[pfSense] Squid - Select loop Error. Retry 1

Kemecsei Gábor Thu, 16 Apr 2015 03:29:45 -0700

Hello!

[2.2.2-RELEASE][ad...@proxy2.domain.hu]/root: tail -2354325/var/squid/logs/cache.log | grep 11:45


2015/04/16 11:45:48 kid1| *Select loop Error. Retry 1* <<<< What is this??

When this happens, the squid was stop.  (about 1 minute)

why?

I searched the net but could not find a solution..


My system:
1200 user

Squid 3.4.10_2 pkg 0.2.8<https://github.com/pfsense/pfsense-packages/commits/master/config/34>squidGuard 1.4_7 pkg v.1.9.14<https://github.com/pfsense/pfsense-packages/commits/master/config/squidGuard>

Pfsense *2.2.2-RELEASE 64 bit*
State table size 1% (15213/1430000)
MBUF Usage 24% (6330/26584)
Memory usage 41% of 14300 MB
Intel(R) Xeon(TM) CPU 3.00GHz

Sincerely,
kemecs

2015.04.16. 9:28 keltezéssel, daniel soto írta:

hi.
first of all to thank for the fabulous work that the team pfsense .


My problem is this , after upgrading to version 2.2 from 2.1.5 .
access to captive portal does not work.

My configuration is as follows .

the captive portal runs on a dedicated interface with a virtual ip carp ,
which use as gateway users.

I have seen that the ip virutal carp is not added to ipfw rules that
facilitate access to the login page

this are the ipfw rules that actually i can see

65310 allow ip from any to { 255.255.255.255 or 10.128.0.7 or 10.128.0.7 }
in
65311 allow ip from { 255.255.255.255 or 10.128.0.7 or 10.128.0.7 } to any
out
65312 allow icmp from { 255.255.255.255 or 10.128.0.7 or 10.128.0.7 } to
any out icmptypes 0
65313 allow icmp from any to { 255.255.255.255 or 10.128.0.7 or 10.128.0.7
} in icmptypes 8

the first ip 10.128.0.7 should be 10.128.0.2 wich is the ip virtual carp

10.128.0.2 ---> ip virtual carp

10.128.0.7 ---> phisycal ip interface

I tried to manually put the rules and it works perfectly , but of course,
this process should be automatic.


also I have seen that:



before in version 2.1.5

em3: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0
mtu 1500
         options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
         ether xx:xx:xx:xx:xx:xx
         inet 10.128.0.7 netmask 0xffff0000 broadcast 10.128.0.255
         media: Ethernet autoselect (1000baseT <full-duplex>)
         status: active

lan_vip15: flags=49<UP,LOOPBACK,RUNNING> metric 0 mtu 1500
         inet 10.128.0.2 netmask 0xffff0000
         carp: MASTER vhid 15 advbase 1 advskew 200


now in version 2.2

em3: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0
mtu 1500
         options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
         ether xx:xx:xx:xx:xx:xx
         inet 10.128.0.7 netmask 0xffffff00 broadcast 10.128.0.255
         inet 10.128.0.2 netmask 0xffffff00 broadcast 10.128.0.255 vhid 15
         nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
         media: Ethernet autoselect (1000baseT <full-duplex>)
         status: active
         carp: BACKUP vhid 15 advbase 1 advskew 0


this is a possible cause of this issue.

before in ipfw_context

captive: em3,lan_vip15,


now in ipfw zone list

captive: em3,


any comment would be fantastic.
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

[pfSense] Squid - Select loop Error. Retry 1

Reply via email to