Project

General

Profile

Bug #8887

Squid Proxy Interface not assignee to IPv6

Added by DRago_Angel [InV@DER] about 2 years ago. Updated 6 months ago.

Status:
Resolved
Priority:
Normal
Category:
Squid
Target version:
-
Start date:
09/12/2018
Due date:
% Done:

100%

Estimated time:
Affected Version:
All
Affected Architecture:
All

Description

Package Version:
squid www 0.4.43_1

Package Dependencies:
squid-3.5.27_3

cat /etc/version
2.4.3-RELEASE

cat /etc/version.buildtime
Thu May 10 15:02:52 CDT 2018

How to reproduce:
1. Configure LAN interface to have IPv4 and IPv6
2. Install and configure Squid Proxy package
3. Go to /usr/local/etc/squid/squid.conf and there not exist:
4.1. For simple proxy:
http_port [IPv6]:3128
https_port [IPv6]:3129
4.2. If in addition transparent proxy configured:
http_port [::1]:3128
https_port [::1]:3129

Workaround: hard-code in advanced options.

History

#1 Updated by DRago_Angel [InV@DER] about 2 years ago

For fix this issue maybe better not add IP at all if look to documentation: http://www.squid-cache.org/Versions/v3/3.5/cfgman/http_port.html
And simply fix Allowed Subnets generation to rule who allowed to connect, or leave it to user. Ofcource add description how it work and about Firewall rule generation.
Second issue with IPv6 that Realtime Monitor (squid_monitor.php) if you have >=100 Max lines you not have enough space to tabulation so Date timestamp and IPv6 same as User and DestinationIPv6 are written together without any tabulation. Maybe Squid Access Table must have 100% of user screen in browser?

#2 Updated by Viktor Gurov 7 months ago

This fix allows you to select the IP protocol over which Squid will listen for connections:
https://github.com/pfsense/FreeBSD-ports/pull/776

Transparent mode is not supported in IPv6 mode, see:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193568

#3 Updated by Jim Pingle 7 months ago

  • Status changed from New to Pull Request Review

#4 Updated by Renato Botelho 7 months ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged on 2.4.5 and 2.5.0. Thanks!

#5 Updated by Viktor Gurov 6 months ago

Squid IPv6 addresses needs square brackets
Otherwise, you will get:

FATAL: Bungled /usr/local/etc/squid/squid.conf line 4: http_port fc00:1::254:3128

fix:
https://github.com/pfsense/FreeBSD-ports/pull/803

#6 Updated by Jim Pingle 6 months ago

  • Status changed from Feedback to Pull Request Review

#7 Updated by Renato Botelho 6 months ago

  • Status changed from Pull Request Review to Feedback

PR has been merged. Thanks!

#8 Updated by Viktor Gurov 6 months ago

  • Status changed from Feedback to Resolved

tested on 2.4.5 with squid 0.4.44_15
now it works as expected

Also available in: Atom PDF