https://opennet.dev/openforum/vsluhforumID10/4949.html pf.conf<br>================<br>TcpState ="flags S/SAFR modulate state"<br># HTTP proxy<br>pass in quick on $int_if inet proto tcp from &lt;clients&gt; to !&lt;no_squid&gt; port 80 rdr-to 127.0.0.1 port 3128 <br><br>set timeout { frag 10, tcp.established 12600 }<br>set timeout { tcp.first 30, tcp.closing 2, tcp.closed 2, tcp.finwait 2 }<br>set timeout { udp.first 60, udp.single 60, udp.multiple 60 }<br>set timeout { other.first 30, other.single 30, other.multiple 30 }<br>set timeout { adaptive.start 5000, adaptive.end 10000 }<br><br>pass in quick on $int_if inet proto tcp from &lt;clients&gt; to 127.0.0.1 port 3128 no state <br><br>pass out quick on $ext_if inet proto tcp from ($ext_if) to !($ext_if) port 80 $TcpState queue www_out<br>====================================================================================================<br>При небольшом количестве пользователей(30-50)- все летает.<br>-bash-4.1# netstat -ant &#124; awk '{print $6}' &#124; sort &#124; uniq -c &#124; sort -rn &#124; head<br> 147 ESTABLISHED<br> 76 FIN_WAIT_2<br> 65 TIME_WAIT<br> 27 LAST https://opennet.dev/openforum/vsluhforumID10/4949.html#1 Wed, 12 Oct 2011 08:45:12 GMT Если пропускаю без squid --напрямую, при самой большом количестве users :<br>bash-4.1# netstat -ant &#124; awk '{print $6}' &#124; sort &#124; uniq -c &#124; sort -rn &#124; head<br> 17 LISTEN<br> 12<br> 7 0xd47a15c0<br> 4 Foreign<br> 3 ESTABLISHED<br> 3 0x0<br> 1 FIN_WAIT_1<br> 1 Conn<br> 1 0xd48d27c0<br> 1 0xd4825f80<br>=============================================================<br>Все - идеально.<br>