Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update LUSCA_HEAD-r14535

    Scheduled Pinned Locked Moved Indonesian
    18 Posts 6 Posters 9.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      grage95
      last edited by

      fix header
      improve %nn parser
      refresh_pattern ignore-must-revalidate
      fix fault log
      fix filedescriptors prints wrong addresses

      hxx://squid-proxy-pkg.googlecode.com/files/pfsense-lusca-head-r14554_1.tbz

      1 Reply Last reply Reply Quote 0
      • P
        pria_aneh
        last edited by

        salam kenal semuanya…
        kalau bisa mohon dishare contoh konfigurasi squid.conf dan squid.inc

        saya sementara ini masih menggunakan squid bawaan pFsense...sebelumnya sempat install lusca karena ada teman yg duluan install lusca
        tapi masih menghadapi kendala terutama sewaktu tes pake perintah squidclient
        jawabannya

        squidclient mgr:info |less

        client: ERROR: Cannot connect to localhost:3128: Connection refused

        NB :
        konfigurasi jaringanku

        IP Lokal : 192.168.1.1/24
        IP WAN ; PPPoE dari speedy telkom

        Cache : 50GB port squid : 3128

        Terima kasih

        1 Reply Last reply Reply Quote 0
        • A
          anto_DIGIT
          last edited by

          @grage95:

          fix header
          improve %nn parser
          refresh_pattern ignore-must-revalidate
          fix fault log
          fix filedescriptors prints wrong addresses

          hxx://squid-proxy-pkg.googlecode.com/files/pfsense-lusca-head-r14554_1.tbz

          Bung garge, gimana ya konfigurasi tunning untuk lusca yang digabung dengan videocache ? Ini sudah coba, tetapi kok sepertinya ada yg tumpang tindih sehingga malah performanya jadi berkurang ..

          1 Reply Last reply Reply Quote 0
          • G
            grage95
            last edited by

            kalau menggunakan videocache + storeurl dynamic content salah satu harus di hilangkan utk video2 tertentu, misal youtube, ya jangan semuanya di enable, squid jadi bingung.

            cek config tunning.conf dan storeurl.pl apakah ada regex video yang sama dengan di videocache.conf, jika ada pilih salah satu saja biar gak crowded

            1 Reply Last reply Reply Quote 0
            • P
              pria_aneh
              last edited by

              Minta saRAN untuk konfigurasi cache management pada pf sense

              saya sudah pake pfsense123+lusca-nya om grage

              konfigurasi cache managemen yg sekarang

              cache size 30Gb
              memory cache size 8
              minimum object size 0
              maximum object size 64000

              Mesin pfsense :
              HDD 80 GB SATA /II
              RAM 1 GB

              ![New Picture (4).jpg](/public/imported_attachments/1/New Picture (4).jpg)
              ![New Picture (4).jpg_thumb](/public/imported_attachments/1/New Picture (4).jpg_thumb)
              ![New Picture (5).jpg](/public/imported_attachments/1/New Picture (5).jpg)
              ![New Picture (5).jpg_thumb](/public/imported_attachments/1/New Picture (5).jpg_thumb)

              1 Reply Last reply Reply Quote 0
              • A
                anto_DIGIT
                last edited by

                @grage95:

                kalau menggunakan videocache + storeurl dynamic content salah satu harus di hilangkan utk video2 tertentu, misal youtube, ya jangan semuanya di enable, squid jadi bingung.

                cek config tunning.conf dan storeurl.pl apakah ada regex video yang sama dengan di videocache.conf, jika ada pilih salah satu saja biar gak crowded

                OK .. dicoba dulu, tks ..
                Ada lagi pertanyaan, kalau kita tdk menginstall squidguard, apakah fitur safesearch di google dan bing, bisa diaktifkan dng menambah di storeurl:

                if ($url =~ m@^http://([^.].)?bing.[^/]/[^?]?.@i) {
                    # Replace any previous safe directives
                    $url =~ s@(adlt=[^&]*&?)@@ig;

