• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Squid3 - New GUI with sync, normal and reverse proxy

Scheduled Pinned Locked Moved Cache/Proxy
428 Posts 104 Posters 488.8k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    finalcut
    last edited by Nov 15, 2014, 7:52 PM

    i am not kidding
    also it happen with pfsense i try to buy two stickers (as simple first  donation) and they send the money back to me

    any way i try to encourage my company to get pfsense support , they can buy any thing from anywhere

    1 Reply Last reply Reply Quote 0
    • S
      sunghost
      last edited by Nov 15, 2014, 9:29 PM

      You are right, donation for the developer and the project is always good. Thats not the question. i think its not good to use package which are older than 1 or 2 or more years. or packages which seems not longer develop. you know? All things getting faster, the development the bad guys and also the features of some packages which we cant use, while our older than 1 year. i also think its not in any case good to use the latest version, but one which is older than 6 month?! not good if the features or fixes alot. i think a security solution must be up to date. But the product pfsense and the idea behind it is great. dont misunderstand me.

      1 Reply Last reply Reply Quote 0
      • E
        edanpedragosa
        last edited by Nov 17, 2014, 6:14 AM

        @finalcut:

        i made update it work flawless ,, thanks for update

        Are you on a 32-bit or 64-bit version?

        Caching does not seem to work right now… I only get TCP_MISS....

        Can you share us your configuration and settings for squid?

        Thank you in advance!

        1 Reply Last reply Reply Quote 0
        • F
          finalcut
          last edited by Nov 17, 2014, 6:44 AM

          64-bit
          do you have tcp_swapfail ?

          1 Reply Last reply Reply Quote 0
          • E
            edanpedragosa
            last edited by Nov 18, 2014, 1:26 AM

            No, I don't have TCP_SWAPFAIL_MISS, only TCP_MISS/200. What I'm waiting to see in the logs is the HIT but I don't see TCP_HIT.

            1 Reply Last reply Reply Quote 0
            • E
              edanpedragosa
              last edited by Nov 18, 2014, 7:22 AM

              Now I'm getting a HIT by setting the Minimum object size to 0.

              It's just the large downloads that don't get cached.

              Hope this will get sorted out again in the next update….

              1 Reply Last reply Reply Quote 0
              • E
                Escorpiom
                last edited by Nov 26, 2014, 9:12 PM

                Perhaps someone can help a confused n00b on PfSense 2.2 Beta…

                I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
                But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".

                To me this seems to be an update, is this correct?
                And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?

                Cheers.

                1 Reply Last reply Reply Quote 0
                • D
                  dig1234
                  last edited by Nov 26, 2014, 9:22 PM

                  That would be very exciting news but I'm still only seeing  3.3.10 pkg 2.2.8.
                  I've actually been experimenting with compiling from source on a freebsd 8.3 machine so this would really save me some hassle.

                  @Escorpiom:

                  Perhaps someone can help a confused n00b on PfSense 2.2 Beta…

                  I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
                  But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".

                  To me this seems to be an update, is this correct?
                  And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?

                  Cheers.

                  1 Reply Last reply Reply Quote 0
                  • E
                    Escorpiom
                    last edited by Nov 26, 2014, 9:38 PM

                    Probably your not on 2.2 beta. The package wouldn't be compatible.

                    Cheers.

                    1 Reply Last reply Reply Quote 0
                    • D
                      dig1234
                      last edited by Nov 26, 2014, 10:18 PM

                      ah indeed you are correct. That makes sense as 2.2 is using FreeBSD 10.1…

                      1 Reply Last reply Reply Quote 0
                      • E
                        Escorpiom
                        last edited by Nov 28, 2014, 10:14 PM

                        Please can anybody outline the correct procedure and confirm Squid was updated for PfSense 2.2 beta?

                        Cheers.

                        1 Reply Last reply Reply Quote 0
                        • L
                          longhorn
                          last edited by Nov 30, 2014, 5:14 AM

                          @edanpedragosa:

                          Now I'm getting a HIT by setting the Minimum object size to 0.

                          It's just the large downloads that don't get cached.

                          Hope this will get sorted out again in the next update….

                          It could also be how you utilize the proxy. It took me some time to figure out for many applications, Squid's caching function is useless. Unless you have a network where multiple computers hit the exact same content, within a period of time (while the data is still in the cache).

                          I use pfSense for my home network. Almost nothing is cached. However, I find Squid very useful for logging and filtering Web traffic.

                          YMMV, but just pointing out that seeing a lot of MISSes reported in Squid's log is most often WAD behavior (Working As Designed)

                          1 Reply Last reply Reply Quote 0
                          • T
                            Topper727
                            last edited by Dec 31, 2014, 3:30 AM

                            I have it installed in 2.2RC as of 12/30's release.  Does not run.  Starts then stops then starts then stops and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection.  Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.

                            Why it don't stay running and keep restarting ?

                            2.2-RC (amd64)
                            built on Tue Dec 30 15:16:19 CST 2014
                            FreeBSD pfSense.localdomain 10.1-RELEASE-p3 FreeBSD 10.1-RELEASE-p3 #0 8bdb2f8(releng/10.1)-dirty: Tue Dec 30 15:58:58 CST 2014 root@pfsense-22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64

                            Dell 2950 g3 server
                            Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                            Current: 2000 MHz, Max: 2667 MHz
                            8 CPUs: 2 package(s) x 4 core(s)
                            8152 MiB and 600meg 10k drive
                            Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by Dec 31, 2014, 1:10 PM

                              @Topper727:

                              Why it don't stay running and keep restarting ?

                              It looks like current pbi was build with debug options. Once we get the pull request mergerd and pbi build again with all used options, I think we get a 'ready to go' version

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • C
                                Cino
                                last edited by Dec 31, 2014, 2:38 PM

                                @marcelloc did you update the symbolic links for the install also? I recall I had to create a bunch to get 3.4 to start on a fresh 2.2RC install. I have to check my notes, but I believe I was able to get clamd to run but c-icap wouldn't start up.

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by Jan 1, 2015, 4:31 AM

                                  Not yet.  I've fixed compile args but we need to wait a new pbi run for squid.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    Cino
                                    last edited by Jan 1, 2015, 1:45 PM

                                    thanks marcelloc!! Looking forward to it! waiting for a few more other packages to be updated and i'll be ready to switch over to 2.2

                                    1 Reply Last reply Reply Quote 0
                                    • E
                                      Escorpiom
                                      last edited by Jan 3, 2015, 1:14 AM

                                      @Topper727:

                                      …and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection.  Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.

                                      Sadly, the issue persists after updating to 3.4.10_2 pkg 0.2.1.

                                      Cheers.

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        Topper727
                                        last edited by Jan 18, 2015, 4:44 AM

                                        Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page

                                        Dell 2950 g3 server
                                        Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                        Current: 2000 MHz, Max: 2667 MHz
                                        8 CPUs: 2 package(s) x 4 core(s)
                                        8152 MiB and 600meg 10k drive
                                        Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by Jan 19, 2015, 12:25 AM

                                          @Topper727:

                                          Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page

                                          Squid Transparent proxy is working on 2.2 with or without ssl interception.

                                          What you get on squid/cache logs?

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            [[user:consent.lead]]
                                            [[user:consent.not_received]]