Services on main site and branch offices?
-
Hello,
I have 3 pfsense boxes running, one at our main site and 2 at branch offices. All 3 sites are connected via Time Warner fiber and the pfsense boxes are used to route between subnets. All outgoing traffic from all 3 sites routes out from our main site. I have been thinking about implementing squid/squid guard for web filtering. My question is should I setup squid/squid guard on all the pfsense boxes or just the pfsense box at our main site? Also, as I start adding more services, should I have them running on all the pfsense boxes or just the main site box?
Thank you in advance.
-
I would think that you would get better performance by making it local to each branch. The cache hit rate isn't that great these days unlike when the web was more static (in my office the hit rate is usually in the area of 4-7%), so I find Squid acts best mainly as the base for filtering with SquidGuard. YMMV, of course.
-
Thank you for the response KMO. Would you agree that additional services (ex. HAVP) would also be best ran at each branch?
-
If all the internet traffic is going through one device I can't see it making much of a difference. The only reason I'd run it at each branch is to protect them from each other. I'd rather maintain just the one at the WAN if possible.
