squid3.5缓存代理实践记录

准备：

两台服务器，一台web，一台squid缓存代理

squid机域名：www.dannylinux.top

web机IP：12.1.1.1

1.版本：

[root@danny squid]# squid -v
Squid Cache: Version 3.5.

2.安装：略，直接yum安装

3.配置

vim /etc/squid/squid.conf

acl localnet src 172.31.16.128/
acl localnet src 10.0.0.0/ # RFC1918 possible internal network
acl localnet src 192.168.0.0/ # RFC1918 possible internal network
acl localnet src fc00::/ # RFC  local private network range
acl localnet src fe80::/ # RFC  link-local (directly plugged) machines

acl SSL_ports port
acl Safe_ports port  # http
acl Safe_ports port  # ftp
acl Safe_ports port  # https
acl Safe_ports port  # gopher
acl Safe_ports port  # wais
acl Safe_ports port - # unregistered ports
acl Safe_ports port  # http-mgmt
acl Safe_ports port  # gss-http
acl Safe_ports port  # filemaker
acl Safe_ports port  # multiling http
acl CONNECT method CONNECT

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager

http_access allow localnet
http_access allow localhost

#允许所有IP访问，新版squid的all字段及代表0.0.0./
http_access allow all
#http_access deny all

#http_port 

#设置反向代理服务器监听的端口为3128,accel表示开启squid的accel加速模式
#vhost和vport表示支持虚拟主机和虚拟端口
http_port  accel vhost vport

#反向代理地址设置，将3128接收的请求转发到12.1.1.1的80端口
cache_peer 12.1.1.1 parent   no-query no-digest originserver
cache_dir ufs /var/spool/squid
coredump_dir /var/spool/squid

refresh_pattern ^ftp:  %
refresh_pattern ^gopher:  %
refresh_pattern -i (/cgi-bin/|\?)  %
refresh_pattern .  % 

#强制匹配
refresh_pattern -i \.css$  %  reload-into-ims
refresh_pattern -i \.js$  %  reload-into-ims
refresh_pattern -i \.html$  %  reload-into-ims
refresh_pattern -i \.jpg$  %  ignore-reload
refresh_pattern -i \.gif$  %  ignore-reload
refresh_pattern -i \.swf$  %  ignore-reload
refresh_pattern -i \.jpg$  %  ignore-reload
refresh_pattern -i \.png$  %  ignore-reload
refresh_pattern -i \.bmp$  %  ignore-reload

refresh_pattern -i \.doc$  %  ignore-reload
refresh_pattern -i \.ppt$  %  ignore-reload
refresh_pattern -i \.xls$  %  ignore-reload
refresh_pattern -i \.pdf$  %  ignore-reload
refresh_pattern -i \.rar$  %  ignore-reload
refresh_pattern -i \.zip$  %  ignore-reload
refresh_pattern -i \.txt$  %  ignore-reload

4.检查配置文件

squid -k parse

5.初始化缓存目录

squid -z

6.启动squid

service squid start

7.iptables设置请求重定向

iptables -t nat -A PREROUTING -p tcp -m tcp --dport  -j REDIRECT --to-ports 

8.访问域名

www.dannylinux.top  会跳转到web机页面

9.查看缓存情况

squidclient -p  mgr:info