Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 problems

    Scheduled Pinned Locked Moved pfSense Packages
    24 Posts 3 Posters 8.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Q
      quetzalcoatl
      last edited by

      I love squid but i find too many limitations, at least with when i use it in pfsense. (i don't like how it works in other platforms)

      What is going on right now is that https pages cannot be access with the squid3 package installed from pfsense.
      I can use lusca and it works well with both http and https pages but it's very outdated and is not being updated an maintained anymore.

      So i want to update my pfsense platform but i really feel that squid3 is useless if it doesn't allow me to work with https just like lusca and squid 2.7 without using crazy configurations.

      Also squid crashes when i set the maximum object size in RAM above about 450 KB.

      In fact i assign 32 GB of RAM to PFSense of which 20 GB are for dedicated for Squid RAM caching and the only way to use all that RAM and make it useful is having the maximum limit of at least 512 KB or even 1024KB for objects stored in RAM.

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        @quetzalcoatl:

        What is going on right now is that https pages cannot be access with the squid3 package installed from pfsense.

        check dns_v4_first option on squid config gui and try again.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • Q
          quetzalcoatl
          last edited by

          Marcellok so you say that i have to set dns_v4_first off or on?

          This is a brand new command that i just discovered thanks to you Marcellok
          The problem is that in the squid guide it doesn't say all the values, just the default
          and talks about this command: –enable-internal-dns

          I wonder if i have to stick --enable-internal-dns with all the other squid settings

          http://www.squid-cache.org/Doc/config/dns_v4_first/

          With the IPv6 Internet being as fast or faster than IPv4 Internet
          for most networks Squid prefers to contact websites over IPv6.

          This option reverses the order of preference to make Squid contact
          dual-stack websites over IPv4 first. Squid will still perform both
          IPv6 and IPv4 DNS lookups before connecting.

          WARNING:
            This option will restrict the situations under which IPv6
            connectivity is used (and tested). Hiding network problems
            which would otherwise be detected and warned about.

          Also do you know what are maximum size for objects in RAM?

          Can i safely set 4096 KB as maximum Object size in RAM?

          I used to cache in disk objects big as 9 Gigabytes (a full dvd) with lusca and it works, but if i go beyond 512Kilobytes of object size in RAM sometimes quid crashes.

          Marcellok do you work for the squid guys or you just work in the squid3 package for pfsense.

          If you work for the squid-cache people, can you please import the ultra aggressive caching features of lusca inside squid? Because lusca is actually a tuned up squid.

          Thanks for your support!

          1 Reply Last reply Reply Quote 0
          • J
            jwhostet
            last edited by

            Well major issues here… first ISP issue then after they finally came back online I find out there is some sort of failover that my GM added me into. So now im limited to 10Mbps till a new card is installed in his failover box. So I might have to scrap my whole setup/squid may just end up being a basic router... Or nothing.

            Thanks for all the help, if something changes in the next few days and I get everything I had before back I will try your fix and report back.

            Or I will create another post and start over new.

            Again thanks!
            Josh

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.