pfSense Support Subscription

Poll

Which of the following topics would you most like to see covered in our next hang out?

OpenVPN
6 (13.3%)
IPsec - expanded from February, including transport mode, remote access
1 (2.2%)
Squid and Squidguard
18 (40%)
Multi-WAN
9 (20%)
High Availability (CARP, pfsync, config sync)
8 (17.8%)
Desktop virtualization environments for testing
3 (6.7%)

Total Members Voted: 44

Voting closed: March 07, 2014, 03:58:16 pm

Author Topic: Vote for topic for March 2014 Hang Out  (Read 3788 times)

0 Members and 1 Guest are viewing this topic.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11228
  • Karma: +894/-7
    • View Profile
    • Chris Buechler
Vote for topic for March 2014 Hang Out
« on: February 21, 2014, 03:58:16 pm »
We're putting a poll up to allow the community to vote on next month's hang out topic. Most are self-explanatory.

To expand on "Desktop virtualization environments for testing" (there's probably a better summary for that I'm not thinking of offhand), people have asked me a number of times in the past about specifics in the test, demo and development virtualization environments that we use. The demo networks presented in our hang outs all run on a single machine with VMware Workstation. I have a variety of test setups in place, with networking that can get pretty complicated. This would go over how to setup such testing environments, and how desktop virtualization software's networking in general functions. With a focus on VMware Workstation since it's the most capable option, but done in general terms that cover other desktop virtualization software as well.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11228
  • Karma: +894/-7
    • View Profile
    • Chris Buechler
Re: Vote for topic for March 2014 Hang Out
« Reply #1 on: February 22, 2014, 06:48:28 pm »
if you want to suggest options not on the list, please reply here.

Offline nesense

  • Jr. Member
  • **
  • Posts: 79
  • Karma: +0/-0
  • n e sense?
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #2 on: February 22, 2014, 07:21:29 pm »
squid3-dev with ssl filtering/caching would be a glorious topic  ;D

Offline rubic

  • Hero Member
  • *****
  • Posts: 714
  • Karma: +116/-0
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #3 on: February 22, 2014, 07:48:38 pm »
Squid multi wan setup. The only reason to stay on 2.0.3 is that squid multi wan does not work in 2.1
Voted for squid hoping this question will be covered.

Offline syro

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #4 on: February 23, 2014, 07:23:34 am »
I'd like to talk about the chance of integrating some sort of master/slave replication allowing for replicating a set of aliases across more than just two nodes, saying outside a cluster. This would drastically reduce the overhead of importing/exporting them by hand with each cluster. I also see the issues in terms of sanity checks which would have to be implemented in order for this to work. But I find it interesting to know if ever I'm the only one having this "issue".

Offline KOM

  • Hero Member
  • *****
  • Posts: 5497
  • Karma: +680/-23
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #5 on: February 24, 2014, 08:16:43 am »
Traffic Shaping.  It's a cryptic technology and even the new 2.1 manual fails to properly explain it.

HFSC configurations from a simple LAN with VoIP to more complex scenarios that include VoIP, multi-WAN/LAN, multiple protocol queuing, multiple user control queuing, front-facing server allocation, OpenVPN shaping...

This is important enough that it could easily be split into two sessions, an intro with simple examples such as Voip alone, and then an advanced demo with more complex examples.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21486
  • Karma: +1456/-26
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #6 on: February 24, 2014, 02:25:24 pm »
FYI- The "Squid and SquidGuard" choice in the poll will be for the stable/non-dev versions of the packages, so "squid 2.7.9 pkg v.4.3.3" and "squidGuard 1.4_4 pkg v.1.9.5". The squid 3.x variants (especially the -dev) are not stable to a point where we would recommend using them in production anywhere outside a lab/test environment in most cases. It's unlikely we'll be supporting/documenting them officially any time soon. I also plan to cover Lightsquid along with squid/squidGuard, and will not cover SARG. I've seen SARG cause too many problems for customers to recommend it yet either.

Once the Squid 3.x packages mature/stabilize, they may be considered for a future follow-up talk.
« Last Edit: February 24, 2014, 02:33:25 pm by jimp »
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline yottabit

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: Vote for topic for March 2014 Hang Out
« Reply #7 on: February 25, 2014, 03:10:48 pm »
Not in the list, so I vote for an in-depth discussion on Shaping.

More specifically I'd like to know how much better FreeBSD shaping is than Linux shaping (as used in SmoothWall Express). I've had considerably better performance with VoIP on saturated uplinks when using pfSense/FreeBSD shaping than with SWE/Linux.

I would also like to know why the default wizard resulted in queue drops for no apparent reason, until I adjusted the queue limit to 1000. I'd like to know what the side-effects of this are, and if there are any formulas (averaging or not) that could be used to properly determine this number.

« Last Edit: February 26, 2014, 10:56:42 am by yottabit »

Offline cmb

  • Hero Member
  • *****
  • Posts: 11228
  • Karma: +894/-7
    • View Profile
    • Chris Buechler
Re: Vote for topic for March 2014 Hang Out
« Reply #8 on: March 21, 2014, 10:03:56 am »
Thanks for the votes everyone, and the suggestions on additional topics. Squid and Squidguard won, and that's what Jim Pingle will be presenting on this afternoon. Join us! https://blog.pfsense.org/?p=1228