Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Load Balancing and Failover in Squid Proxy

    Routing and Multi WAN
    2
    3
    10132
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mantissa last edited by

      Hi All,

      First thing - hats off to the pfSense team for such a fantastic project - it's made life for a lot of us a whole lot simpler and productive.

      I currently have the following pfSense setup:

      pfSense 1.2 RC2
      2 WAN Connections used in Load Balancing and Failover

      My load balancing works absolutely great without squid proxy we and any time any of my WAN connections fails - shifts over pretty seamlessly (also for web traffic) .

      Now after installing squid proxy (running it in transparent mode) - when both WANs are working fine - squid proxy works absolutely fine. However, when one of the WANs fails - I notice that while other services fail over to the functioning WAN - web traffic users routed through the proxy start getting 'no route to host' errors almost as though it's not failing over like the other services. Almost seems like squid proxy does a hard binding to one of my WANs , and routing dies along with it if that WAN connection fails. If I shut off squid proxy at that stage i.e. disable the proxy the web traffic goes through correctly.

      Has anyone seen a similar problem? Has anyone come up with any solutions of how to deal with it? Is there an easy work around to this?

      Thanks!

      1 Reply Last reply Reply Quote 0
      • L
        lhrt last edited by

        Hi Mantissa,

        The squid package is not multi wan capable right now. I think there is patch available for this.
        If i am not wrong squid multi wan fail over support will be on 1.3 version.

        Regards,
        Lhrt

        1 Reply Last reply Reply Quote 0
        • M
          mantissa last edited by

          Hi Lhrt,

          Thanks for the note. I did try the Multi-WAN patch which works great for controlling traffic flow of select subnets through specific gateways. Unfortunately, nothing there unfortunately that supports automatic gateway switching if one fails (or load balancing for that matter). Guess I'll need to wait for 1.3.

          Mantissa

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy