Sponsored Content
Top Forums Web Development Need help for Configuring Squid-2.6 Post 302270628 by jagnikam on Monday 22nd of December 2008 10:35:05 AM
Old 12-22-2008
Question Need help for Configuring Squid-2.6

Hi,

Previously I was using squid-2.5 accelerated but due to link breaking issue, I have upgraded it to 2.6 but i am unable to configure it with accelerated support. Kindly help me to make it accelerated proxy server.

My 2.6 squid.conf :

##################################################
http_port 192.168.1.1:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
cache_dir ufs /usr/local/squid/cache 200 16 256
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
pid_filename /var/log/squid/squid.pid
debug_options ALL,1
url_rewrite_program /usr/local/bin/squidGuard
auth_param basic program /usr/local/libexec/squid/squid_ldap_auth -v 3 -H "ldap://192.168.1.2/" -D "cn=admin,dc=example,dc=com" -W /usr/local/etc/ldap1.secret -b "ou=proxyusers,dc=example,dc=com"
auth_param basic children 5
auth_param basic realm proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
acl localnetwork proxy_auth REQUIRED src 192.168.1.0/24
http_access allow localnetwork
http_access deny all
http_reply_access allow all
icp_access allow all
visible_hostname proxy.example.com
coredump_dir /usr/local/squid/cache

################################
But using this configuration internet connection working very slow.
################################

Squid version - 2.6
squidGuard - 1.3
OS - Freebsd - 6
pf firewall


I have tried with accel, vhost , cache_peer options but I am unable to properly configure file, so I have started squid without accelerated support. Kindly help me to configure squid with config file examples.

Thank you
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Help Me Squid Server

Hello! I'm trying config Squid Cache Server...Where ? Can me find document about config Squid (Basic)... Thanks you (4 Replies)
Discussion started by: binhnx2000
4 Replies

2. Linux

Problem with SQUID

hi all... i installed Red Hat 9...but i can use a proxy server with service squid... in my job i have a direct internet connection in the linux, but i configurate squid.conf...ports...ip's.... but still not working...with the windows machines.... in the linux server if i put the 127.0.0.0 port... (1 Reply)
Discussion started by: chanfle
1 Replies

3. Shell Programming and Scripting

squid anonymizer

Hello; some sites describe how to anonymize the squid the web browsing by inserting the following cods to “http.c” file that located on “src” directory.(when we install squid manually) but I have installed putty via “yum” command , and the files and directories are not similar the manually... (0 Replies)
Discussion started by: globalvpn
0 Replies

4. UNIX for Dummies Questions & Answers

Squid dns

Hi Guys I have a squid proxy server. I have some settings in the no proxy for exclusions on 700 client machines using firefox. I need to add to this exclusion but instead of changing 700 machines settings, is there anyway you can allow the squid server to handle this. I have gone into the... (1 Reply)
Discussion started by: beardiebeardie
1 Replies

5. UNIX for Dummies Questions & Answers

newbie Help configuring Fedora as a proxy using SQUID

I am an intern at a company which requires me to configure Fedora 8 as a proxy server for the network. I am only supposed to test it and practice configuring it. Now, I installed fedora, and SQUID is running properly on it. Now, about the configuration, I know it has to be done by the file... (1 Reply)
Discussion started by: ELBestion
1 Replies

6. UNIX for Dummies Questions & Answers

Squid Server

Hi everyone, I am very new to linux. Can anybody help me for my following doubts. 1) Why we put 8080 in squid server configuration ? 2) what is secure and insecure ftp ? 3) difference between ftp and http servers ? 4) can we configure all servers (installing packages with yum client)if... (3 Replies)
Discussion started by: kunalpatil09
3 Replies

7. Emergency UNIX and Linux Support

Squid acls

Hi guys, There is a line in squid default configuration: # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports acls are applied from top down, so CONNECT acl will deny access to all non SSL and SSL ports. I mean it never reaches the second access rule. (0 Replies)
Discussion started by: majid.merkava
0 Replies

8. UNIX for Dummies Questions & Answers

Squid Configuration Help

I am trying to configure my squid to block access to certain websites facebook and twitter in this case. After defining my acls and the corresponding http_access lines users are still able to access these websites. I would also like to allow access to the proxy from 12:30 to 14:00 hrs only. I... (4 Replies)
Discussion started by: bryanmuts2000
4 Replies

9. IP Networking

Squid vs iptables = no Squid access.log?

