Squid/Iptables Net Lenta

ralfjones
(usa Debian)

Enviado em 09/06/2017 - 10:58h

Bom dia,

Acho que li todos os artigos referente ao problema kkkkk, quando jogo a net direto no pc, funciona muito bem, quando passo pelo servidor ela fica lenta, de 30MB, cai pra 10MB e não sai disso, segue meu squid.

http_port 192.168.1.1:3128
http_port 192.168.1.1:3129 intercept
dns_nameservers 8.8.8.8 8.8.4.4
icp_port 0
hierarchy_stoplist cgi-bin ?
maximum_object_size 64 MB
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 512 MB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
half_closed_clients off
cache_dir diskd /cache/squid3 8616 16 128
visible_hostname firewall.ralfjones

ftp_passive on

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire ignore-no-cache ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-private
refresh_pattern -i \.nup$ 120 90% 180 override-expire ignore-no-cache ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|rar|ppt|doc|tiff|cab|msi)$ 43200 90% 432000 override-expire ignore-no-cache ignore-private
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern . 0 40% 40320
refresh_pattern (/cgi-bin/|\?) 0 0% 0

acl SSL_ports port 80 443
acl Safe_ports port 21 80 443 1935 1025-65535
acl CONNECT method CONNECT
acl hosts-adm src "/etc/squid3/control/hosts-adm"
acl hosts-diretoria src "/etc/squid3/control/hosts-diretoria"
acl hosts-negados src "/etc/squid3/control/hosts-negados"
acl proibido-url url_regex -i "/etc/squid3/control/proibido-url"
acl maquinas-semi-liberadas src "/etc/squid3/control/maquinas-semi-liberadas"
acl proibido-semi-liberadas url_regex "/etc/squid3/control/proibido-semi-liberadas"
acl sites-totalmente-liberados url_regex -i "/etc/squid3/control/sites-totalmente-liberados"
acl sites-liberados-hosts-negados url_regex -i "/etc/squid3/control/sites-liberados-hosts-negados"
acl sites-adm url_regex -i "/etc/squid3/control/sites-adm"
acl paineiras src 192.168.1.0/24

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow hosts-negados sites-liberados-hosts-negados
http_access deny hosts-negados
http_access allow hosts-diretoria
http_access allow maquinas-semi-liberadas !proibido-semi-liberadas
http_access allow sites-totalmente-liberados
http_access deny hosts-adm !sites-adm
http_access deny proibido-url
http_access allow ralfjones
http_access deny all

cache_mgr root
cache_effective_user proxy
cache_effective_group proxy
cache_access_log stdio:/var/log/squid3/access.log
error_directory /usr/share/squid-langpack/pt-br
cache_store_log none
debug_options ALL,1
logfile_rotate 2
log_icp_queries off
log_mime_hdrs off
cachemgr_passwd my-secret-pass all
buffered_logs on