Jump to content

2 Questions in 1 about PFSense

Z3R0C00L
Go to solution Solved by JamesDwho,

Yes there is, squid3 expands on the regular squid functionality and allows you to create a reverse proxy and do more advanced filtering of HTTPS traffic. I would recommend uninstalling all the squid packages you have installed and start fresh first with the regular squid 2.7.x package, once that's working then you should be able to setup some of the more advanced dynamic caching with squid3.

Greetings to all,

 

I have a PFSense router with the following specs:
- PFSense 2.1.5

- Intel Core 2 Quad Q6600 2.4 GHz
- 8 GB DDR2 800MHz
- 50 GB OCZ Agility 2 (SATA 3Gbps)
- 2 GBe PCIe Realtek + 1 GB Realtek onboard
- Motherboard .... old Acer crap which is still working

 

Internet connection: 60 Mbps download / 10 Mbps upload going through VPN (using OpenVPN)

Note that i'm using IPTV and VoIP, up to 10 device using the internet at the same time

 

 

1st question: I would like to know if i switch my NIC's for intel based one instead. Would i get any benefits like lower ping time, lower latency etc ... ? 

 

2nd question: I'm running (well trying to) Squid proxy to cache web content. Unfortunately, so far its not caching anything. I only get TCP_miss 200 regardless how many computers are accessing the same website. Any Idea what i'm doing wrong ?

 

Attached are screenshots of my config. 

 

Thanks for all the help you can provide!
 

post-122774-0-44189500-1417534113_thumb.

post-122774-0-25942700-1417534114_thumb.

post-122774-0-74761800-1417534114_thumb.

post-122774-0-19640800-1417534115_thumb.

post-122774-0-82223900-1417534115_thumb.

post-122774-0-04535400-1417534116_thumb.

Main: Intel i7-4770K, MSI Z87 MPower, 2x 4GB G.Skills 1866MHz CL9, 2x Gigabyte R9-290X, Fractal Design XL R2, 2x Samsung EVO 250GB Raid0 and 2x 1TB Seagate Raid0, Top power 1000W 80+ Bronze, Asus PCE-AC68

Server: AMD FX-8350, MSI 970a-G46, 2x 4GB Mushkin 1866Mhz CL9, MSI 8600GT, Fractal Design Define R4, Samsung EVO 250GB and 6X 2TB Seagate RAID 10, EVGA 850W Supernova G2 80+Gold, 2x Intel GBe NIC
Router: Pfsense 2.2, Intel Core 2 Quad Q6600, Acer crap motherboard, 4x 2GB Samsung 800Mhz CL4, Fractal Design Node 604, OCZ Agility 2 50GB, Thermaltake 400W 80+, 2x Intel GBe NIC

Link to comment
Share on other sites

Link to post
Share on other sites

Answer to the first question is no. Gigabit interfaces should be just fine for internal as long as you are using all gigabit on the lan any latency changes would not be that dramatic to justify changing your nics. Answer for the second question. Let me get back to you on that one. Ill try to replicate this on my pfsense box and see if I can get it to work.

Corsair C70 | Gigabyte Widnforce R9 280x | AMD FX8320 3.5ghz | Corsair 750m | Gigabyte 990FXA-ud3 | Mushkin 120gb SSD | Seagate Barracuda 1tb | Mushkin 16gb ddr3 1333mhz Ram

Link to comment
Share on other sites

Link to post
Share on other sites

Generally speaking intel NIC's tend to perform a little better and tend to have lower CPU usage overhead, but for your needs Gigabit Realtek NIC's should be perfectly fine. In an enterprise scenario it might be a different story. As for the proxy Cache it seems that you have only installed the squid3 package and not just the regular squid package. You need the regular Squid package enable a transparent proxy, with a transparent proxy the network traffic from the devices on your network will automatically be passed through the proxy server rather than needing to configure specific proxy address for every device. All of your other settings for Cache Management and memory usage look fine.