                # Add safe search directive
                    $url .= '&adlt=strict&cc=au';

                } elsif ($url =~ m@^http://([^.].)?google.[^/]/[^?]?.@i) {

                # Replace any previous safe directives
                    $url =~ s@(safe=[^&]*&?)@@ig;

                # Add safe search directive
                    $url .= '&safe=active';
                }

                Kemudian untuk caching google map, apa sudah benar kalau kita insert ini di storeurl :

                #google map
                elsif (m/kh(.?).google.com(.?)/(.?) /) {
                      print "http://keyhole-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                                # print STDERR "KEYHOLE\n";
                } elsif (m/mt(.                ?).google.com(.?)/(.?) /) {
                        print "http://map-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                                # print STDERR "MAPSRV\n";
                }

                dan di tunning.conf :

                acl store_rewrite_list dstdomain mt.google.com mt0.google.com mt1.google.com mt2.google.com
                acl store_rewrite_list dstdomain mt3.google.com
                acl store_rewrite_list dstdomain kh.google.com kh0.google.com kh1.google.com kh2.google.com
                acl store_rewrite_list dstdomain kh3.google.com khm0.google.com khm1.google.com khm2.google.com khm3.google.com
                acl store_rewrite_list dstdomain kh.google.com.au kh0.google.com.au kh1.google.com.au
                acl store_rewrite_list dstdomain kh2.google.com.au khc3.google.com.au

                storeurl_access allow store_rewrite_list

                1 Reply Last reply Reply Quote 0
                • G
                  grage95
                  last edited by

                  @pria_aneh:

                  Minta saRAN untuk konfigurasi cache management pada pf sense

                  saya sudah pake pfsense123+lusca-nya om grage

                  konfigurasi cache managemen yg sekarang

                  cache size 30Gb
                  memory cache size 8
                  minimum object size 0
                  maximum object size 64000

                  Mesin pfsense :
                  HDD 80 GB SATA /II
                  RAM 1 GB

                  naikkan nilai :
                  cache_mem jadi 32 mb
                  cache_dir =40960, LI=64, L2= 256
                  buat partisi tersendiri utk  /var/squid/cache

                  1 Reply Last reply Reply Quote 0
                  • G
                    grage95
                    last edited by

                    @anto_DIGIT:

                    @grage95:

                    kalau menggunakan videocache + storeurl dynamic content salah satu harus di hilangkan utk video2 tertentu, misal youtube, ya jangan semuanya di enable, squid jadi bingung.

                    cek config tunning.conf dan storeurl.pl apakah ada regex video yang sama dengan di videocache.conf, jika ada pilih salah satu saja biar gak crowded

                    OK .. dicoba dulu, tks ..
                    Ada lagi pertanyaan, kalau kita tdk menginstall squidguard, apakah fitur safesearch di google dan bing, bisa diaktifkan dng menambah di storeurl:

                    if ($url =~ m@^http://([^.].)?bing.[^/]/[^?]?.@i)
                        # Replace any previous safe directives
                        $url =~ s@(adlt=[^&]*&?)@@ig;

                    # Add safe search directive
                        $url .= '&adlt=strict&cc=au';

                    } elsif ($url =~ m@^http://([^.].)?google.[^/]/[^?]?.@i) {

                    # Replace any previous safe directives
                         $url =~ s@(safe=[^&]*&?)@@ig;

                    # Add safe search directive
                        $url .= '&safe=active';
                    }

                    Kemudian untuk caching google map, apa sudah benar kalau kita insert ini di storeurl :

                    #google map
                    elsif (m/kh(.?).google.com(.?)/(.?) /) {
                           print "http://keyhole-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                                    # print STDERR "KEYHOLE\n";
                    } elsif (m/mt(.                    ?).google.com(.?)/(.?) /) {
                            print "http://map-srv.google.com" . $2 . ".SQUIDINTERNAL/" . $3 . "\n";
                                    # print STDERR "MAPSRV\n";
                    }

                    dan di tunning.conf :

                    acl store_rewrite_list dstdomain mt.google.com mt0.google.com mt1.google.com mt2.google.com
                    acl store_rewrite_list dstdomain mt3.google.com
                    acl store_rewrite_list dstdomain kh.google.com kh0.google.com kh1.google.com kh2.google.com
                    acl store_rewrite_list dstdomain kh3.google.com khm0.google.com khm1.google.com khm2.google.com khm3.google.com
                    acl store_rewrite_list dstdomain kh.google.com.au kh0.google.com.au kh1.google.com.au
                    acl store_rewrite_list dstdomain kh2.google.com.au khc3.google.com.au

