Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 - New GUI with sync, normal and reverse proxy

    Cache/Proxy
    104
    428
    470.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      finalcut
      last edited by

      i am not kidding
      also it happen with pfsense i try to buy two stickers (as simple first  donation) and they send the money back to me

      any way i try to encourage my company to get pfsense support , they can buy any thing from anywhere

      1 Reply Last reply Reply Quote 0
      • S
        sunghost
        last edited by

        You are right, donation for the developer and the project is always good. Thats not the question. i think its not good to use package which are older than 1 or 2 or more years. or packages which seems not longer develop. you know? All things getting faster, the development the bad guys and also the features of some packages which we cant use, while our older than 1 year. i also think its not in any case good to use the latest version, but one which is older than 6 month?! not good if the features or fixes alot. i think a security solution must be up to date. But the product pfsense and the idea behind it is great. dont misunderstand me.

        1 Reply Last reply Reply Quote 0
        • E
          edanpedragosa
          last edited by

          @finalcut:

          i made update it work flawless ,, thanks for update

          Are you on a 32-bit or 64-bit version?

          Caching does not seem to work right now… I only get TCP_MISS....

          Can you share us your configuration and settings for squid?

          Thank you in advance!

          1 Reply Last reply Reply Quote 0
          • F
            finalcut
            last edited by

            64-bit
            do you have tcp_swapfail ?

            1 Reply Last reply Reply Quote 0
            • E
              edanpedragosa
              last edited by

              No, I don't have TCP_SWAPFAIL_MISS, only TCP_MISS/200. What I'm waiting to see in the logs is the HIT but I don't see TCP_HIT.

              1 Reply Last reply Reply Quote 0
              • E
                edanpedragosa
                last edited by

                Now I'm getting a HIT by setting the Minimum object size to 0.

                It's just the large downloads that don't get cached.

                Hope this will get sorted out again in the next update….

                1 Reply Last reply Reply Quote 0
                • E
                  Escorpiom
                  last edited by

                  Perhaps someone can help a confused n00b on PfSense 2.2 Beta…

                  I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
                  But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".

                  To me this seems to be an update, is this correct?
                  And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?

                  Cheers.

                  1 Reply Last reply Reply Quote 0
                  • D
                    dig1234
                    last edited by

                    That would be very exciting news but I'm still only seeing  3.3.10 pkg 2.2.8.
                    I've actually been experimenting with compiling from source on a freebsd 8.3 machine so this would really save me some hassle.

                    @Escorpiom:

                    Perhaps someone can help a confused n00b on PfSense 2.2 Beta…

                    I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
                    But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".

                    To me this seems to be an update, is this correct?
                    And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?

                    Cheers.

                    1 Reply Last reply Reply Quote 0
                    • E
                      Escorpiom
                      last edited by

                      Probably your not on 2.2 beta. The package wouldn't be compatible.

                      Cheers.

                      1 Reply Last reply Reply Quote 0
                      • D
                        dig1234
                        last edited by

                        ah indeed you are correct. That makes sense as 2.2 is using FreeBSD 10.1…

                        1 Reply Last reply Reply Quote 0
                        • E
                          Escorpiom
                          last edited by

                          Please can anybody outline the correct procedure and confirm Squid was updated for PfSense 2.2 beta?

                          Cheers.

                          1 Reply Last reply Reply Quote 0
                          • L
                            longhorn
                            last edited by

                            @edanpedragosa:

                            Now I'm getting a HIT by setting the Minimum object size to 0.

                            It's just the large downloads that don't get cached.

                            Hope this will get sorted out again in the next update….

                            It could also be how you utilize the proxy. It took me some time to figure out for many applications, Squid's caching function is useless. Unless you have a network where multiple computers hit the exact same content, within a period of time (while the data is still in the cache).

                            I use pfSense for my home network. Almost nothing is cached. However, I find Squid very useful for logging and filtering Web traffic.

                            YMMV, but just pointing out that seeing a lot of MISSes reported in Squid's log is most often WAD behavior (Working As Designed)

                            1 Reply Last reply Reply Quote 0
                            • T
                              Topper727
                              last edited by

                              I have it installed in 2.2RC as of 12/30's release.  Does not run.  Starts then stops then starts then stops and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection.  Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.

                              Why it don't stay running and keep restarting ?

                              2.2-RC (amd64)
                              built on Tue Dec 30 15:16:19 CST 2014
                              FreeBSD pfSense.localdomain 10.1-RELEASE-p3 FreeBSD 10.1-RELEASE-p3 #0 8bdb2f8(releng/10.1)-dirty: Tue Dec 30 15:58:58 CST 2014 root@pfsense-22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64

                              Dell 2950 g3 server
                              Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                              Current: 2000 MHz, Max: 2667 MHz
                              8 CPUs: 2 package(s) x 4 core(s)
                              8152 MiB and 600meg 10k drive
                              Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @Topper727:

                                Why it don't stay running and keep restarting ?

                                It looks like current pbi was build with debug options. Once we get the pull request mergerd and pbi build again with all used options, I think we get a 'ready to go' version

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • C
                                  Cino
                                  last edited by

                                  @marcelloc did you update the symbolic links for the install also? I recall I had to create a bunch to get 3.4 to start on a fresh 2.2RC install. I have to check my notes, but I believe I was able to get clamd to run but c-icap wouldn't start up.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Not yet.  I've fixed compile args but we need to wait a new pbi run for squid.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      Cino
                                      last edited by

                                      thanks marcelloc!! Looking forward to it! waiting for a few more other packages to be updated and i'll be ready to switch over to 2.2

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        Escorpiom
                                        last edited by

                                        @Topper727:

                                        …and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection.  Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.

                                        Sadly, the issue persists after updating to 3.4.10_2 pkg 0.2.1.

                                        Cheers.

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          Topper727
                                          last edited by

                                          Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page

                                          Dell 2950 g3 server
                                          Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                          Current: 2000 MHz, Max: 2667 MHz
                                          8 CPUs: 2 package(s) x 4 core(s)
                                          8152 MiB and 600meg 10k drive
                                          Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @Topper727:

                                            Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page

                                            Squid Transparent proxy is working on 2.2 with or without ssl interception.

                                            What you get on squid/cache logs?

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.