centos配置安裝Squid 3.0反向代理的教程_Linux教程
以下安裝及配置均為Sudu所在公司應(yīng)用中使用的腳本，希望高手們能指正我的一些不足。
安裝篇：
本教程應(yīng)用環(huán)境為干凈centos 5.5 ，預(yù)先分好并加載/data分區(qū),并且關(guān)閉selinux及iptables
首先修改文件描述符并設(shè)定臨時(shí)端口范圍，這些設(shè)置重啟后生效
cat >> /etc/security/limits.conf <<DDD
* soft nofile 8192
* hard nofile 20480
DDD
cat >> /etc/sysctl.conf <<DDD
#set temp port range
net.ipv4.ip_local_port_range = 32768 61000
DDD
init 6
確認(rèn)修改是否正確
[root@sudutest ~]# ulimit -n
8192
[root@suduotest ~]# sysctl -n net.ipv4.ip_local_port_range
net.ipv4.ip_local_port_range = 32768 61000
添加squid專(zhuān)用賬戶
groupadd squid
useradd -g squid -s /bin/false -M squid
添加日志目錄、設(shè)置緩存和日志目錄的權(quán)限
mkdir /data/squidlog/
chown -R squid.squid /data
然后上傳或者wget squid3.0軟件tar包，tar zxvf解壓，并且進(jìn)入解壓后的目錄安裝編譯
./configure –prefix=/usr/local/squid3 –enable-async-io=100 –with-pthreads –enable-storeio="aufs,diskd,ufs" –enable-removal-policies="heap,lru" –enable-icmp –enable-delay-pools –enable-useragent-log –enable-referer-log –enable-kill-parent-hack –enable-arp-acl –enable-default-err-language=Simplify_Chinese –enable-err-languages="Simplify_Chinese English" –disable-poll –disable-wccp –disable-wccpv2 –disable-ident-lookups –disable-internal-dns –enable-basic-auth-helpers="NCSA" –enable-stacktrace –with-large-files –disable-mempools –with-filedescriptors=65535 –enable-ssl –enable-x-accelerator-var
make
make install
make install-pinger
至此squid已經(jīng)成功安裝了，然后大家自己所需的/usr/local/squid3/etc/squid.conf 配置文件，我這邊的配置文件將會(huì)在本文末尾貼出來(lái)供大家研究。
寫(xiě)好配置文件后執(zhí)行下面的命令初始化cache目錄
/usr/local/squid3/sbin/squid -z
然后運(yùn)行squid，注：-D參數(shù)用來(lái)跳過(guò)DNS檢測(cè)
/usr/local/squid3/sbin/squid -D
最后設(shè)置squid開(kāi)機(jī)自動(dòng)啟動(dòng)
echo "/usr/local/squid3/sbin/squid -D " >>/etc/rc.local
維護(hù)篇：
以下是squid常用的命令
如果修改過(guò)配置文件，則用下面的命令重讀配置文件（即時(shí)生效）
/usr/local/squid3/sbin/squid -k reconfigure
檢查配置文件配置的語(yǔ)法是否正確
注：只有像這樣的“cache_cf.cc(346) squid.conf:14 unrecognized: 'http1_port'”才是語(yǔ)法錯(cuò)誤，
“WARNING: use of 'reload-into-ims'……”這類(lèi)提示屬于意見(jiàn)建議，可以忽略。
/usr/local/squid3/sbin/squid -k parse
查看squid的日志和進(jìn)程，看squid運(yùn)行是否正常
ps -ef |awk '/^squid/'
cat /data/squidlog/cache.log
/usr/local/squid3/sbin/squid -k check ;echo $?
