OPNsense Forum

English Forums => General Discussion => Topic started by: beckzg on January 06, 2015, 11:38:23 AM

Title: [SOLVED] Nginx
Post by: beckzg on January 06, 2015, 11:38:23 AM
Dear Developers,

  I would like to know if nginx will be supported in your new system? We are using nginx as reverse (http, https) proxy for multiple backend servers and sites:

fw -> host1 -> site1
fw -> host1 -> site2
fw -> host1 -> site3
fw -> host2 -> site1
fw -> host2 -> site2
fw -> host2 -> site3

In pfsense we didn't found a  working solution for this.

Regards,
Title: Re: Nginx
Post by: AdSchellevis on January 07, 2015, 06:55:25 PM
Hi,

We are planning to implement a proxyserver for the 15.7 release, which will probably be implemented with squid.
You might be able to use reverse proxy features from squid, but I don't know for sure if that totally fits your needs.


Regards,

Ad

Title: Re: Nginx
Post by: bycn82 on February 01, 2015, 01:55:48 AM
great, i prefer squid.
but which version are you going to use?
squid2.7 and the latest?

before you decide which to use, please do a performance test, and share the performance test result, sure it will help lots of people.
Title: Re: Nginx
Post by: AdSchellevis on February 02, 2015, 04:31:29 PM
Hi,

We try to keep as close to the ports collection as possible, the active version in there is 3.4.9, so we will probably use that one.
If it turns out to be problematic in terms of performance we might use an older version, but measuring the performance in a default scenario is certainly a good idea.

Cheers,

Ad
Title: Re: Nginx
Post by: cdburgess75 on September 24, 2015, 12:04:45 AM
I know this post it little dated but I did see the squid proxy in the 15.7x release. I wanted to try reverse proxy as well.  I just wanted to ask what file to edit?

is it /usr/local/etc/squid/squid.conf?  Or is there a better place to try this?
Title: Re: Nginx
Post by: franco on September 26, 2015, 12:20:48 PM
Hi there,

you can enhance the GUI by editing this XML file (no real programming necessary):

https://github.com/opnsense/core/blob/master/src/opnsense/mvc/app/models/OPNsense/Proxy/Proxy.xml

Then, you need to modify the template to inject your settings into the squid config so that it is automatically generated and your settings don't get lost:

https://github.com/opnsense/core/blob/master/src/opnsense/service/templates/OPNsense/Proxy/squid.conf

When you save your settings in your GUI and reload the proxy your template changes will automatically injected. You may as well start with a hardcoded setting in the template before you build the GUI parts.

Please do let us know of your progress or stories while working with the system.  :)


Cheers,
Franco