OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • proxy server new implementation
« previous next »
  • Print
Pages: [1]

Author Topic: proxy server new implementation  (Read 3515 times)

Julien

  • Hero Member
  • *****
  • Posts: 651
  • Karma: 32
    • View Profile
proxy server new implementation
« on: January 29, 2017, 05:24:10 pm »
Hi Guys,
we trying to configure a webproxy server for a new infrastructuur.
I am going to configure a transparant SSL Proxy.
Do you suggest to do so on 17.1 or wait for the final release ? what about the iPhone/iPad users do we have to install the SSL certificate on those devices too ?

thank you for your support
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

fabian

  • Hero Member
  • *****
  • Posts: 2768
  • Karma: 199
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: proxy server new implementation
« Reply #1 on: January 29, 2017, 05:44:23 pm »
There will not be a lot of changes because the final version will be released soon, so you can install 17.1 RC now if you like.

You will need to install the certificate on all devices, which are using the proxy. This also includes mobile devices.
Logged

Julien

  • Hero Member
  • *****
  • Posts: 651
  • Karma: 32
    • View Profile
Re: proxy server new implementation
« Reply #2 on: January 30, 2017, 03:03:39 pm »
Thank you for your support.
Can you please tell me why when i activate the Intru detections the internet speeds become 50% less, from 100MB to 50Mb ?
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13637
  • Karma: 1174
    • View Profile
Re: proxy server new implementation
« Reply #3 on: January 30, 2017, 09:18:56 pm »
That's a complex question:

Hardware / NIC drivers matter (native Netmap drivers perform better for sure), the pattern matching algorithm (Hyperscan may be faster), the number of rules you use.

Generally:

Very often IPS traffic <<< non-IPS traffic. 50% off isn't so bad. ;)


Cheers,
Franco
Logged

Julien

  • Hero Member
  • *****
  • Posts: 651
  • Karma: 32
    • View Profile
Re: proxy server new implementation
« Reply #4 on: February 01, 2017, 09:59:02 pm »
Quote from: franco on January 30, 2017, 09:18:56 pm
That's a complex question:

Hardware / NIC drivers matter (native Netmap drivers perform better for sure), the pattern matching algorithm (Hyperscan may be faster), the number of rules you use.

Generally:

Very often IPS traffic <<< non-IPS traffic. 50% off isn't so bad. ;)


Cheers,
Franco
Thank you Franco for the explaination.
i got the idea now
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • proxy server new implementation
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2