Topics

1

15.7 Legacy Series / [SOLVED] Squid cache seems to not be used

« on: December 16, 2015, 03:56:59 pm »

Hello!

I have the latest OPNSense version to date (OPNsense 15.7.22-amd64) and wanted to enable Proxy Server to cache web stuff and make it quicker. However it seems to not be working:

This is the Cache tab log

Code: [Select]

2015/12/16 15:50:04| Error sending to ICMPv6 packet to [2a00:1450:400c:c02::79]. ERR: (65) No route to host
2015/12/16 15:49:59 kid1| ipcacheParse: No Address records in response to 'e.monetate.net'
2015/12/16 15:49:58 kid1| ipcacheParse: No Address records in response to 'nexus.ensighten.com'
2015/12/16 15:48:13| Error sending to ICMPv6 packet to [2001:41c8:1000:21::21:35]. ERR: (65) No route to host
2015/12/16 15:48:13| Error sending to ICMPv6 packet to [2001:a78:5:1:216:35ff:fe7f:6ceb]. ERR: (65) No route to host
2015/12/16 15:47:53| Error sending to ICMPv6 packet to [2a00:1450:4004:800::200e]. ERR: (65) No route to host
This is the Access log. I have never seen a TCP HIT. I wish it could be a way to see "live" logs or maybe a website to have a better overview of the data (apart from the tail -f /var/squid/logs command)

Code: [Select]

1450277683.236 265 10.0.1.59 TCP_MISS/200 377 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277657.965 998 10.0.1.59 TCP_MISS_ABORTED/000 0 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 -
1450277631.960 246 10.0.1.59 TCP_MISS/200 376 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277606.705 233 10.0.1.59 TCP_MISS/200 376 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277581.466 241 10.0.1.59 TCP_MISS/200 375 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277576.692 947 10.0.1.14 TCP_MISS/200 204884 GET http://is2.mzstatic.com/image/thumb/Music/v4/8c/37/00/8c3700ab-3874-be8c-3cef-334a05486161/source/800x800bb.jpg - ORIGINAL_DST/77.67.29.203 image/jpeg
1450277556.214 245 10.0.1.59 TCP_MISS/200 376 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277536.453 1383 10.0.1.14 TCP_MISS/200 372830 GET http://a4.mzstatic.com/us/r30/Music/v4/8c/37/00/8c3700ab-3874-be8c-3cef-334a05486161/cover1400x1400.jpeg - ORIGINAL_DST/77.67.29.194 image/jpeg
1450277534.908 15987 10.0.1.14 TCP_MISS/200 7241694 GET http://aod.itunes.apple.com/apple-assets-us-std-000001/Music/v4/be/61/df/be61dfb6-375b-0b87-9c64-c70198df7f96/mzaf_7113937544685891047.m4a? - ORIGINAL_DST/17.253.39.207 audio/x-m4a
1450277530.964 242 10.0.1.59 TCP_MISS/200 376 POST http://bridge.meethue.com/queue/getmessage? - ORIGINAL_DST/64.233.166.121 text/plain
1450277518.424 161 10.0.1.59 TCP_MISS/200 941 POST http://dcp.cpp.philips.com/DcpRequestHandler/index.ashx - ORIGINAL_DST/5.79.62.93 application/CB-Encrypted
This is the Store log

Code: [Select]

File /var/log/squid/store.log doesn't exist.

I'm running OPNSense on a VM (VMWare ESXi 6). I haven't make any special configurations, only enabled Proxy server). I would also love to be able to cache SSL connections without the "middle in the man" technique

Thanks!

2

15.7 Legacy Series / Running OPNSense on a Mac Mini through VirtualBox

« on: December 14, 2015, 07:43:35 pm »

Hello!

First of all, let me thank you for this great piece of software! I'm in the process of building my own router and firewall but I'm finding some issues.

I have a Mac mini (late 2012) (specs http://d.pr/i/NbTE/t30pCACe). The HD is not SSD, but I get around 90mb read/write so it should be fine.

I've setup Virtualbox with 8GB of RAM and all available cores. I have a thunderbolt to eth adapter in order to have 2 physical ethernets. You can see an screenshot from Virtualbox setup here http://d.pr/i/18zxd/3fHDY4m8

I get OPNSense to work perfectly, but my problem is that I don't get all my available internet speed (200mbps/20mbps)... I only get about 125mbps/20mbps. Also the CPU goes at 100%

It's very weird because I also have a NAS, and it happens the same there. I thought it will be fine on the Mac Mini due to the great specs, but it's more of the same. Here's an screenshot of PFSense (I had that one running, but as you can see I tried OPNSense and IPFire with same results) http://d.pr/i/Yp9Z/4R14Rq9l

I have also tried to use the Virtual Ethernet adapters on VirtualBox (virtio) but same results. I have no idea what else to try, I don't understand why it uses so much resources and I don't even get my  full internet speed.

Thanks for any help!