Hello! I recently changed over form PfSense to Nethserver. Great product, but i noticed that it specifically is NOT caching Windows updates due to an “SSL BUMP” ?
SSL bump
If the proxy us enabled in transparent SSL mode, also all traffic destined to port 443 is redirected to Squid (port 3130).
Following sites are always excluded from SSL bump:
Artem: It appears that your white list is for Web content filtering, which would be squidguard? Squid guard would be used for blocking of specifi sites for content filtering.
The “web Proxy” for nethserver would use “squid” for the caching of content? or am i off on that?
@Mike_Harris, I’m not certain that SSL bump disables caching of windows updates.
I cannot test it now, but I’ve done tests when I worked on issue 2981 and I think caching of updates was working.
The refresh pattern is already pre-configured in squid.conf, but I vaguely remember that it may receive some tuning.
Would you like to help us to improve it? Could you send some lines from squid access.log relevant to windows updates?
Of coarse, please see below on the details for SQUID cache for windows and other updates.
The big issue with windows, is the “Refresh pattern”
“The refresh_pattern directive controls the disk cache only indirectly. It helps Squid decide whether or not a given request can be a cache hit or must be treated as a miss. Liberal settings increase your cache hit ratio but also increase the chance that users receive a stale response. Conservative settings, on the other hand, decrease hit
ratios and stale responses.”
Note: IT would be great of Nethserver could add a config window the same way PfSense does for their squid tuning. This way we can change the settings and it not need to be hard coded into a .conf file ?
