Mohon Bantuannya : Masalah Proxy

jundi49

Ass. Wr. Wb
Salam Om om semua
Saya ini new bie, terus instal pfsense sesuai panduan yang ada, terus saya instal lusca doank
dan set firewall alias, rules dan TS sesuai yang ada diforum,
semua set pake gui, Spek : Pentium Dual, 2 GB RAM, HDD 250 GB, MB Biostar

Tp kok proxynya kok blm bagus ya????
Aku download dan pacthing game untuk yang keskian kali msh lambat. Bahkan Browsing yang berulang ulang juga lama
Apa itu masalah om ? mohon bantuannya Seperti tidak simpan proxynya ?

[2.0-RC1][admin@pfSense.localdomain]/root(1): df -H
Filesystem Size Used Avail Capacity Mounted on
/dev/ad4s1a 238G 414M 219G 0% /
devfs 1.0k 1.0k 0B 100% /dev
/dev/md0 3.8M 49k 3.4M 1% /var/run

2011/05/31 17:28:01| Done scanning /var/squid/cache (2926 entries)
2011/05/31 17:28:01| AUFS: /var/squid/cache: tmp log closed on FD 13
2011/05/31 17:28:01| AUFS: /var/squid/cache: post-rename; log /var/squid/cache/swap.state, opened on FD 13
2011/05/31 17:28:01| Finished rebuilding storage from disk.
2011/05/31 17:28:01| 2926 Entries scanned
2011/05/31 17:28:01| 0 Invalid entries.
2011/05/31 17:28:01| 0 With invalid flags.
2011/05/31 17:28:01| 2926 Objects loaded.
2011/05/31 17:28:01| 0 Objects expired.
2011/05/31 17:28:01| 0 Objects cancelled.
2011/05/31 17:28:01| 0 Duplicate URLs purged.
2011/05/31 17:28:01| 0 Swapfile clashes avoided.
2011/05/31 17:28:01| Took 0.8 seconds (3491.7 objects/sec).
2011/05/31 17:28:01| Beginning Validation Procedure
2011/05/31 17:28:01| Completed Validation Procedure
2011/05/31 17:28:01| Validated 2926 Entries
2011/05/31 17:28:01| store_swap_size = 91936k
2011/05/31 17:28:01| storeLateRelease: released 0 objects
2011/05/31 17:38:12| clientIfRangeMatch: Weak ETags are not allowed in If-Range: W/"559022e-51305-4a31fe835db80" ? W/"559022e-51305-4a31fe835db80"
2011/05/31 17:41:43| CACHEMGR: <unknown>@127.0.0.1 requesting 'info'
2011/05/31 17:48:46| squidaio_queue_request: WARNING - Queue congestion

Ini set proxynya di GUI :
General
Proxy Interface LAN
Allow users on interface v
Transparant Proxy v
Enable logging v
log rotate 5
proxy port 3128
ICP port 3131
Enable Http1 v
Use alternate DNS 127.0.0.1
Custom Option zph_mode tos;zph_local 0x04;zph_parent 0;zph_option 136;

Cache Mgmt
aufs, hdd cache size 100, Object size 4, Mem Cache size 32, Max Mem Objext size 32, Minimum Object size 0, Maximum Object size 256, level 1 sub 16, Heap GDSF, Heap LFUDA, 90 dan 95, disable delay pool

$ squidclient -p 80 mgr:info
HTTP/1.1 200 OK
Server: Lusca/LUSCA r14850 patched: chudy r14
Date: Tue, 31 May 2011 10:41:43 GMT
Content-Type: text/plain
Expires: Tue, 31 May 2011 10:41:43 GMT
X-Cache: MISS from askarnetserver
Transfer-Encoding: chunked
Via: 1.0 askarnetserver:3128 (Lusca/LUSCA r14850 patched: chudy r14)
Connection: close

