New HOWTO: pfSense Squid Web Proxy with multi-WAN links (it works!)

mikehomee · Jun 3, 2011, 10:42 AM

Hi!!
After following those guides, it does gives me interest to study pfsense deeply.
I'm running pfsense 2.0 RC2 (updated) squid + wan failover that for me is working. Just did it TODAY.
I did not set or use any rules (as in no rules are being used.)
I still need to monitor this over the weekend. I'd be happy to share it with you guys if this one works with my needs.
Like port forwarders and carp/pfsync.

THank you for giving me encouragement!!

zzajdica · Jun 3, 2011, 4:39 PM

My floating rule is set. I also tried upgrading to the newest snapshot but it did not help. Please see attached for my settings. Thanks!

jimp · Jun 3, 2011, 4:42 PM

Edit the floating rule so that the interfaces and direction are also visible in the screenshots. That's the most important info there aside from what you've shown.

zzajdica · Jun 3, 2011, 4:53 PM

jimp · Jun 3, 2011, 4:55 PM

Check "quick" on that rule.

zzajdica · Jun 3, 2011, 4:57 PM

Tried that didn't work

heper · Jun 4, 2011, 11:53 PM

@zzajdica

duplicate the floating rule you made for http traffic, then modify it for dns (proto tcp/udp / port dns=53)

nassman · Jun 5, 2011, 2:31 PM

All ways not work.
we need standard way work with all , not for one.
very bad.

zzajdica · Jun 6, 2011, 1:18 PM

Thanks Heper but that also did not work. I'm going to be deploying this later on with a different network (Right now I am just testing) with DNS servers on the LAN so maybe I'll have better luck in that environment. I'll post back as soon as this happens.

Many thanks.

acriollo · Jun 7, 2011, 12:43 AM

Hi you guys, any one have the document ? i cant get it from the url posted.

thanks in advanced.

Regards

acriollo · Jun 8, 2011, 4:50 AM

@acriollo:

Hi you guys, any one have the document ? i cant get it from the url posted.

thanks in advanced.

Regards

Solved, the link was down till now.

Thanks

zzajdica · Jun 8, 2011, 6:52 PM

Still couldn't get it to work.. failover works great if I don't have Squid running.

onkeldave83 · Jun 14, 2011, 3:17 PM

We need LoadBalancing and FailOVER! squid guys working faster please!

mbedyn · Jun 15, 2011, 10:26 PM

@DimitriS
Did you tested this setup in case of loadbalancing?
After my test it perfectly works in case of failover, but not when I set up loadbalancing between two gateways..
I tried to bind squid to loopback and LAN and only loopback, and works well only when gateways sets in failover.

Michael

Frozen_Fire · Jun 16, 2011, 6:47 AM

I agree with mbedyn, failover works but not loadbalancing.

dwood · Jun 26, 2011, 4:17 PM

Saw the same thing here. Fail-over yes, load balancing no.

jikjik101 · Jun 27, 2011, 1:01 PM

same here no loadbalance only failover. Also the redirect error page in squidguard doesn't point to the redirect page.

2.0-RC3 (i386)
built on Wed Jun 22 12:38:11 EDT 2011

installed packages: squid, squidguard, bandwidth and vnstati

squid in transparent mode, 2 ISP (dynamic and static WANS)
floating rule set as this:
@zzajdica:

jikjik101 · Jul 4, 2011, 7:42 AM

I tried to follow the HOWTO but it seems I encountered problems:

2.0-RC3 (i386)
built on Fri Jul 1 00:16:18 EDT 2011

mohdhanafe · Jul 5, 2011, 1:40 AM

Good Job

zetar · Jul 13, 2011, 6:46 AM

Hello.
For three days I'm trying to do this.
I tried and tried, but I can not get it to work.
I can not open web pages it opens and then stops and does not go more 'forward.
I attach a screenshot
As you can see I can not even do program updates.
If anyone can help me, I would do a big favor.
Thanks to all.