Squid - Revision history

T1t0 at 09:24, 9 August 2023

2023-08-09T09:24:06Z

← Older revision		Revision as of 09:24, 9 August 2023
Line 303:		Line 303:
	[[Category:service]]		[[Category:service]]
	[[Category:network]]		[[Category:network]]
			[[Category:web]]
	[[Category:proxy]]		[[Category:proxy]]
	~~[[Category:web]]~~

T1t0 at 09:22, 9 August 2023

2023-08-09T09:22:56Z

← Older revision		Revision as of 09:22, 9 August 2023
Line 298:		Line 298:
	</pre>		</pre>

			[[Category:unix]]
			[[Category:linux]]
			[[Category:debian]]
			[[Category:service]]
	[[Category:network]]		[[Category:network]]
	[[Category:~~services~~]]		[[Category:proxy]]
	[[Category:web]]		[[Category:web]]

T1t0 at 21:23, 5 July 2022

2022-07-05T21:23:32Z

← Older revision		Revision as of 21:23, 5 July 2022
Line 297:		Line 297:
	tail -F /var/log/squid3/access.log \| grep --line-buffered HIT \| cat -n		tail -F /var/log/squid3/access.log \| grep --line-buffered HIT \| cat -n
	</pre>		</pre>

			[[Category:network]]
			[[Category:services]]
			[[Category:web]]

imported>T1t0 at 03:27, 8 July 2018

2018-07-08T03:27:19Z

← Older revision		Revision as of 03:27, 8 July 2018
Line 1:		Line 1:
	= Squid home server =		= Squid home server =

	~~<br />~~

	== Network ==		== Network ==
Line 18:		Line 16:
	gateway 192.168.0.1		gateway 192.168.0.1
	</pre>		</pre>

	~~<br />~~

	== Squid install and config ==		== Squid install and config ==
Line 124:		Line 120:
	service squid3 start		service squid3 start
	</pre>		</pre>

	~~<br />~~

	== Monitor squid use ==		== Monitor squid use ==
Line 155:		Line 149:
	tail -F /var/log/squid3/access.log \| grep --line-buffered HIT \| cat -n		tail -F /var/log/squid3/access.log \| grep --line-buffered HIT \| cat -n
	</pre>		</pre>

	~~<br />~~

	== Squidguard install and config [optional] ==		== Squidguard install and config [optional] ==
Line 269:		Line 261:
	service squid3 restart		service squid3 restart
	</pre>		</pre>

	~~<br />~~

	== Squid caching TLS/SSL (https://) connections [TODO] ==		== Squid caching TLS/SSL (https://) connections [TODO] ==

imported>T1t0 at 02:00, 2 August 2017

2017-08-02T02:00:01Z

← Older revision		Revision as of 02:00, 2 August 2017
Line 127:		Line 127:
	<br />		<br />

	== ~~Squidclient tool to monitor~~ squid use ==		== Monitor squid use ==

	* usage menu		* usage menu

imported>T1t0 at 01:59, 2 August 2017

2017-08-02T01:59:34Z

@@ Line 123: / Line 123: @@
 EOF
 service squid3 start
 </pre>

imported>T1t0 at 03:35, 24 June 2017

2017-06-24T03:35:26Z

@@ Line 80: / Line 80: @@
 refresh_pattern -i \.(xml|csv|json)$ 1440 40% 40320                                            refresh-ims reload-into-ims
 refresh_pattern -i \.(html|htm)$ 1440 40% 40320                                                refresh-ims reload-into-ims
 # acl lists
@@ Line 239: / Line 237: @@
 EOF
 service squid3 restart
 </pre>

imported>T1t0: /* Squid install and config */

2017-06-24T03:32:43Z

Squid install and config

← Older revision		Revision as of 03:32, 24 June 2017
Line 22:		Line 22:

	== Squid install and config ==		== Squid install and config ==

			* this was done for squid 3.1.20

	<pre>		<pre>
Line 36:		Line 38:
	# listening port		# listening port
	http_port 3128		http_port 3128

			# suppress squid version string info
			httpd_suppress_version_string on

	# coredump		# coredump
Line 41:		Line 46:

	# cache config		# cache config
	cache_dir ~~ufs~~ /var/spool/squid3 8192 16 256		cache_dir aufs /var/spool/squid3 8192 16 256
	cache_mem ~~1024~~ MB		cache_mem 512 MB
	minimum_object_size 0 bytes		minimum_object_size 0 bytes
	maximum_object_size 32 MB		maximum_object_size 32 MB
	maximum_object_size_in_memory ~~512~~ KB		maximum_object_size_in_memory 8192 KB

			# configure the replacement policy
			# from http://muliantophang.blogspot.com.br/2013/09/optimize-squid-caching-hit-rate.html
			# https://aacable.wordpress.com/tag/squid-maximum-cache-hit/
			memory_replacement_policy heap GDSF
			cache_replacement_policy heap GDSF

	# squid logs		# squid logs
			buffered_logs on
	cache_access_log /var/log/squid3/access.log		cache_access_log /var/log/squid3/access.log
	cache_log /var/log/squid3/cache.log		cache_log /var/log/squid3/cache.log
Line 57:		Line 69:
	refresh_pattern -i (/cgi-bin/\|\?) 0 0% 0		refresh_pattern -i (/cgi-bin/\|\?) 0 0% 0
	refresh_pattern . 0 20% 4320		refresh_pattern . 0 20% 4320