][admin@pfSense.localdomain]/root(3): squid -v
Squid Cache: Version LUSCA r14850 patched: chudy r14
configure options: '–bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm digest' '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB YP' '--enable-digest-auth-helpers=password' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group' '--enable-ntlm-auth-helpers=SMB' '--with-pthreads' '--enable-storeio=aufs null coss' '--enable-delay-pools' '--enable-snmp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=Armenian Azerbaijani Bulgarian Catalan Czech Danish Dutch English Estonian Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Lithuanian Polish Portuguese Romanian Russian-1251 Russian-koi8-r Serbian Simplify_Chinese Slovak Spanish Swedish Traditional_Chinese Turkish' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd8.0' 'build_alias=i386-portbld-freebsd8.0' 'CC=cc' 'CFLAGS=-O2 -pipe -fno-strict-aliasing' 'LDFLAGS=' 'CPPFL

1306839261.535 167 192.168.1.7 TCP_MISS/200 1432 GET http://kumpulblogger.com/sca.php?b=129711 - DIRECT/111.221.43.125 text/html
1306839261.540 165 192.168.1.7 TCP_MISS/200 924 GET http://kumpulblogger.com/dam.php?b=129711 - DIRECT/111.221.43.125 text/html
1306839261.548 165 192.168.1.7 TCP_MISS/200 585 GET http://adsensecamp.com/show/?id=QVvFRhNSx%2BQ%3D&cid=1mKE6FR8OXo%3D&chan=4FByiTT%2FNmU%3D&type=4&title=00FF80&text=72179D&background=FFFFFF&border=00FF80&url=F2984C - DIRECT/116.199.203.203 text/html
1306839261.679 376 192.168.1.7 TCP_MISS/200 19292 GET http://3.bp.blogspot.com/-1qk_oqKVR_M/TeSue7umSAI/AAAAAAAAAhc/935n656efQc/s320/PointBlank_20110531_155241.jpg - DIRECT/209.85.175.138 image/jpeg
1306839261.835 700 192.168.1.7 TCP_MISS/200 1670 GET http://www.widgeo.net/geocompteur/geocompteur.php?c=geoall1&id=1622431&adult=adult&cat=news&fonce=undefined&claire=undefined - DIRECT/67.205.90.30 text/html
1306839261.866 750 192.168.1.7 TCP_MISS/200 2449 GET http://www.widgeo.net/message.php?msg=Welcome%20To%20Pekalongan%20Cheater%20And%20Follow%20Blog%20Me%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20&adult=0&cat=shopping&big=big&cl=lightblue - DIRECT/67.205.90.30 text/html
1306839261.880 692 192.168.1.7 TCP_MISS/302 518 GET http://denisahlan.netau.net/bintang.putih.js - DIRECT/31.170.160.129 text/html
1306839261.936 2 192.168.1.7 TCP_HIT/200 2720 GET http://www.4shared.com/affiliate/images/b1.gif - NONE/- image/gif
1306839262.028 10 192.168.1.7 TCP_HIT/200 40894 GET http://www.blogger.com/static/v1/widgets/211018530-widgets.js - NONE/- text/javascript
1306839262.283 869 192.168.1.7 TCP_MISS/200 2500 GET http://sa.entireweb.com/sense.js - DIRECT/89.150.197.6 application/javascript
1306839262.845 1442 192.168.1.7 TCP_MISS/200 24476 GET http://s06.flagcounter.com/count/A6q/bg=87FF93/txt=FC0000/border=FAFA1E/columns=4/maxflags=52/viewers=Visitors+Pekalongan+cheater/labels=0/ - DIRECT/70.32.43.194 image/png
1306839263.053 712 192.168.1.7 TCP_MISS/200 1669 GET http://pageinxt.com/?dn=desaiklan.com&flrdr=yes&nxte=jpg - DIRECT/209.62.20.231 text/html
1306839263.527 2247 192.168.1.7 TCP_MISS/200 44563 GET http://www.dbclix.com/images/120x120.gif - DIRECT/96.30.3.105 image/gif
1306839267.149 6 192.168.1.7 TCP_HIT/200 3683 GET http://www.widgeo.net/popup.js - NONE/- application/x-javascript
1306839267.161 11 192.168.1.7 TCP_HIT/200 13724 GET http://www.widgeo.net/message/messagebig.swf - NONE/- application/x-shockwave-flash
1306839267.918 3628 192.168.1.7 TCP_REFRESH_MISS/200 14721 GET http://error404.000webhost.com/? - DIRECT/83.170.96.219 text/html
1306839268.059 2 192.168.1.7 TCP_HIT/200 12459 GET http://2.bp.blogspot.com/-vbW5lmcfJTs/Td6Ii-5BIqI/AAAAAAAAAg0/G6Nmqd7fvpg/s320/PointBlank_20110526_234404.jpg - NONE/- image/jpeg
1306839268.271 11 192.168.1.7 TCP_HIT/200 12388 GET http://2.bp.blogspot.com/-1-D62dipuWg/Td6JbhEnkHI/AAAAAAAAAg4/GpYlO9awM0g/s400/PointBlank_20110526_234713.jpg - NONE/- image/jpeg
1306839268.436 2 192.168.1.7 TCP_HIT/200 14881 GET http://2.bp.blogspot.com/-DsIwu5EEmkM/THqPQUcvKiI/AAAAAAAAACI/jgeo_lOZtI4/s320/pb5.jpg - NONE/- image/jpeg
1306839268.962 63 192.168.1.7 TCP_MISS/200 2627 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/187665_100000077292389_112027_q.jpg - DIRECT/118.98.42.112 image/jpeg
1306839268.972 69 192.168.1.7 TCP_MISS/200 2366 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/174376_100000122041107_8093437_q.jpg - DIRECT/118.98.42.114 image/jpeg
1306839269.056 148 192.168.1.7 TCP_MISS/200 2589 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/195579_100000127276053_2110614_q.jpg - DIRECT/118.98.42.105 image/jpeg

