Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traffic Shaping & Squid Caching Proxy

    Scheduled Pinned Locked Moved Traffic Shaping
    2 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      Dan9550
      last edited by

      Hi I've got my pfSense setup right now and its working great. I would like to add squid as a caching proxy, but I've read all sorts of things about this will / will not work. Just wondering if i could get some clarification here.

      1 Reply Last reply Reply Quote 0
      • E
        Ecnerwal
        last edited by

        Well, there's this, https://forum.pfsense.org/index.php?topic=62188.0 but I can't say I had the best of luck with it. Then there's this which I haven't tried yet: https://forum.pfsense.org/index.php?topic=66537.msg366615#msg366615

        In theory if you can separate "traffic coming from the pfSense box to the LAN" and "traffic coming from the internet to the LAN" it "should be easy." Due (in my frustrated opinion) to the dismal, out of date, and incomplete documentation, nothing on the shaper is ever easy.  IF I grok the sense of the "short form approach for pfsense 2.1" in the second linked message (not the link to an older thing the linked message is replying to) I believe it's trying to do exactly that. But I have no idea if it actually accomplishes the desired effect or not.

        I did successfully get shaping to work, but it shaped cache hits. I don't know who would want that behavior, but it's not me.

        I strongly suggest making a backup of the configuration before you start working on the shaper, as every time I have tried to get it to shape without shaping cache hits, it's blown up in my face and needed to be reset to a working configuration from before that point.

        I'm just about ready to try tilting at this particular windmill again, which is why I'm here reading your unanswered post. I wish I could offer you a more hopeful answer, but I can't, as it's all poking at things with clear as mud directions and holes you can drive a truck through in those.

        Another approach suggested from the "olden days" is to just put squid on a separate box, i.e.
        Internet <–>pfSense (and shaper)<-->Squid (all by itself)<--> users.
        Annoying, but might be easier than trying to get this to work.

        pfSense on i5 3470/DQ77MK/16GB/500GB

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.