HTTP Caching Proxy
# pkg install squidinstalls 7.7 from latest; from quarterly (2026Q4) 7.7# cd /usr/ports/www/squid && make install clean# make -C /usr/ports/www/squid config # change options first
squid, group squido You can find the configuration files for this package in the
directory /usr/local/etc/squid.
o The default cache directory is /var/squid/cache/.
The default log directory is /var/log/squid/.
Note:
You must initialize new cache directories before you can start
squid. Do this by running "squid -z" as 'root' or 'squid'.
If your cache directories are already initialized (e.g. after an
upgrade of squid) you do not need to initialize them again.
o When using DiskD storage scheme remember to read documentation:
http://wiki.squid-cache.org/Features/DiskDaemon
and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not
work reliably without this. Last recomendations were:
kern.ipc.msgmnb=8192
kern.ipc.msgssz=64
kern.ipc.msgtql=2048
o The pre-translated error pages are no longer included into the port.
If you need them install www/squid-langpack port as well.
o The default configuration will deny everyone but the local host and
local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
4291 for IPv6 access to the proxy service. Edit the "http_access
allow/deny" directives in /usr/local/etc/squid/squid.conf
to suit your needs.
o If AUTH_SQL option is set, please, don't forget to install one of
following perl modules depending on database you like:
databases/p5-DBD-mysql (MySQL)
databases/p5-DBD-mysql4 (MariaDB)
databases/p5-DBD-Pg
databases/p5-DBD-SQLite
To enable Squid, set squid_enable=yes in either
/etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
Please see /usr/local/etc/rc.d/squid for further details.
Note:
If you just updated your Squid installation from an earlier version,
make sure to check your Squid configuration against the 3.4 default
configuration file /usr/local/etc/squid/squid.conf.sample.
/usr/local/etc/squid/squid.conf.documented is a fully annotated
configuration file you can consult for further reference.
Additionally, you should check your configuration by calling
'squid -f /path/to/squid.conf -k parse' before starting Squid.| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.7 | 7.7 | – |
| FreeBSD 15 | 7.7 | 7.7 | – |
| FreeBSD 14 | 7.7 | 7.7 | 7.7 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.7 | 7.7 | – |
| FreeBSD 14 | 7.7 | 7.7 | 7.7 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 7.7.no CVE referenced
no CVE referenced
no CVE referenced
www/squid: Update 7.6 => 7.7 Changelog: https://github.com/squid-cache/squid/blob/SQUID_7_7/ChangeLog PR: 298736 Security: CVE-2026-47729 Security: GHSA-j9pf-q9f6-v44c Sponsored by: UNIS Labs (vvd, commit patch) MFH: 2026Q3c1ddf91668
www/squid: Update 7.4 => 7.6 Changelogs: https://github.com/squid-cache/squid/blob/SQUID_7_6/ChangeLog PR: 296633 Approved by: Pavel Timofeev <timp87@gmail.com> (maintainer) Sponsored by: UNIS Labs Co-authored-by: takefu@airport.fm MFH: 2026Q3b7c3610b95
www/squid: Update 7.3 => 7.4 Changelog: https://github.com/squid-cache/squid/releases/tag/SQUID_7_4 - Rework GSSAPI option a bit to make them more reliable. - Update files/patch-configure to follow upstream changes. - Split post-install - create post-install-*-on. PR: 292732c37b2beb60
www/squid: Fix ARP_ACL option build PR: 292200780e9bf2bd
www/squid: Fix STACKTRACES build option We used to use this wrapper: https://github.com/squid-cache/squid/blob/SQUID_6_14/src/debug/Stream.h#L182 However it was removed for squid 7 in: https://github.com/squid-cache/squid/commit/016c612a77ac4f880ec2ed35e1c8fa9a73c3a2dd Stop using wrapper. PR: 292154de73117caa
www/squid: Fix recognise GSSAPI_BASE on 14.3 PR: 292098ccc35a9759
www/squid: Fix LDAP SASL NETTLE build options LDAP, SASL and NETTLE needs USES pkgconfig:build to be built. Since pkgconfig is required for build with several other options, move it to the general USES. PR: 29207008c4cfb362
www/squid: Update 6.14 => 7.3 Changelogs: https://github.com/squid-cache/squid/releases/tag/SQUID_7_0_1 https://github.com/squid-cache/squid/releases/tag/SQUID_7_0_2 https://github.com/squid-cache/squid/releases/tag/SQUID_7_1 https://github.com/squid-cache/squid/releases/tag/SQUID_7_2 https://github.com/squid-cache/squid/releases/tag/SQUID_7_3 PR: 2906306de950937d