84a
Squid Object Cache: Version LUSCA r14850 patched: chudy r14
Start Time: Tue, 31 May 2011 10:28:00 GMT
Current Time: Tue, 31 May 2011 10:41:43 GMT
Connection information for squid:
Number of clients accessing cache: 7
Number of HTTP requests received: 1786
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 130.2
Average ICP messages per minute since start: 0.0
Select loop called: 40187 times, 20.476 ms avg
Cache information for squid:
Request Hit Ratios: 5min: 30.8%, 60min: 33.5%
Byte Hit Ratios: 5min: 47.4%, 60min: 36.4%
Request Memory Hit Ratios: 5min: 4.4%, 60min: 5.1%
Request Disk Hit Ratios: 5min: 48.8%, 60min: 63.1%
Storage Swap size: 86648 KB
Storage Mem size: 4628 KB
Mean Object Size: 27.59 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 0.15048 0.12783
Cache Misses: 0.28853 0.28853
Cache Hits: 0.00179 0.00179
Near Hits: 0.06640 0.08265
Not-Modified Replies: 0.00091 0.00091
DNS Lookups: 0.00000 0.00000
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 822.868 seconds
CPU Time: 7.015 seconds
CPU Usage: 0.85%
CPU Usage, 5 minute avg: 1.25%
CPU Usage, 60 minute avg: 0.87%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 16712 KB
Page faults with physical i/o: 4
Memory accounted for:
Total accounted: 5691 KB
memPoolAlloc calls: 268888
memPoolFree calls: 245384
File descriptor usage for squid:
Maximum number of file descriptors: 11095
Largest file desc currently in use: 81
Number of file desc currently in use: 61
Files queued for open: 0
Available number of file descriptors: 11034
Reserved number of file descriptors: 100
Store Disk files open: 1
IO loop method: kqueue
Internal Data Structures:
3177 StoreEntries
702 StoreEntries with MemObjects
697 Hot Object Cache Items
3140 on-disk objects</unknown>

asepyulisman

pakai captive portal yah om?

jundi49

Iya pake CP,allowed IP
Bahkan browsing site yang berkali - kali msh lambat
Napa itu om????
tq

asepyulisman

masalahnya sama om,

mungkin terlimite sama CP, coba tes.. kasih bandwidthnya 5000

http://forum.pfsense.org/index.php/topic,36565.0.html

jundi49

napa 5000 om ???
aku pake speeda paket 2mbps dan 512
di CP kubuat
Up : 512
Down : 320
Untuk tiap - tiap klien aku buat seperti itu om,
apa harus diubah 5000 semua, apa ga over atau lainnya

asepyulisman

itu buat ngetes aja, apa squid jln apa ngak ???

