Welcome, Guest. Please login or register.
Did you miss your activation email?
+  pfSense Forum
|-+  pfSense English Support» Traffic Shaping» HOWTO: pfSense 1.2.x Traffic Shaping with Squid Transparent Proxy
Username:
Password:
 
 

Pages: 1 [2]   Go Down
  Print  
Author Topic: HOWTO: pfSense 1.2.x Traffic Shaping with Squid Transparent Proxy  (Read 20919 times)
0 Members and 1 Guest are viewing this topic.
dondos
Newbie
*
Offline Offline

Posts: 20



View Profile
« Reply #15 on: December 02, 2009, 04:57:06 pm »

I also tried this hack. I changed every instance of 127.0.0.1 with 192.168.10.1 (my LAN ip address):

Code:
Search "192.168.10.1" (9 hits in 1 files)
Line 603: $conf .= "http_port 192.168.10.1:80 transparent\n";
Line 766: acl localhost src 192.168.10.1/255.255.255.255
Line 1285: $rules .= "rdr on $iface proto tcp from any to !($iface) port 80 -> 192.168.10.1 port 80\n";
Line 1289: $rules .= "rdr on $PPPOE_ALIAS proto tcp from any to !192.168.10.1 port 80 -> 192.168.10.1 port 80\n";
Line 1289: $rules .= "rdr on $PPPOE_ALIAS proto tcp from any to !192.168.10.1 port 80 -> 192.168.10.1 port 80\n";
Line 1293: $rules .= "rdr on $PPTP_ALIAS proto tcp from any to !192.168.10.1 port 80 -> 192.168.10.1 port 80\n";
Line 1293: $rules .= "rdr on $PPTP_ALIAS proto tcp from any to !192.168.10.1 port 80 -> 192.168.10.1 port 80\n";
Line 1306: $rules .= "pass in quick on $PPPOE_ALIAS proto tcp from any to !192.168.10.1 port $port flags S/SA keep state\n";
Line 1309: $rules .= "pass in quick on $PPTP_ALIAS proto tcp from any to !192.168.10.1 port $port flags S/SA keep state\n";

but I ended up with a state table table full with almost 60.000 connections:

I think I´ve done something wrong...
« Last Edit: December 02, 2009, 05:01:34 pm by dondos » Logged
cylent
Jr. Member
**
Offline Offline

Posts: 41


View Profile
« Reply #16 on: December 22, 2009, 08:30:45 am »

i have 1.2.3-release and this REALLY slowed my net and webgui management to a crawl!!!

either it doesnt work with 1.2.3 or i did something wrong.

pls advise
Logged
rdlugosz
Newbie
*
Offline Offline

Posts: 1


View Profile
« Reply #17 on: February 01, 2010, 08:01:41 pm »

So I'm using 1.2.3 with the transparent proxy enabled (and verified on b/c it's showing hits in the lightsquid logs).  I *am NOT* seeing the behavior described in the first post.  On my system, I see P2P traffic in the P2P queues and web traffic seems to go into the qOthersDownH queue. 

Also curious is that I do not see *any* packets in my queues related to my VoIP adapter now that I've re-run the wizard and gave it the IP Address of the adapter.  One of the first rules is that anything on that IP routes to the qVOIP queues... I saw some traffic being registered there when it was just set up to route the SIP port packets to those queues, but for whatever reason it doesn't show up when the whole IP is sent there.

Anyway, my main point in posting is to say that I'm NOT seeing the behavior of web traffic going to the default queues due to the proxy.  It's possible that I've got something configured incorrectly, but it appears that the shaper is doing its job.  Any thoughts?
Logged
moonspud
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #18 on: May 04, 2010, 01:39:25 am »

Does this work with penalty ip shapping?
Logged
udhaya
Newbie
*
Offline Offline

Posts: 1


View Profile
« Reply #19 on: May 14, 2010, 06:19:16 am »

Hello iBeej,

I tried as you said, I am able to penalize the download and not the upload. Is there anything I need to follow. Please suggest me with more ideas. I am new to this.

Ver: 1.2.3-Release
Logged
Pages: 1 [2]   Go Up
  Print  
 
Jump to:  

 

Page created in 0.179 seconds with 20 queries.