Hello, I have a pretty useless satellite link at home (far from any civilization), so I wanted to set up caching in order to speed things up. My Squid 2.6 runs "3128 transparent" and is set up quite well on a separate machine. I also have my dd-wrt router to move all port 80 traffic through... (0 Replies)
Discussion started by: theWojtek
0 Replies

10. UNIX and Linux Applications

Issues with squid

Hello, I have been trying to setup the following squid configuration http://veloso.org/SquidConfig/SquidConfig.html but every time I get to start squid I get the following error- 2012/05/28 10:31:12| WARNING: redirector #1 (FD 7) exited 2012/05/28 10:31:12| WARNING: redirector #2 (FD 9)... (2 Replies)
Discussion started by: jamie_123
2 Replies
squidclient(1)						      General Commands Manual						    squidclient(1)

NAME
squidclient - A simple HTTP web client tool SYNOPSIS
squidclient [ -aknNrsv ] [ -A string ] [ -g count ] [ -h remote host ] [ -H ' string ' ] [ -i IMS ] [ -I ping interval ] [ -j ' Host header ' ] [ -l local host ] [ -m method ] [ -p port ] [ -P file ] [ -t count ] [ -T timeout ] [ -u user ] [ -U user ] [ -V version ] [ -w pass- word ] [ -W password ] url DESCRIPTION
squidclient is a tool providing a command line interface for retrieving URLs. Designed for testing any HTTP 0.9, 1.0, or 1.1 web server or proxy. This tool can be combined with scripts to perform any basic HTTP operation. Some additional features for access to the squid proxy object cache and management information are provided. OPTIONS
-a Do NOT include Accept: header. -A 'string' Send string as User-Agent: header. To omit the header completely set string to empty (''). -g count Ping mode, perform count iterations (0 to loop until interrupted). -h host Retrieve URL from cache on hostname. Default is localhost -H 'string' Extra headers to send. Use '0 for new lines. -i time If-Modified-Since time (in Epoch seconds). -I interval Ping interval in seconds (default 1 second). -j hosthdr Host header content -k Keep the connection active. Default is to do only one request then close. -l host Specify a local IP address to bind to. Default is none. -m method Request method, default is GET. Squid also supports a non-standard method called PURGE. You can use that to purge a specific URL from the cache. You need to have purge access setup in squid.conf similar to manager access. Here is an example: acl purge method PURGE http_access deny purge !localhost -n Proxy Negotiate(Kerberos) authentication. Use kinit username@DOMAIN first to get initial TGS. -N WWW Negotiate(Kerberos) authentication. Use kinit username@DOMAIN first to get initial TGS. -p port Port number of cache. Default is 3128. -P file Request body. Using the named file as data. -r Force cache to reload URL. -s Silent. Do not print data to stdout. -t count Trace count HTTP relay or proxy hops -T timeout Timeout value (seconds) for read/write operations. -u user Proxy authentication username -U user WWW authentication username -v Verbose. Print outgoing message to stderr. -V version HTTP Version. Use '-' for HTTP/0.9 omitted case -w password Proxy authentication password -W password WWW authentication password AUTHOR
Derived from Harvest. Further developed by by numerous individuals from the internet community. Development is led by Duane Wessels of the National Laboratory for Applied Network Research and funded by the National Science Foundation. COPYRIGHT
Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+). QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org> REPORTING BUGS
See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report. Report bugs or bug fixes using http://bugs.squid-cache.org/ Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org> Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org> SEE ALSO
squid(8), cachemgr.cgi(8) squidclient(1)
All times are GMT -4. The time now is 02:18 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy