What is the most suitable tool to replace Squid?

KOM

@jucelio_rosa You can either spin up squid/squidguard on a separate system or convert your fw to something that still supports squid.

jucelio_rosa

@KOM At the company where I work, we use Pfsense 2.8.1. Squid no longer starts. I researched and saw that Squid is no longer supported. I'm looking for a tool that can replace it.

KOM

@jucelio_rosa Squid runs on 2.8.1 but there was a library bug IIRC. If you manually start squid then check the system log, do you see this error?

The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'ld-elf.so.1: /usr/local/sbin/squid: Undefined symbol "_ZTVNSt3__117bad_function_callE"'

michmoor

You have several choices depending on budget but none of them will be on your pfsense.
Your options will be

Replace pfsense with another vendor that can do content filtering
Use another service while keeping pfsense in line .

jucelio_rosa

@KOM Good morning. The goal is to keep Pfsense and have another proxy option in case Squid really doesn't work anymore (from what I've researched, Squid has been discontinued).

JonathanLee

@jucelio_rosa Squid has been updated upstream were just waiting for it to be merged here. All the issues security concerns etc have been fixed upstream.

Per email from Squid community..

"The Squid HTTP Proxy team is very pleased to announce the availability
of the Squid-7.3 release!

This release is, we believe, stable enough for general production use.
We encourage all users of any previous version of Squid to upgrade to it.

It can be downloaded from GitHub, at
https://github.com/squid-cache/squid/releases/tag/SQUID_7_3

The main change since version 7.2 is the fix for regression bug 5520
"host or domain with leading digits rejected with ERR_INVALID_URL",
along with a handful of other improvements and fixes.

Please remember to run "squid -k parse" when testing the upgrade to a new
version of Squid. It will audit your configuration files and report
any identifiable issues the new release will have in your installation
before you "press go".

If you encounter any issues with this release please file a bug report at
https://bugs.squid-cache.org/"

This software works so good big tech hates when its used...HATES it it's light a giant flashlight on privacy abuses, it like gives Google a heart attack when its running so I assume it will be updated here eventually

jucelio_rosa

@JonathanLee use Pfsense 2.8.1.

JonathanLee

@jucelio_rosa I use plus

aGeekhere

Docker image for squid 7.3 and above
https://hub.docker.com/r/fredbcode/squid

If pfsense does not push the update.

JonathanLee

Squid can be configured externally, I would love a how to guide on how to do this correctly.

rawsmr

I don't get why Netgate deprecates Squid. On my current pfSense+ 26.03.1 is Squid 7.4 installed, the current stable version is 7.5. Where's the catch about unresolved issues?

KOM

@rawsmr Be thankful you've got that much. Us second-class citizens on CE 2.8.1 get 6.12 from 2024. No idea why Netgate decided as they did, but then again that seems to be their pattern lately -- make head-scratching decisions that anger their users.

JonathanLee

I figured out how to fix the squid status page issue also so cool!!

https://github.com/JonathanDLee24/FreeBSD-ports/pull/2/changes/ffbb818d8ab9e09ea2e7642c06f89838f986cf87

Just incase anyone else wants to check it out or test it

aGeekhere

pfsense updated squid to Squid 7.4 for 26.03.1? when does CE 2.8.1 get it?