關(guān)閉squid
發(fā)出關(guān)閉信號(hào)，等會(huì)話結(jié)束后徹底關(guān)閉
/usr/local/squid3/sbin/squid -k shutdown
關(guān)閉squid（更高優(yōu)先級(jí)，直接關(guān)閉squid）
/usr/local/squid3/sbin/squid -k interrupt
關(guān)閉squid（最高優(yōu)先級(jí)，直接殺死squid進(jìn)程）
/usr/local/squid3/sbin/squid -k kill
滾動(dòng)日志文件
/usr/local/squid3/sbin/squid -k rotate
設(shè)置每周二凌晨四點(diǎn)30分自動(dòng)滾動(dòng)日志
echo "30 4 * * 2 root /usr/local/squid3/sbin/squid -k rotate " >>/etc/crontab
目前應(yīng)用中的squid.conf文件，由于日志文件增長(zhǎng)很快，所以直接輸出到/dev/null丟棄掉了
#basic
cache_effective_user squid
cache_effective_group squid
pid_filename /usr/local/squid3/var/logs/squid.pid
visible_hostname squid.678114.com
cache_mgr [email protected]
error_directory /usr/local/squid3/share/errors/Simplify_Chinese
icon_directory /usr/local/squid3/share/icons
mime_table /usr/local/squid3/etc/mime.conf
hosts_file /etc/hosts
acl DEIpadd dstdom_regex [0-9]$
http_access deny DEIpadd
cache_replacement_policy lru
memory_replacement_policy lru
http_port 80 vhost vport
cache_mem 4024 MB
maximum_object_size_in_memory 5120 KB
icp_port 0
#.cache_dir
cache_dir aufs /data/cache 50000 64 128
max_open_disk_fds 0
maximum_object_size 20 MB
#.cache_peer
cache_peer 125.76.225.44 parent 80 0 no-query originserver no-digest name=all
cache_peer_domain all .678114.com
#acl
acl Safe_ports port 80
acl SSL_ports port 443
acl LanSrc src 192.168.100.0/24
acl webdomain dstdomain .678114.com
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow LanSrc
http_access allow webdomain
http_access deny all
#refresh_pattern
refresh_pattern -i /$ 15 90% 600 reload-into-ims
refresh_pattern -i .html$ 15 90% 600 reload-into-ims
refresh_pattern -i .htm$ 15 90% 600 reload-into-ims
refresh_pattern -i .shtml$ 15 90% 600 reload-into-ims
refresh_pattern -i .hml$ 15 90% 600 reload-into-ims
refresh_pattern -i .gif$ 1440 90% 129600 reload-into-ims
refresh_pattern -i .swf$ 1440 90% 129600 reload-into-ims
refresh_pattern -i .jpg$ 1440 90% 129600 reload-into-ims
refresh_pattern -i .png$ 1440 90% 129600 reload-into-ims
refresh_pattern -i .bmp$ 1440 90% 129600 reload-into-ims
refresh_pattern -i .js$ 120 90% 129600 reload-into-ims
refresh_pattern -i .css$ 120 90% 129600 reload-into-ims
refresh_pattern -i .wma$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .zip$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .mp3$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .rar$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .rm$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .flv$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .rar$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .rm$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .avi$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .3gp$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .mp4$ 1440 90% 21600 reload-into-ims
refresh_pattern -i .wmv$ 1440 90% 21600 reload-into-ims
#keepalived
client_persistent_connections off
server_persistent_connections on
#log
emulate_httpd_log on
logformat web1 %{X-Forwarded-For}>h %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
cache_log /data/squidlog/cache.log
cache_access_log /dev/null web1
cache_store_log /dev/null
strip_query_terms off
logfile_rotate 10
#other
forwarded_for on
log_icp_queries off
via off
httpd_suppress_version_string off
ie_refresh off
tcp_recv_bufsize 32 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
cache_swap_low 80
cache_swap_high 90
request_header_max_size 128 KB
quick_abort_min 20 KB
quick_abort_max 20 KB
quick_abort_pct 95
connect_timeout 1 minute
negative_ttl 0 minutes
read_timeout 30 seconds
pconn_timeout 120 seconds
half_closed_clients off
client_lifetime 10 minutes
shutdown_lifetime 5 seconds
hierarchy_stoplist cgi-bin ?
access_log /dev/null squid
- Linux系統(tǒng)下TOP命令使用與分析詳解
- 安裝Linux我們需要改變20件事情
- 使用Linux系統(tǒng)架設(shè)VSFTP服務(wù)器
- Linux系統(tǒng)上架設(shè)POP3服務(wù)器
- Linux中“Networking Disabled”的解決方法(解決Ubuntu等系統(tǒng)無(wú)法上網(wǎng))
- ubuntu系統(tǒng)清理磁盤(pán)教程
- linux下搭建pxe自動(dòng)化安裝環(huán)境
- BIOS不支持導(dǎo)致Linux內(nèi)核耗電增加
- Debian GNU/Linux系統(tǒng)卡片
- Linux操作系統(tǒng)開(kāi)機(jī)自行啟動(dòng)項(xiàng)目詳細(xì)解析
- Linux菜鳥(niǎo)入門(mén)級(jí)命令大全
- Linux操作系統(tǒng)中讀取目錄文件信息的過(guò)程
- 相關(guān)鏈接：
- 教程說(shuō)明：
Linux教程-centos配置安裝Squid 3.0反向代理的教程
。