www/squid: Fix typo and use pkgconfig file instead Fixes: 66b818ff501f465fea4179
www/squid: Fix build with MIT KRB5 in 15-PRERELEASE 15-CURRENT has replaced Heimdal 1.5.2 with MIT KRB5 1.21 (soon to be 1.22). Detect MIT KRB5 and adjust accordingly.66b818ff50
www/squid: Update 6.13 => 6.14 Changelog: https://github.com/squid-cache/squid/releases/tag/SQUID_6_14 PR: 2878221830a198bd
www/squid: Update 6.12 => 6.13 Changelog: https://github.com/squid-cache/squid/releases/tag/SQUID_6_13 - Move MASTER_SITES to github - upstream stopped publishing archives anywhere except github. - Improve local patches for build NIS support. - Rename patch-src-cf.data.pre to patch-src_cf.data.pre and refresh. PR: 285493 Approved by: Pavel Timofeev <timp87@gmail.com> (maintainer) Co-authored-by: Pavel Timofeev <timp87@gmail.com> MFH: 2025Q2941306d39f
www/squid: Fix SIGSEGV during run rc script Any kind of "-k" usage is not working now - comment out all "-k" invokations. Upstream bugreport: https://bugs.squid-cache.org/show_bug.cgi?id=5390 PR: 284312 MFH: 2025Q25cd00d3948
*/*: Update ports so they use SAMBA_*_PORT variables in LIB_DEPENDS * Update ports that work with Samba and depend on either of talloc, tdb and tevent so they use SAMBA_*_PORT variables in LIB_DEPENDS. * Bump PORTREVISION. * While here, update WINBIND_CONFIGURE_ON in net/freeradius3/Makefile so it uses SAMBA_INCLUDEDIR and SAMBA_LIBDIR. Reviewed by: 0mp, kiwi Differential Revision: https://reviews.freebsd.org/D4885973895aa5f1
www/squid: fix build with TDB enabled PR: 284532b357fc2787
www/squid: Removing accidentally added default option AUTH_LDAP PR: 283669 Reported by: yasu (via email) Fixes: 9fae06866ad7 (Improve port: apply portclippy and portfmt, fix silent grab security/nettle)232af3da18
www/squid: Improve port: apply portclippy and portfmt, fix silent grab security/nettle Upstream bug report about silent grab security/nettle: https://github.com/squid-cache/squid/pull/937#issuecomment-2564333146 PR: 2836699fae06866a
www/squid: Update 6.10 → 6.12 Changelogs: https://github.com/squid-cache/squid/blob/SQUID_6_12/ChangeLog PR: 2832077650f6929c
www/squid: Update to 6.10 PR: 279885 Approved by: Pavel Timofeev <timp87@gmail.com> (maintainer, implicit)0daa69350a
www/squid: update to 6.9 Changelog: https://www.squid-cache.org/Versions/v6/squid-6.9-RELEASENOTES.html PR: 278291 Approved by: arrowd (mentor, implicit)eee2e16313
databases/p5-DBD-mysql: Fix for MariaDB users Add a new variable DBD_MYSQL, use that in *_DEPENDS and add mysql to USES where required. DBD_MYSQL will automatically set the correct DBD dependency. In cd16748194e2 databases/p5-DBD-mysql was updated to 5.x, in 5.x the support for MariaDB was removed and only MySQL >= 8.0 is supported. In the 4.x releases MariaDB is still supported, according to upstream 4.x will still be supported for a while [1], so use that for now when we detect that MYSQL_FLAVOUR is set to mariadb. databases/p5-DBD-mysql4 was added in d95f49cb3b54. DBD:MariaDB would be another alternative, but migrating to it might need more analysis than just staying with the 4.x releases of p5-DBD-mysql. This thread on the amavis-users mailing list has a very good summary [2] from the author of DBD:MariaDB. This includes ideas and suggestions from vvd and mat. Thanks! [1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277889#c17 [2] https://lists.amavis.org/pipermail/amavis-users/2024-March/006823.html PR: 275100, 277889 Reviewed by: vvd, mat Fixes: cd16748194e2 Differential Revision: https://reviews.freebsd.org/D4466292a030dffd
www/squid: update to 6.8 remove patch no longer needed add patch to remove ifdef duplicate PR: 277672 Approved by: maintainer, bapt (mentor) Differential Revision: https://reviews.freebsd.org/D44431df24358637
www/squid: Update to 6.7 Release notes: https://www.squid-cache.org/Versions/v6/squid-6.7-RELEASENOTES.html PR: 277195b345050428
www/squid: Moved manpages to share/man
Approved by: portmgr (blanket)