buka salah satu video youtube sampai selesai..
lalu hapus repositori,
putar lagi videonya , lihat trafig graph naik ngak sampai 5 mb

jangan lupa CP di set 5000, buat ngetes gitu

jundi49

om,
aku cek http://forum.pfsense.org/index.php/topic,26122.0.html,

Cek ini gmn
Melalui putty, coba cek paket yg ditandai apakah sudah muncul :

tcpdump -nvi re0 | grep 'tos 0x4'
yang mana perintahnya, maklum newbie, aku test ga bs ?

terus ubah - ubah itu, apa bs pake winscp ja, ga pake putty om ????

asepyulisman

ia om pakai putty,

gima om udah di tes…

naik ngak sampe 5 mb ???

jundi49

itu semua dibuat 5 mb ya ????? Ato klien yang akan ditest aja ??

asepyulisman

1 komputer aja, buat ngetes

jundi49

udah ditest, download dibuat 5000, waktu buka you tube maks dapat 2mbps, ga tembus 5000.

asepyulisman

;D ;D ;D

aq cuman ikutin langkah dari http://forum.pfsense.org/index.php/topic,34348.0.html, coba aja dulu

setelah itu coba tes squidnya nyimpan ngak??

aq juga masih newbie om, ;D ;D

serangku

melihat hasil generate cache manager sudah bagus

Request Hit Ratios: 5min: 30.8%, 60min: 33.5%
Byte Hit Ratios: 5min: 47.4%, 60min: 36.4%

tidak ada masalah dengan proxy nya …
utk problem yg lainnya silakan buat thread tersendiri lagi
supaya tdk tumpang tindih

jundi49

om bilang tidak ada masalah dengan proxy,
Tp aku download dan patching game atau browsing hal yang sama, beberapa kali,
msh lama…...
Aku pernah punya proxy bagus, dwonload ato pacthing game untuk yang kedua kali atau lebih cepat om.

Ini bahkan saya uninstal luscanya, saya ganti dengan squid aja. sy mau test pake squid aja.
Gmn itu om ????

asepyulisman

kalau saya cuaman pakai paket, squid,lusca dan unbound aja om

saya ngak pakai CP lagi, kata omserangku coba ganti dgn Qos & saya mau coba oprek2 lg

ini paket yg saya gunakan sekarang!!

services.JPG_thumb

Trafic.JPG_thumb

jundi49

Loh, jd bw manajemennya dmn jika ga pake CP,
Bisa ga allowed ip diaktifkan tp CP enable,
Sy pake cp cuma tuk bw manajemen per klien

asepyulisman

sebelumnya saya juga pakai CP dgn bw 350kb/client, komp di warnet ada 15 unit

pas update game PB lamanya minta ampun karena terlimite sama CP, trus di kasih aja tiap client
5000kb/client update pb wusssss kencang

dan sekarang CP ngak aq pakai lg, semoga aja ngak ada client yg pakai IDm, aminn :D

trus untuk managemant bandwidth, kata om serangku"masih banyak jalan ke roma" ;)

serangku

weks …

seandainya om pelajari sedikit mendalam ttg proxy ...
proxy pun masih bisa digunakan untuk management benwidth
tentunya dengan skala tertentu

ayo, kira2 ... feature apa yg ada di proxy yg digunakan untuk management benwith ?
googling juga gapapa ...

semakin penasaran, insya allah menambah pencerahan lebih lanjut ... :)

pfz

@asepyulisman:

Semoga aja ngak ada client yg pakai IDm, aminn :D

tp kalo pake torrent …tambah .... ;D ??? ::) ???

serangku

husss … ;D

jangan masuk2 ke torrent dulu ... :)
sambil pembelajaran utk yg lain ...
kalau banyak jalan menuju roma untuk ...
setidaknya untuk tahap awal sebelum ke hal yg lebih ruwet ...

proxy pun bisa dipake utk QoS, dgn batasan tertentu
clue : proxy akan menangkap traffic yg berjalan di port 80 atau http

answer : delay pool feature