adalah 8192.
Untuk mengatasi ini perlu dilakukan perubahan seperti berikut:

tambahkan line berikut pada /boot/loader.conf

kern.ipc.nmbclusters=32768
kern.maxfiles=65536
kern.maxfilesperproc=32768
net.inet.ip.portrange.last=65535

atau lebih mudahnya hapus semua isinya dan salin line berikut

autoboot_delay="1"
hint.apic.0.disabled=1
kern.hz=100
#for squid
kern.ipc.nmbclusters="32768"
kern.maxfiles="65536"
kern.maxfilesperproc="32768"
net.inet.ip.portrange.last="65535"

Atau jika anda tidak menghendaki perubahan yang signifikan cukup hapus kern.ipc.nmbclusters="0", dan squid akan jalan dengan baik.

Tapi untuk melakukan Tuning bisa ditambahkan:
kern.ipc.nmbclusters: 32768
kern.maxfiles=65536
kern.maxfilesperproc=32768
net.inet.ip.portrange.last: 65535

Semoga bermanfaat.

kambeeng

Apakah ini berlaku di pfsense alpha atau flatform yang lain

yellowhat89

bukan alpha, kalau alpha malah sudah tidak perlu master.
ini untuk semua pfsense release sebelum 2.0

xaviero

kalo bole dilakukan riset nih,
coba in deh, cache site nya lyto, www.lytogame.com , kemudian lakukan/ngtes daftar akun baru…
kalo dengan proxy, selalu mental, alias bolak balik ke page awal.

walo dah dimasukin IP ato domain si lytogame kekeuh squid ngotot bolak balik....
itu kalo kejadian aneh di pfsense ane

yellowhat89

itu kemungkinan masalah di proxynya mas,
coba dibuat acl untuk domain lyto, dan di cache deny.

xaviero

memang belum ane oprek ampe kedalam squid.inc nya….. ane masi make bawaan web GUI nya pf.
btw, ente coba jg lah.... biar bisa mengalami penderitaan nya....wkwkwkwkwkwkwkwk

kambeeng

SQUID.CONF silahkan cek :D

http_port 3128 transparent
cache_effective_user squid
cache_effective_group squid
acl all src 0.0.0.0/0.0.0.0
icp_query_timeout 1000
high_memory_warning 500 MB
visible_hostname akabri.info
httpd_suppress_version_string on
cache_mem 64 MB
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_swap_low 90
cache_swap_high 95
maximum_object_size 131072 KB
maximum_object_size_in_memory 64 KB
tcp_recv_bufsize 65535 bytes
ipcache_size 8192
fqdncache_size 8192
acl msnmess url_regex http://207.46.111.55/gateway/gateway.dll?
deny_info TCP_RESET msnmess
http_access deny msnmess
forwarded_for off
high_page_fault_warning 10
high_response_time_warning 2000
client_persistent_connections off
server_persistent_connections on
half_closed_clients off
cache_dir aufs /cache 10000 10 256
log_icp_queries off
cache_access_log /usr/local/squid/logs/access.log
emulate_httpd_log on
ftp_user kambeeng@akabri.info
cache_mgr kambeeng@akabri.info
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
quick_abort_min 0 KB
quick_abort_max 0 KB
negative_dns_ttl 2 minutes
acl mynetwork src 192.168.1.0/26
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563 2082 2083 2086 2087 2093 2095 2096
acl Safe_ports port 80 21 443 563 70 210 8000 11999 2082 2083 2086 2087 2095 2096 8082 8090
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow mynetwork
http_access allow localhost
deny_info TCP_RESET all
http_access deny all
snmp_port 3001
acl queryme snmp_community SquidSnmpRahasia
acl adminpc src 192.168.1.2
snmp_access allow queryme localhost
snmp_access allow queryme adminpc
snmp_access deny all
icp_access allow mynetwork
icp_access deny all
miss_access allow all
ie_refresh on

yellowhat89

waduh kayake om kambeeng pernah janji mau bikin how to nya inject squid 2.7 di pfSense nech… kapan ya... hehehe ;D

