ealvarenga_f
(usa Debian)
Enviado em 16/09/2015 - 18:20h
Debian 7.4
Kernel 3.2.68-1
Squid 3.5.6
Estou redigitando todo o squid.conf, pois estou buscando fazer uma configuração buscando um melhor desempenho do CACHE, porém estou enfrentando problema com a linha abaixo:
#acl manager proto cache_object
Foi compilado pelo codigo fonte usando os recursos:
./configure --prefix=/usr --sysconfdir=/etc/squid4 --enable-auth=basic --enable-storeio=ufs,aufs,diskd --enable-arp-acl --enable-delay-pools --enable-sll --enable-auth --enable-ssl-crtd --enable-ssl --with-openssl --enable-poll --enable-useragent-log --enable-referer-log --enable-linux-netfilter --enable-snmp --enable-removal-policies="heap,lru"
Caso precise de mais informação, e somente solicitar. OPS!! segue o squid.conf abaixo
root@srvfw001:~# cat /etc/squid4/squid.conf
#!/bin/sh
# Squid Cache 3.5.6
#### 1 - Identificacao
http_port 10.10.10.1:3128 intercept
visible_hostname WebCache.local.net
mail_program mail
cache_mgr ealvarenga_f@yahoo.com.br
## 1.1 - Autenticacao Daemon
cache_effective_user squid
cache_effective_group squid
## 1.2 - Ativando DEBUG e LOG
debug_options ALL,1
#log_fqdn on
#emulate_httpd_log on
cache_access_log /var/log/squid4/access.log
access_log /var/log/squid4/access_log.log
cache_log /var/cache/squid4/cache.log
cache_store_log /var/cache/squid4/store.log
## 1.3 - ACL's
acl localnet src 10.10.10.0/24 # RFC1918 possible internal network
acl localhost src 172.0.0.1/32 # RFC1918 possible internal network
#acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
## 2 - Melhorias
half_closed_clients off
dns_nameserver 8.8.8.8
dns_nameserver 8.8.4.4
## 2.1 - Utilizacao memoria RAM
cache_mem 250 MB
memory_cache_mode always
maximum_object_size_in_memory 512 KB
memory_replacement_policy heap GDSF
## 2.2 - Utilizacao Memoria Swap
cache_swap_low 90
cache_swap_high 95
cache_replacement_policy heap LFUDA
## 2.3 - Utilizacao Cache HD
cache_dir diskd /var/cache/squid4 16000 32 256
maximum_object_size 450 MB
minimum_object_size 0 KB
## 2.4 - Renovacao regra Cache
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
## 3 - Portas autorizadas
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow localhost manager
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
coredump_dir /usr/var/cache/squid