Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 - New GUI with sync, normal and reverse proxy

    Scheduled Pinned Locked Moved Cache/Proxy
    428 Posts 104 Posters 525.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      Custom options

      http_port 8080 intercept;

      ident_lookup_access allow all;
      ident_timeout 3 seconds;

      Note that only your custom options has ";" at the end.

      Remove it and test again.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • _
        _igor_
        last edited by

        duh! That was it. Thx for your help!!

        1 Reply Last reply Reply Quote 0
        • nesenseN
          nesense
          last edited by

          Hello, just reinstalled squid3 and it is still not caching. logs give TCP_MISS/200

          thank you

          1 Reply Last reply Reply Quote 0
          • A
            al_reidy
            last edited by

            my HD died in the router. on a fresh reinstall i can install the squid3 package but i get this in the system log.

            php: /pkg_mgr_install.php: XML error: Mismatched tag at line 348 in /usr/local/pkg/squid.xml

            the package doesnt have any menu item options either.

            corrupt package?

            1 Reply Last reply Reply Quote 0
            • A
              al_reidy
              last edited by

              the line in the xml refers to :

              <default_value>en</default_value>

              as part of

              <field><fielddescr>Language</fielddescr>
              <fieldname>error_language</fieldname>
              <description>Select the language in which the proxy server will display error messages to users.</description>
              <type>select</type>
              <default_value>en</default_value></field>

              1 Reply Last reply Reply Quote 0
              • P
                podilarius
                last edited by

                a pull request has been submited by phil that should fix that. We are waiting on a dev to pull in that request.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @al_reidy:

                  the line in the xml refers to :

                  <default_value>en</default_value>

                  It's fixed now, wait 15 minutes and reinstall

                  att,
                  Marcello Coutinho

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • P
                    podilarius
                    last edited by

                    Thanks!

                    1 Reply Last reply Reply Quote 0
                    • P
                      phil.davis
                      last edited by

                      Apologies to all - my little "fix" for the default language had a bit of extra cut-and-paste somehow. I noticed it soon after it got committed, but unfortunately it took quite a while for anyone with the necessary privs to commit the better version. I'll stare a lot harder at seemingly mindless fixes in future!

                      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                      1 Reply Last reply Reply Quote 0
                      • A
                        al_reidy
                        last edited by

                        @phil.davis:

                        Apologies to all - my little "fix" for the default language had a bit of extra cut-and-paste somehow. I noticed it soon after it got committed, but unfortunately it took quite a while for anyone with the necessary privs to commit the better version. I'll stare a lot harder at seemingly mindless fixes in future!

                        Its working now. Thank you all for your help.  ;D

                        1 Reply Last reply Reply Quote 0
                        • N
                          nutt318
                          last edited by

                          I would like to report a bug in the Squid Reverse Proxy. Under the HTTPS settings the default port used is 443 if you leave the feild empty. However if you look at squid.conf in /usr/local/etc/squid the listening port is still 80. So you have to manually put in 443 for the listening port.

                          Even though I found this bug I'm still having issues with getting the HTTPS reverse proxy working correctly.

                          I'm getting a squid error page saying Access Denied. Access control configuration prevents your request from being allowed at this time.

                          Not sure of the problem but it looks like others are having problems with the reverse proxy on HTTPS as well.
                          http://forum.pfsense.org/index.php/topic,51945.0.html

                          1 Reply Last reply Reply Quote 0
                          • D
                            dhatz
                            last edited by

                            Folks, is there any reason why in proxy_monitor.sh you're using a series of pipes (btw both awk seem redundant)

                            NUM_PROCS=`ps auxw | grep "[s]quid -D"|awk '{print $2}'| wc -l | awk '{ print $1 }'`
                            
                            rather than a simpler pgrep -f "process" | wc -l ?[/s]
                            
                            1 Reply Last reply Reply Quote 0
                            • P
                              podilarius
                              last edited by

                              Please re-install as I have modified the code using the pgrep a couple of days ago.

