Show Posts
1
Web Proxy Filtering and Caching / Parent Proxy Slower in OpnSense than a standard squid proxy
« on: July 04, 2019, 11:19:46 am »
Hoping someone may be able to help. I currently have a standard squid proxy running on a linux box, which routes all traffic to an upstream proxy out of my control.
This current setup is fine, but requirements have changed and we need a proper setup, and OpnSense was what I have chosen to implement this setup. However, when I enable the proxy and configure the parent proxy the proxy either flat out doesn't work (Connections time out), or they are so exceptionally slow that it takes between 2 and 5 mins for a page to load, often missing assets.
I know the parent proxy works fine, as it currently works and is how I'm posting this, and the existing squid proxy I built before also works fine and is working with the parent proxy, but when I switch this existing squid proxy out for OpnSense things don't work.
I have even tried disabling the parent proxy option in the GUI, and using a custom set of configuration on the box that imports pre-auth to mirror what I currently have, and that's also had no success...
Any thoughts on how this should be done would be appreciated.
This current setup is fine, but requirements have changed and we need a proper setup, and OpnSense was what I have chosen to implement this setup. However, when I enable the proxy and configure the parent proxy the proxy either flat out doesn't work (Connections time out), or they are so exceptionally slow that it takes between 2 and 5 mins for a page to load, often missing assets.
I know the parent proxy works fine, as it currently works and is how I'm posting this, and the existing squid proxy I built before also works fine and is working with the parent proxy, but when I switch this existing squid proxy out for OpnSense things don't work.
I have even tried disabling the parent proxy option in the GUI, and using a custom set of configuration on the box that imports pre-auth to mirror what I currently have, and that's also had no success...
Any thoughts on how this should be done would be appreciated.