[SOLVED] Nginx

[beckzg]

Dear Developers,

  I would like to know if nginx will be supported in your new system? We are using nginx as reverse (http, https) proxy for multiple backend servers and sites:

fw -> host1 -> site1
fw -> host1 -> site2
fw -> host1 -> site3
fw -> host2 -> site1
fw -> host2 -> site2
fw -> host2 -> site3

In pfsense we didn't found a  working solution for this.

Regards,

[AdSchellevis]

Hi,

We are planning to implement a proxyserver for the 15.7 release, which will probably be implemented with squid.
You might be able to use reverse proxy features from squid, but I don't know for sure if that totally fits your needs.


Regards,

Ad

[bycn82]

great, i prefer squid.
but which version are you going to use?
squid2.7 and the latest?

before you decide which to use, please do a performance test, and share the performance test result, sure it will help lots of people.

[AdSchellevis]

Hi,

We try to keep as close to the ports collection as possible, the active version in there is 3.4.9, so we will probably use that one.
If it turns out to be problematic in terms of performance we might use an older version, but measuring the performance in a default scenario is certainly a good idea.

Cheers,

Ad

[cdburgess75]

I know this post it little dated but I did see the squid proxy in the 15.7x release. I wanted to try reverse proxy as well.  I just wanted to ask what file to edit?

is it /usr/local/etc/squid/squid.conf?  Or is there a better place to try this?

[franco]

Hi there,

you can enhance the GUI by editing this XML file (no real programming necessary):

https://github.com/opnsense/core/blob/master/src/opnsense/mvc/app/models/OPNsense/Proxy/Proxy.xml

Then, you need to modify the template to inject your settings into the squid config so that it is automatically generated and your settings don't get lost:

https://github.com/opnsense/core/blob/master/src/opnsense/service/templates/OPNsense/Proxy/squid.conf

When you save your settings in your GUI and reload the proxy your template changes will automatically injected. You may as well start with a hardcoded setting in the template before you build the GUI parts.

Please do let us know of your progress or stories while working with the system. 


Cheers,
Franco