serangku

sekalian request yang 2 Head nya juga yah om … :D

kavari

salam, saya ada masalah dgn squid, klo diaktifkan u/ interfaces lan, maka semua client gak bisa konek, awal instalasi masih ok, sekitar dua bulan kemudian baru muncul masalahx, oh iya saya masih menggunakan 1.2 release
ini lognya :
Sep 13 09:32:12 squid[1694]: Squid Parent: child process 1937 exited due to signal 6
Sep 13 09:32:14 check_reload_status: reloading filter
Sep 13 09:32:15 squid[1694]: Squid Parent: child process 2044 started
Sep 13 09:32:15 squid[2044]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:16 kernel: pid 2044 (squid), uid 62: exited on signal 6
Sep 13 09:32:16 squid[1694]: Squid Parent: child process 2044 exited due to signal 6
Sep 13 09:32:19 squid[1694]: Squid Parent: child process 2094 started
Sep 13 09:32:19 squid[2094]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:19 kernel: pid 2094 (squid), uid 62: exited on signal 6
Sep 13 09:32:19 squid[1694]: Squid Parent: child process 2094 exited due to signal 6
Sep 13 09:32:19 squid[1694]: Exiting due to repeated, frequent failures
Sep 13 09:32:25 Squid_Alarm[2137]: Squid has exited. Reconfiguring filter.
Sep 13 09:32:25 Squid_Alarm[2139]: Attempting restart…
Sep 13 09:32:25 squid[2146]: Squid Parent: child process 2149 started
Sep 13 09:32:26 squid[2149]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:26 kernel: pid 2149 (squid), uid 62: exited on signal 6
Sep 13 09:32:26 squid[2146]: Squid Parent: child process 2149 exited due to signal 6
Sep 13 09:32:28 Squid_Alarm[2184]: Reconfiguring filter…
Sep 13 09:32:29 squid[2146]: Squid Parent: child process 2187 started
Sep 13 09:32:29 squid[2187]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:29 kernel: pid 2187 (squid), uid 62: exited on signal 6
Sep 13 09:32:29 squid[2146]: Squid Parent: child process 2187 exited due to signal 6
Sep 13 09:32:29 Squid_Alarm[2294]: Squid has resumed. Reconfiguring filter.
Sep 13 09:32:32 squid[2146]: Squid Parent: child process 2430 started
Sep 13 09:32:33 squid[2430]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:33 kernel: pid 2430 (squid), uid 62: exited on signal 6
Sep 13 09:32:33 squid[2146]: Squid Parent: child process 2430 exited due to signal 6
Sep 13 09:32:36 squid[2146]: Squid Parent: child process 2477 started
Sep 13 09:32:36 squid[2477]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:36 kernel: pid 2477 (squid), uid 62: exited on signal 6
Sep 13 09:32:36 squid[2146]: Squid Parent: child process 2477 exited due to signal 6
Sep 13 09:32:40 squid[2146]: Squid Parent: child process 2512 started
Sep 13 09:32:40 squid[2512]: Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time.
Sep 13 09:32:40 kernel: pid 2512 (squid), uid 62: exited on signal 6
Sep 13 09:32:40 squid[2146]: Squid Parent: child process 2512 exited due to signal 6
Sep 13 09:32:40 squid[2146]: Exiting due to repeated, frequent failures
Sep 13 09:33:23 php: /pkg_mgr_install.php: cd /var/db/pkg && pkg_delete ls | grep
Sep 13 09:33:25 Squid_Alarm[2629]: Squid has exited. Reconfiguring filter.
Sep 13 09:33:25 Squid_Alarm[2631]: Attempting restart…
Sep 13 09:33:51 php: /pkg_mgr_install.php: cd /var/db/pkg && pkg_delete ls | grep squid
Sep 13 09:33:55 check_reload_status: reloading filter

mohon bantuan dari master sekalian, kalo bisa step by step, soalx masih nubi

yellowhat89

ba rebuild cache_dir nya

xaviero

masuk ke console , kemudian ketik "squid -z" , liat lagi pesan error nya.. (kalo ada)

kavari

saya sdh coba jalankan squid -z, hasilx : 2009/09/14 08:21:27| WARNING cache_mem is larger than total disk cache space!
2009/09/14 08:21:27| Creating Swap Directories