Sponsored by: Rubicon Communications, LLC ("Netgate")651c44ca49www/squid: update to 6.6 ChangeLog: http://www.squid-cache.org/Versions/v6/squid-6.6-RELEASENOTES.html * TLS ServerHello * Log TLS Communication Secrets * Ban ACL key Changes in ACLs * Block to-local Traffic * RFC 9211: HTTP Cache-Status support * RFC 9111: Stop treating Warning specially * ext_kerberos_ldap_group_acl: Support -b with -D * Remove Gopher Protocol Support * Remove Outdated Tools PR: 275639 Reported by: timp87@gmail.com (maintainer)da4620c265
www/squid: update to 6.5 - dumps core after updating from 6.3 to 6.4 Fixed bug in 6.4 after fix CVE. PR: 274825 Approved by: arrowd (mentor) MFH: 2023Q4c37e92a065
www/squid: Update to 6.4 Changelog: https://github.com/squid-cache/squid/blob/7254f20cbc449119ae39bfeeced965f2c80bad75/ChangeLog Also remove a dead mirror. PR: 274646 Approved by: tcberner (mentor) Differential Revision: https://reviews.freebsd.org/D4232455cdc95ba5
www/squid: update to 6.3 Error message translation files are now part of www/squid-langpack. Changelog: http://www.squid-cache.org/Versions/v6/squid-6.3-RELEASENOTES.html PR: 2725245313460714
www/squid: update to 5.9 Changes: https://github.com/squid-cache/squid/blob/4a7431df0fff6e55ed1b544be6f1ed08d6580aae/ChangeLog#L113-L117 PR: 271725 Approved by: Pavel Timofeev (maintainer)a142061a66
www/squid: update to 5.8 Changelog: https://github.com/squid-cache/squid/blob/491933673f2492ffc7b2238ea0d5ac8308dd3160/ChangeLog#L113-L121 PR: 2699994a29b00051
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D382336e1233be22www/squid: Update to 5.7 ReleaseNotes: http://www.squid-cache.org/Versions/v5/squid-5.7-RELEASENOTES.html PR: 266625 Approved by: maintainer MFH: 2022Q4 Security: f9ada0b5-3d80-11ed-9330-080027f5fec941c0968d55
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
www/squid: Update to 5.6 ChangeLog: https://github.com/squid-cache/squid/blob/master/ChangeLog PR: 264505d2153894e7
www/squid: update to 5.5 Changes: https://github.com/squid-cache/squid/commits/v5 PR: 2634770e51d9fb33
www/squid: Update to 5.4.1 Changelog: https://github.com/squid-cache/squid/commits/v5 PR: 261913e415dda800
www/squid: update to 5.3: New port: Google Chat plugin for libpurple Changelog: http://www.squid-cache.org/Versions/v5/squid-5.3-RELEASENOTES.html PR: 260927d792ff1863
www/{squid,squid-devel}: Remove PCRE option
This option was added in 2017 and worked as is expected at the
time. But it doesn't work any more. So remove it from squid ports.
PR: 243291
Reported by: OlivierW
Approved by: maintainer timeout (about modified version)d6c9352b1ewww/squid: Fix build on current with _WITH_CPU_SET_T MFH after: 1 week9be82b2f41
*/*: Remove redundant '-*' from CONFLICTS definitions The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Approved by: portmgr (blanket)04b9da4140
www/squid: update to 4.15 - Use DISTVERSION instead of PORTVERSION ChangeLog: https://github.com/squid-cache/squid/pull/818/files#diff-91c5b46dc84a94604a4e4d0caed9bf85590a2eddbb12d2e8dc80badf324a9dfbR1-R16 PR: 256358 Approved by: dbaio, garga (mentors, implicit)b5c8df5328
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
www/squid: update to 4.14 Changes: https://github.com/squid-cache/squid/commits/v4 PR: 253378 Submitted by: timp87 AT gmail DOT com (maintainer)8066c62d45
www/squid: update 4.12 -> 4.13 - https://lists.freebsd.org/pipermail/freebsd-ports/2020-August/119290.html mentions security issues, but no CVEs PR: 248856 Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer) MFH: 2020Q3 Relnotes: http://www.squid-cache.org/Versions/v4/changesets/ Security: probably8f84884c2c
www/squid: Update to 4.12 among other changes - Update to 4.12 - Remove upstreamed patches - Enhance rc script (thanks to Walter von Entferndt for ideas!): -- create piddir if missing (/var/run may be a tmpfs) -- don't wait endlessly if squid can't create a pidfile -- define squid_group - address GREASEd (thanks to Joshua Kinard and Juraj Lutter!) PR: 247397 Submitted by: Juraj Lutter <juraj@lutter.sk> Reworked by: maintainer Approved by: maintainer MFH: 2020Q3 (bug-fix release) Sponsored by: Rubicon Communications, LLC (Netgate)d2f06056cb
www/squid: add patch to fix kerberos_ldap_group helper, fix pinger - add patch to fix kerberos_ldap_group helper work with heimdal - regenerate two patches to follow upstreamed versions - fix pinger permissions PR: 245861, 246410 Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)1a2924f406
Bump PORTREVISION for security/nettle shlib change7f5cbfeed4