                              1 Reply Last reply Reply Quote 0
                              • D
                                dhatz
                                last edited by

                                @podilarius:

                                Please re-install as I have modified the code using the pgrep a couple of days ago.

                                Hi, I'm not running squid on pfsense, but I just happened to notice the commits at:

                                https://github.com/bsdperimeter/pfsense-packages/blob/master/config/squid3/proxy_monitor.sh
                                (which is the latest code afaik)

                                1 Reply Last reply Reply Quote 0
                                • P
                                  podilarius
                                  last edited by

                                  sorry .. looking at the wrong line of code. That package (squid3) is for 1.2.3. The one that is on 2.1 and I think 2.0 is under the directory squid-reverse. So, you are talking about making it:

                                  
                                  NUM_PROCS=`pgrep -f "squid -f" | wc -l | awk '{ print $1 }'`
                                  
                                  

                                  The awk has to be in there to format the number returned properly as output without the awk yields spaces or tabs before the number returned.
                                  or even

                                  
                                  NUM_PROCS=`ps auxw | grep -c "[s]quid -f"'
                                  
                                  This has only 1 pipe like your example.[/s]
                                  
                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    phil.davis
                                    last edited by

                                    @marcelloc - I corrected the conf_mount_rw and conf_mount_ro calls so that after a squid3 installation on nanobsd-like systems the filesystem ends up read-only. (Previously it was accidentally left read-write at the end of the install).

                                    Now this message appears in /tmp/PHP_errors.log

                                    [03-Aug-2012 04:16:47 UTC] PHP Warning:  copy(/root/2.1-BETA0.captiveportal.inc.backup): failed to open stream: Read-only file system in /usr/local/pkg/squid.inc on line 1640
                                    

                                    This is the code:

                                    	if (!file_exists('/root/'.$pfsense_version.'.captiveportal.inc.backup')) {
                                    		copy ($cp_file,'/root/'.$pfsense_version.'.captiveportal.inc.backup');
                                    		}
                                    	if($found_rule > 0){
                                    		file_put_contents($cp_file,$new_cp_inc, LOCK_EX);
                                    		}
                                    
                                    

                                    I am not sure what you want to do, perhaps put the backup in /tmp? (lost after a reboot on nanobsd), perhaps also only do the backup if a rule is found? Maybe something like this:

                                    	if($found_rule > 0){
                                    		if (!file_exists('/tmp/'.$pfsense_version.'.captiveportal.inc.backup')) {
                                    			copy ($cp_file,'/tmp/'.$pfsense_version.'.captiveportal.inc.backup');
                                    			}
                                    
                                    		file_put_contents($cp_file,$new_cp_inc, LOCK_EX);
                                    		}
                                    
                                    

                                    This code is not in the older squid(2), so this problem is just in squid3.

                                    As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                                    If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @phil.davis:

                                      I am not sure what you want to do, perhaps put the backup in /tmp? (lost after a reboot on nanobsd), perhaps also only do the backup if a rule is found? Maybe something like this:

                                      well, it will need a mount_rw before this test and a mount_ro after.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        mavnezz
                                        last edited by

                                        Hi,

                                        i'm using without any probs the squid3 (3.1.20 pkg 2.0.5_3) package on pfsense 2.0.1. thanks for this.

                                        is it possible to use squid on 2 diffent ports on the same ip. for now it's '8080', additionally i want to use '3128'. 8080 should use the wan1 and 3128 should use the wan2 connection. is this in any way possible?

                                        greets

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          you can try this config on custom options.

                                          find the listening args you need and place there.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            athompso
                                            last edited by

                                            I don't understand what the point is of having XMLRPC sync without being able to listen on a CARP IP address.

                                            1. can anyone tell me if there is a way to get this pkg to listen on a CARP IP (or even just listen on all interfaces!), and
                                            2. what is an example use case for synchronized configs otherwise?

                                            (Also see http://redmine.pfsense.org/issues/2591 and http://redmine.pfsense.org/issues/2592.)

                                            Thanks,
                                            -Adam

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.