			# specific refresh patterns
			# from https://www.linux.com/news/speed-your-internet-access-using-squids-refresh-patterns
			# https://aacable.wordpress.com/tag/squid-maximum-cache-hit/
			refresh_pattern -i \.(iso\|avi\|wav\|mp3\|mp4\|mpeg\|swf\|flv\|x-flv)$ 43200 90% 432000 refresh-ims reload-into-ims ignore-reload ignore-no-store ignore-private
			refresh_pattern -i \.(deb\|rpm\|exe\|dll\|msi\|zip\|tar\|gz\|bz2\|7z\|tgz\|tbz2\|rar\|arj)$ 10080 90% 43200 refresh-ims reload-into-ims ignore-reload ignore-no-store ignore-private
			refresh_pattern -i \.(gif\|png\|jpg\|jpeg\|ico\|tiff\|svg)$ 10080 90% 43200 refresh-ims reload-into-ims ignore-reload ignore-no-store ignore-private
			refresh_pattern -i \.(ppt\|pptx\|doc\|docx\|xls\|xlsx\|pdf\|ps\|txt)$ 1440 75% 43200 refresh-ims reload-into-ims ignore-private
			refresh_pattern -i \.(css\|js)$ 10089 40% 432000 refresh-ims reload-into-ims ignore-reload ignore-no-store ignore-private
			refresh_pattern -i \.(xml\|csv\|json)$ 1440 40% 40320 refresh-ims reload-into-ims
			refresh_pattern -i \.(html\|htm)$ 1440 40% 40320 refresh-ims reload-into-ims



	# acl lists		# acl lists
	acl manager proto cache_object		acl manager proto cache_object # to comment out for upgrade to 3.4
	acl localhost src 127.0.0.1/32 ~~::1~~		acl localhost src 127.0.0.1/32
	~~acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1~~
	acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network		acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
	acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network		acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network
	acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network		acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network
			acl localnet src fc00::/7 # RFC 4193 local private network range
			acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines

	# port connections		# port connections

imported>T1t0: /* Squid install and config */

2017-06-19T02:49:43Z

Squid install and config

← Older revision		Revision as of 02:49, 19 June 2017
Line 34:		Line 34:
	# from http://thejimmahknows.com/network-adblocking-using-squid-squidguard-and-iptables/		# from http://thejimmahknows.com/network-adblocking-using-squid-squidguard-and-iptables/

	# ~~bind address~~		# listening port
	http_port 3128		http_port 3128

Line 47:		Line 47:
	maximum_object_size_in_memory 512 KB		maximum_object_size_in_memory 512 KB

			# squid logs
	# ~~log~~
	cache_access_log /var/log/squid3/access.log		cache_access_log /var/log/squid3/access.log
	cache_log /var/log/squid3/cache.log		cache_log /var/log/squid3/cache.log
	cache_store_log /var/log/squid3/store.log		cache_store_log /var/log/squid3/store.log

			# refresh_patterns
			refresh_pattern ^ftp: 1440 20% 10080
			refresh_pattern ^gopher: 1440 0% 1440
			refresh_pattern -i (/cgi-bin/\|\?) 0 0% 0
			refresh_pattern . 0 20% 4320

	# acl lists		# acl lists
	acl manager proto cache_object		acl manager proto cache_object
	acl localhost src 127.0.0.1/32 ::1		acl localhost src 127.0.0.1/32 ::1
	acl localnet src 10.0.0.0/8 # ~~RFC1918~~ possible internal network		acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
	acl localnet src 172.16.0.0/12 # ~~RFC1918~~ possible internal network		acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
	acl localnet src 192.168.0.0/16 # ~~RFC1918~~ possible internal network		acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network
			acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network

	# port connections		# port connections
Line 77:		Line 80:
	acl CONNECT method CONNECT		acl CONNECT method CONNECT

	# allow/deny		# allow/deny manager
	http_access allow manager localhost		http_access allow manager localhost
	http_access deny manager		http_access deny manager

	# ~~Deny~~ requests to certain unsafe ports		# deny requests to certain unsafe ports
	http_access deny !Safe_ports		http_access deny !Safe_ports

	# ~~Deny~~ CONNECT to other than secure SSL ports		# deny CONNECT to other than secure SSL ports
	http_access deny CONNECT !SSL_ports		http_access deny CONNECT !SSL_ports

	# ~~Example rule~~ allowing access from your local networks		# allowing access from your local networks
	http_access allow localhost		http_access allow localhost
	http_access allow localnet		http_access allow localnet

	# ~~And~~ finally deny all other access to this proxy		# finally deny all other access to this proxy
	http_access deny all		http_access deny all

imported>T1t0: /* Squid install and config */

2017-06-19T01:22:20Z

Squid install and config

@@ Line 33: / Line 33: @@
 cat > /etc/squid3/squid.conf << EOF
 # from http://thejimmahknows.com/network-adblocking-using-squid-squidguard-and-iptables/
 # acl lists
 acl manager proto cache_object
 acl localhost src 127.0.0.1/32 ::1
-acl localnet src 192.168.0.0/24 # RFC1918 possible internal network
+acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
 # port connections
@@ Line 69: / Line 93: @@
 # And finally deny all other access to this proxy
 http_access deny all
 EOF