Hi,
for personal use I've a Soekris net4801 board with OpenBSD and Squid
as firewall and proxy server.
Squid works in transparent mode on the same Soekris board, pf send to
it http traffic with an rdr rule:
rdr pass inet proto tcp from $prv_ad to any port 80 \
-> 127.0.0.1 port 3128
Without rdr rule (so without Squid), Speedtest reports 3.5Mbps as
download speed, when I enable rdr speed goes down to only 2.6Mbps.
How can I improve my Squid config to reach 3.5Mbps?!
More details:
board: Soekris net4801
os: OpenBSD 4.6
squid: squid-2.7.STABLE6
- squid config: -------------------------------------------------
http_port 127.0.0.1:3128 transparent
visible_hostname proxy.local.domain
cache_mgr root@xxxxxxxxxxxx
acl CONNECT method CONNECT
acl all src 0.0.0.0/0.0.0.0
acl restr src 192.168.100.50 192.168.100.51 \
192.168.100.52 192.168.100.53 192.168.100.54
acl tutto src 192.168.100.0/255.255.255.0
acl localhost src 127.0.0.1
acl filetypes urlpath_regex -i "/etc/squid/extra/filetypes"
acl adservers dstdomain "/etc/squid/extra/adservers"
acl whitelist dstdomain "/etc/squid/extra/whitelist"
acl Skype_UA browser ^skype^
cache deny all
http_access allow whitelist
http_access deny adservers
http_access allow CONNECT localhost Skype_UA
http_access allow tutto !restr
http_access deny restr filetypes
http_access allow restr
http_access deny all
access_log syslog:daemon.info
emulate_httpd_log on
cache_log /dev/null
cache_store_log none
----------------------------------------------------------------------------
Let me know if futher information are required.
Thank you for any tips,
-f
