Forum Debian Users Gang

rychu · 2005-08-14 02:26:18

potzrebuję postawić proxy na debianie

jakie pakiety zainstalować?

zlyZwierz · 2005-08-14 09:07:26

HTTP PROXY - squid , FTP PROXY - frox

apt-get install squid ,

masz tu kawalek mojego konfiga :

Kod:

http_port 10.1.1.201:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY
cache_mem 512 MB
maximum_object_size 131072 KB
ipcache_size 10240
fqdncache_size 10240
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir diskd /var/cache/squid 10000 16 256
access_log /var/log/squid/access.log squid
dns_nameservers 127.0.0.1
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern         -i      .jpg   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .gif   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .tif   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .bmp   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .png   43200   100%    43200   reload-into-ims
refresh_pattern                 windowsupdate.com/.*.(cab|exe)         43200   100%    43200   reload-into-ims
refresh_pattern                 download.microsoft.com/.*.(cab|exe)    43200   100%    43200   reload-into-ims
refresh_pattern                 .       20160   50%     43200
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl mala_siec src 10.0.0.0/8
http_access allow mala_siec
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
acl zwykly_tos src 10.0.0.0/255.0.0.0
tcp_outgoing_tos 0x0 zwykly_tos
zph_tos_local 0x8
acl siec_0 src 10.0.0.0/255.255.255.0
acl siec_1 src 10.1.1.0/255.255.255.0
acl siec_2 src 10.2.1.0/255.255.255.0
acl admin src 10.1.1.1
tcp_outgoing_address 80.x.x.x siec_0
tcp_outgoing_address 83.x.x.x siec_1
tcp_outgoing_address 83.x.x.x siec_2
visible_hostname serwer_R4
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
forwarded_for off
reload_into_ims on
coredump_dir /var/cache/squid
ie_refresh on

rychu · 2005-08-14 10:06:12

dzięki stary

oress · 2005-08-15 23:02:51

a tu config odemnie , może też się przyda:

Kod:

###############################
http_port 8080
icp_port 0
#tu aufs w fazie testow
cache_dir aufs /usr/local/squid/var/cache 8048 20 256

icon_directory /usr/local/squid/share/icons
error_directory /usr/local/squid/share/errors/Polish

cache_store_log none
#trafienbie w cache z tosem 16 do szybkiej kolejki wymagany patch squida
zph_tos_local 16

visible_hostname integra.one.pl
cache_effective_user squid
cache_effective_group squid

cache_mem 20 MB
store_avg_object_size 16 kB
maximum_object_size 50000 KB
maximum_object_size_in_memory 32 KB

cachemgr_passwd xxxxxx all
buffered_logs on

#transparent proxy
httpd_accel_host virtual
#tylko za cholere nie chce mi dzialac HTTPS !
httpd_accel_port 80 443
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
httpd_accel_single_host off
hierarchy_stoplist cgi-bin ?
acl all src 10.0.0.0/24
acl magic_words2 url_regex -i .html .gif .png .htm .cgi .php .asp cgi-bin .js .css .txt
acl FTP proto FTP
acl idea url_regex -i http://sms.idea.pl/
acl local url_regex -i http://10.0.0.1/ http://integra.one.pl/

acl normal arp "/usr/local/apache/htdocs/integra/agaserv/acl/masq_allow"
#acl ban arp "/usr/local/apache/htdocs/integra/agaserv/acl/ban_deny"

http_access allow normal
http_access allow idea
#http_access allow local

#deny_info ERR_ZAPLAC ban
deny_info ERR_MAC all

http_access deny all
#tu cala sila trafien w cache
refresh_pattern -i (.*jpg$|.*gif$) 0 50% 28800
refresh_pattern -i (.*rar$.*zip$.*exe$.*swf$.*avi$.*mpeg$.*mp3$.*asf$.*wmv$.*wma$.doc$.pdf$) 0 20% 28800
refresh_pattern -i (.*html$.*htm$.*shtml$.*php$) 5 20% 600
refresh_pattern http://windowsupdate.microsoft.com/ 0 80% 20160
refresh_pattern http://symantecliveupdate.com/ 0 80% 20160
refresh_pattern (http://.*/$) 5 20% 600
refresh_pattern ^ftp: 1440 20% 1080
#refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 1080
#always_direct allow FTP
#zawszse bezporednie FTP
#delays pools nie używam -> CBQ
#delay_pools 2
#delay_class 1 2
#delay_parameters 1 -1/-1 -1/-1
#delay_access 1 allow magic_words2
#delay_class 2 2
#delay_parameters 2 90000/102400 90000/200000
#delay_access 2 allow all
############################################

rychu · 2005-08-15 23:15:44

no pewnie że się przyda :)

dzięki

rychu · 2005-09-05 02:44:37

#tylko za cholere nie chce mi dzialac HTTPS ![/quote]

pewnie dlatego, że barany od paczek deb nie skompilowali squida z opcją --enable-ssl. zwała trochę

linux regd. user #248790

Time (s)	Query
0.00009	SET CHARSET latin2
0.00006	SET NAMES latin2
0.00242	SELECT u., g., o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='3.145.9.174' WHERE u.id=1
0.00153	REPLACE INTO punbb_online (user_id, ident, logged) VALUES(1, '3.145.9.174', 1738298134)
0.00064	SELECT * FROM punbb_online WHERE logged<1738297834
0.00154	SELECT topic_id FROM punbb_posts WHERE id=11175
0.00205	SELECT id FROM punbb_posts WHERE topic_id=1325 ORDER BY posted
0.00264	SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=1325 AND t.moved_to IS NULL
0.00012	SELECT search_for, replace_with FROM punbb_censoring
0.00107	SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=1325 ORDER BY p.id LIMIT 0,25
0.00122	UPDATE punbb_topics SET num_views=num_views+1 WHERE id=1325
Total query time: 0.01338 s

Forum Debian Users Gang

Ogłoszenie

#1 2005-08-14 02:26:18

rychu - elektryk dyżurny

proxy

#2 2005-08-14 09:07:26

zlyZwierz - Moderator

Re: proxy

Kod:

#3 2005-08-14 10:06:12

rychu - elektryk dyżurny

Re: proxy

#4 2005-08-15 23:02:51

oress - Użytkownik

Re: proxy

Kod:

#5 2005-08-15 23:15:44

rychu - elektryk dyżurny

Re: proxy

#6 2005-09-05 02:44:37

rychu - elektryk dyżurny

Re: proxy

Stopka forum

Informacje debugowania