Squid3 - New GUI with sync, normal and reverse proxy
-
No, I don't have TCP_SWAPFAIL_MISS, only TCP_MISS/200. What I'm waiting to see in the logs is the HIT but I don't see TCP_HIT.
-
Now I'm getting a HIT by setting the Minimum object size to 0.
It's just the large downloads that don't get cached.
Hope this will get sorted out again in the next update….
-
Perhaps someone can help a confused n00b on PfSense 2.2 Beta…
I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".To me this seems to be an update, is this correct?
And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?Cheers.
-
That would be very exciting news but I'm still only seeing 3.3.10 pkg 2.2.8.
I've actually been experimenting with compiling from source on a freebsd 8.3 machine so this would really save me some hassle.Perhaps someone can help a confused n00b on PfSense 2.2 Beta…
I have at the moment Squid "3.3.11_1 pkg 2.2.8" installed, that was a dev package from some weeks ago.
But looking at the available packages list, there now is a "beta 3.4.9 pkg 0.1".To me this seems to be an update, is this correct?
And is it possible to update from 3.3.11 dev to 3.4.9 beta? Should I uninstall the 3.3.11 dev package first?Cheers.
-
Probably your not on 2.2 beta. The package wouldn't be compatible.
Cheers.
-
ah indeed you are correct. That makes sense as 2.2 is using FreeBSD 10.1…
-
Please can anybody outline the correct procedure and confirm Squid was updated for PfSense 2.2 beta?
Cheers.
-
Now I'm getting a HIT by setting the Minimum object size to 0.
It's just the large downloads that don't get cached.
Hope this will get sorted out again in the next update….
It could also be how you utilize the proxy. It took me some time to figure out for many applications, Squid's caching function is useless. Unless you have a network where multiple computers hit the exact same content, within a period of time (while the data is still in the cache).
I use pfSense for my home network. Almost nothing is cached. However, I find Squid very useful for logging and filtering Web traffic.
YMMV, but just pointing out that seeing a lot of MISSes reported in Squid's log is most often WAD behavior (Working As Designed)
-
I have it installed in 2.2RC as of 12/30's release. Does not run. Starts then stops then starts then stops and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection. Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.
Why it don't stay running and keep restarting ?
2.2-RC (amd64)
built on Tue Dec 30 15:16:19 CST 2014
FreeBSD pfSense.localdomain 10.1-RELEASE-p3 FreeBSD 10.1-RELEASE-p3 #0 8bdb2f8(releng/10.1)-dirty: Tue Dec 30 15:58:58 CST 2014 root@pfsense-22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64 -
Why it don't stay running and keep restarting ?
It looks like current pbi was build with debug options. Once we get the pull request mergerd and pbi build again with all used options, I think we get a 'ready to go' version
-
@marcelloc did you update the symbolic links for the install also? I recall I had to create a bunch to get 3.4 to start on a fresh 2.2RC install. I have to check my notes, but I believe I was able to get clamd to run but c-icap wouldn't start up.
-
Not yet. I've fixed compile args but we need to wait a new pbi run for squid.
-
thanks marcelloc!! Looking forward to it! waiting for a few more other packages to be updated and i'll be ready to switch over to 2.2
-
…and if I try to run through transparent I get no data through unless it is application that uses and IP instead of a domain name to get the connection. Is there a problem with DNS ?I use DNS Resolver the new one they say.. The DNS Fordwarder didn't work for me so I use that now.. But all is well without Squid.
Sadly, the issue persists after updating to 3.4.10_2 pkg 0.2.1.
Cheers.
-
Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page
-
Same here on 3.4.10_2 pkg 0.2.5.. Transparent still gives no net unless secure https .. then of course it don't go through proxy (not have it setup to do https) so all works there.. but all other pages show can't find page
Squid Transparent proxy is working on 2.2 with or without ssl interception.
What you get on squid/cache logs?
-
Hello.
I have 2.2-RELEASE (i386) with Squid 2.7.9 pkg v.4.3.6 (and Lightsquid who stopped working after last upgrade).
I need IPv6 support, so i think Squid3 is my only option.
Shall i uninstall Squid 2.7.9 first?
Is Lightsquid compatible with Squid3 (when they fix new problems)?
Thanks
-
Hello.
I have 2.2-RELEASE (i386) with Squid 2.7.9 pkg v.4.3.6 (and Lightsquid who stopped working after last upgrade).
I need IPv6 support, so i think Squid3 is my only option.
Shall i uninstall Squid 2.7.9 first?
Is Lightsquid compatible with Squid3 (when they fix new problems)?
Thanks
uninstall 2.7.9 then install squid3… squid 3 does support IPv6, but it doesn't listen on an IPv6 address tho. So clients would need to connect to ipv4:3128. You can however in advance options add an IPv6 interface e.g http_port [xxxx.xxxx.xxxx.xxxx.xxx.xxx]:3182
lightsquid still has issues with its pbi but search for my workaround to get it working. It is compatible with squid3
-
uninstall 2.7.9 then install squid3… squid 3 does support IPv6, but it doesn't listen on an IPv6 address tho. So clients would need to connect to ipv4:3128. You can however in advance options add an IPv6 interface e.g http_port [xxxx.xxxx.xxxx.xxxx.xxx.xxx]:3182
lightsquid still has issues with its pbi but search for my workaround to get it working. It is compatible with squid3
Thanks a lot.
I can live with v4 clients, and i will try the custom addition.
I want IPv6 Internet behavior for Squid because my 6to4 Tunnel ends in a (very) faster local Gate (International circuits much larger/faster than my ISP's one).
-
Hello pfSense Gurus!
I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy.
Using this forum thread and other threads on this forum I have my reverse proxy running. There are two questions if have to make it work perfectly:
1. How can I force Squid3 (the reverse proxy part in pfSense) to suppress the addition headers identifying the host as Squid? (picture of my headers attached.[Contained in the red box])
2. How can I get Squid (reverse proxy) to forcefully cache static (text/HTML) content?
Squid3 will query my web server on the local network every time I connect. I have two remote machines that I use for testing. When I look in my Squid logs both machines show their remote IP address separately and each time it says "TCP_MISS/200". (Picture attached)
I have a openVPN connection between two networks. One network is the public IP(site B) I use to run my website and the other network is my private network(site A). It works right now and the DNS has no problems resolving.
When i check the headers (in my example[contained in blue box]) it says that is has not changed for two days and has an eTag. That header is from Apache server itself(I have checked headers on localhost using [curl -I]).
If I understand how the reverse proxy is supposed to be working. Since it is being presented with a not changed since date it should be caching it at (site B), but instead it queries (site A) for each call.
tl;dr - Need help suppressing Squid's headers in reverse proxy mode and forcing the reverse proxy to cache static content.
