Queries getting ignored on pfsense configured as a proxy - network cards?



  • Hi there,

    I have set up pfsense with squid as a caching proxy for two separate networks. The problem is that many queries from the network are ignored/stuck, meaning: I enter a website in a browser, eventually the query times out. I need to hit enter on my address bar multiple times before I can get a connection.

    It happens with all the computers behind the proxy.

    I suspect there is some network fubar going on outside of pfsense on the virtualization/host OS layer that causes this.

    We have (currently the only stuff this school can afford) the following setup:

    • Pentium 4 Windows 2003 Server with VMWare Workstation 7

    • 1GB of RAM allocated to the VM (only VM running currently)

    • pfsense 2.0.3 32bit with squid 2.7 package, 2 network interfaces configured for 2 different subnets

    • The host has two Realtek NICs

    • VMware is set up to bridge one NIC to vmnet0 and the other NIC to vmnet1

    • the NICs in pfsense are emulated as Intel (em0/em1/em2)

    • the proxy connects to a gateway with content filter (Lancom router with their content filter package)

    I am guessing the problem evolves around some Windows ethernet driver issues… could I be right?

    Solutions that come to mind are:

    • put an Intel NIC into the host
    • upgrade Vmware
    • ditch Windows 2003 for e.g. Ubuntu as host
    • do a bare metal install
    • tweak some network settings in Vmware or Windows
    • tweak the network settings in pfsense

    I hope to have given all relevant information.

    Do you guys have an idea of what is going on and how to solve this? Thanks!



  • Why don't you chuck on VMware esxi free onto the box as a hypervisor and p2v server 2003 and virtualise pfsense. Should work much better.



  • while that is a good idea and the plan for the school is to eventually virtualize everything with ESXi, I'm more interested to solve the issue with the resources at hand - school's on a tight budget and can't afford IT guys to spend half a day to set up ESXi after virtualizing their stuff…

    I guess I'll try with an Intel NIC first, see if it works.