                    storeurl_access allow store_rewrite_list

                    bisa bro di gabungin, coba dulu, hati2 dengan karakter { },
                    sebaiknya coba dulu tanpa squid, langsung eksekusi perl /usr/local/etc/squid/storeurl .pl
                    jika tidak ada error berrti jalan, dan buatkan acl di tunning.conf utk safesearch & bing

                    1 Reply Last reply Reply Quote 0
                    • P
                      pria_aneh
                      last edited by

                      Thx om Grage for your help…
                      btw,,,L1 = Level 1 subdirectories
                      Each level-1 directory contains 256 subdirectories, so a value of 256 level-1 directories will use a total of 65536 directories for the hard disk cache. This will significantly slow down the startup process of the proxy service, but can speed up the caching under certain conditions.

                      Trus yg L2 = 256 di taro dimana om????

                      Partisi nya manual….ada 50GB yg dibuat manual untuk /var/squid/log

                      Thanks

                      1 Reply Last reply Reply Quote 0
                      • G
                        grage95
                        last edited by

                        L2=256 sudah default di pfsense
                        tinggal set L1

                        log kok gede banget  ???

                        mending partisi log di rubah mount pointnya ke partisi cache

                        1 Reply Last reply Reply Quote 0
                        • A
                          anto_DIGIT
                          last edited by

                          @grage95:

                          bisa bro di gabungin, coba dulu, hati2 dengan karakter { },
                          sebaiknya coba dulu tanpa squid, langsung eksekusi perl /usr/local/etc/squid/storeurl .pl
                          jika tidak ada error berrti jalan, dan buatkan acl di tunning.conf utk safesearch & bing

                          Kalau karakter {} ga jadi masalah, kemudian coba tambahkan :

                          acl store_rewrite_list_domain_CDN url_regex    ^http://.www.google.co(m|.id)
                          acl store_rewrite_list_domain_CDN url_regex    ^http://.www.bing.com

                          yang "bing" berhasil, tetapi google tidak….

                          Kemudian utk googlemap tdk ada hambatan ..

                          1 Reply Last reply Reply Quote 0
                          • P
                            pria_aneh
                            last edited by

                            maap…salah ketik om...
                            yg 50Gb itu yg /var/squid/cache...
                            om error nih
                            setelah saya ganti mengkuti opsi itu..., graph squidstats berhenti beroperasi
                            trus, setelah dicek pake perintah tail -f /var/squid/log/cache.log
                            hasilnya

                            2010/04/08 16:10:35|  Took 0.7 seconds (28589.4 objects/sec).
                            2010/04/08 16:10:35| Beginning Validation Procedure
                            2010/04/08 16:10:35|  Completed Validation Procedure
                            2010/04/08 16:10:35|  Validated 18852 Entries
                            2010/04/08 16:10:35|  store_swap_size = 431258k
                            2010/04/08 16:10:35| storeLateRelease: released 0 objects
                            2010/04/08 16:22:53| squidaio_queue_request: WARNING - Queue congestion
                            2010/04/08 16:57:49| squidaio_queue_request: WARNING - Queue congestion
                            2010/04/08 17:54:53| squidaio_queue_request: WARNING - Queue congestion
                            2010/04/08 17:56:05| httpAccept: FD 16: accept failure: (53) Software caused connection abort

                            sudag saya kembalikan trus restart service + restart pFsensenya tapi hasilnya tetap sama saja…
                            any advice????

                            1 Reply Last reply Reply Quote 0
                            • G
                              grage95
                              last edited by

                              sebelum di ganti, apakah cache lamanya  sudah di delete ?

                              1 Reply Last reply Reply Quote 0
                              • P
                                pria_aneh
                                last edited by

                                wah….tidak juga sih....
                                apa ada option yg harus diketik di konsol???
                                trus apa pfsense support LUSCA HEAD-r14535???
                                skalian di update jike memang support

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.