i7 930 @ 4.2Ghz | Gigabyte X58A-UD7 | Seagate ST2000DX001 SSHD 2TB | WD5000AAKX 500GB | Samsung SH-B083A Bluray Drive | Gigabyte GTX 670 2GB GV-N670OC-2GD | Corsair 12GB 1600Mhz CMZ12GX3M3A1600C9 | Corsair H50 in Push Pull | SeaSonic X750 | CM 690 II Advanced | Windows 7 Ultimate x64 | HP 2159M 1080p | Asus ProArt PA238Q 23" 1080p IPS Monitor | Asus VS239H IPS 1080p (Portrait) | Razer BlackWidow Expert MX Blue (2011) | Razer Lachesis 5600

 

Link to comment
Share on other sites

Link to post
Share on other sites

Is there a difference in between Squid3 and Squid except the release number (2.7.9 vs 3.1.20) ... as I thought it would technically do the same.

I also tried in transparent mode but unfortunately for me it didn't change anything. It does seems to cache something as /var/squid/cache is getting bigger and that more ram is being used. 
Deleting the local computer cache / temp internet files isn't triggering any hits.

 

Any other suggestions ?

Main: Intel i7-4770K, MSI Z87 MPower, 2x 4GB G.Skills 1866MHz CL9, 2x Gigabyte R9-290X, Fractal Design XL R2, 2x Samsung EVO 250GB Raid0 and 2x 1TB Seagate Raid0, Top power 1000W 80+ Bronze, Asus PCE-AC68

Server: AMD FX-8350, MSI 970a-G46, 2x 4GB Mushkin 1866Mhz CL9, MSI 8600GT, Fractal Design Define R4, Samsung EVO 250GB and 6X 2TB Seagate RAID 10, EVGA 850W Supernova G2 80+Gold, 2x Intel GBe NIC
Router: Pfsense 2.2, Intel Core 2 Quad Q6600, Acer crap motherboard, 4x 2GB Samsung 800Mhz CL4, Fractal Design Node 604, OCZ Agility 2 50GB, Thermaltake 400W 80+, 2x Intel GBe NIC

Link to comment
Share on other sites

Link to post
Share on other sites

Yes there is, squid3 expands on the regular squid functionality and allows you to create a reverse proxy and do more advanced filtering of HTTPS traffic. I would recommend uninstalling all the squid packages you have installed and start fresh first with the regular squid 2.7.x package, once that's working then you should be able to setup some of the more advanced dynamic caching with squid3.

i7 930 @ 4.2Ghz | Gigabyte X58A-UD7 | Seagate ST2000DX001 SSHD 2TB | WD5000AAKX 500GB | Samsung SH-B083A Bluray Drive | Gigabyte GTX 670 2GB GV-N670OC-2GD | Corsair 12GB 1600Mhz CMZ12GX3M3A1600C9 | Corsair H50 in Push Pull | SeaSonic X750 | CM 690 II Advanced | Windows 7 Ultimate x64 | HP 2159M 1080p | Asus ProArt PA238Q 23" 1080p IPS Monitor | Asus VS239H IPS 1080p (Portrait) | Razer BlackWidow Expert MX Blue (2011) | Razer Lachesis 5600

 

Link to comment
Share on other sites

Link to post
Share on other sites

Alright, so i switched back to Squid 2.7.9. It didn't cache at first BUT when i turned Disable VIA on it finally started caching. 
I don't see why/how this option made it to work but what ever it works :P

Thanks a lot for all the help.

Main: Intel i7-4770K, MSI Z87 MPower, 2x 4GB G.Skills 1866MHz CL9, 2x Gigabyte R9-290X, Fractal Design XL R2, 2x Samsung EVO 250GB Raid0 and 2x 1TB Seagate Raid0, Top power 1000W 80+ Bronze, Asus PCE-AC68

Server: AMD FX-8350, MSI 970a-G46, 2x 4GB Mushkin 1866Mhz CL9, MSI 8600GT, Fractal Design Define R4, Samsung EVO 250GB and 6X 2TB Seagate RAID 10, EVGA 850W Supernova G2 80+Gold, 2x Intel GBe NIC
Router: Pfsense 2.2, Intel Core 2 Quad Q6600, Acer crap motherboard, 4x 2GB Samsung 800Mhz CL4, Fractal Design Node 604, OCZ Agility 2 50GB, Thermaltake 400W 80+, 2x Intel GBe NIC

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×