rss· 投稿· 设为首页· 加入收藏· 繁體版

FreeBSD下squid安装和配置

使用Squid:

  Squid是一个非常不错的代理缓存软件。支持的协议挺多的,可以通过扩展模块只是用户验证和除了http协议的代理(socks)。

  安装方法:

  在FreeBSD下安装软件最方便的方法是使用ports。本文为了让大家对通用的软件安装方法做一定的了解,我们采用通用的方法来安装Squid,也就是说,下面的方法同样适用于Linux或其他Unix版本。

  到 下载Squid 的最新稳定版本,现在是squid-2.5.STABLE3

  执行如下命令:

# cd /home/ylf/app
# tar zxvf squid-2.5.STABLE3.tar.gz    #解压缩安装包
# cd squid-2.5.STABLE3           #进入解开的目录
# ./configure --prefix=/usr/local/squid  #配制、将squid安装在/usr/local/squid目录
# make all                 #编译
# make install               #安装

  下面编辑Squid的配置文件:

# cd /usr/local/squid/etc

  将原来的配置文件改名:

# mv squid.conf squid.conf.bak

  编辑新的配置文件:

# vi squid.conf

  我的squid.conf内容如下:

#取消对代理阵列的支持
icp_port 0

#对日志文件和pid文件位置进行设置
cache_store_log none 
cache_access_log /usr/local/squid/var/logs/access.log
cache_log /usr/local/squid/var/logs/cache.log
emulate_httpd_log on
pid_filename /usr/local/squid/var/logs/squid.pid

#设置运行时的用户和组权限
cache_effective_user squid
cache_effective_group squid

#设置管理信息
visible_hostname www.qc.org.
cache_mgr yourname@yourdomain.com

#设置监听地址和端口
http_port 3128
udp_incoming_address 0.0.0.0

#设置squid用户hot object的物理内存的大小以及设置cache目录
cache_mem 32 MB
cache_dir ufs /usr/local/squid/cache 1024 16 256

#访问控制设置
acl mynet src 192.168.0.0/255.255.255.0
acl all src 0.0.0.0/0.0.0.0
http_access allow mynet
http_access deny all

#透明代理设置
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

#swap 性能微调
half_closed_clients off
cache_swap_high 100%
cache_swap_low 80%
maximum_object_size 1024 KB

#控制对象的超时时间
refresh_pattern -i .html 1440 90% 129600 reload-into-ims
refresh_pattern -i .shtml 1440 90% 129600 reload-into-ims
refresh_pattern -i .hml 1440 90% 129600 reload-into-ims
refresh_pattern -i .gif 1440 90% 129600 reload-into-ims
refresh_pattern -i .swf 1440 90% 129600 reload-into-ims
refresh_pattern -i .jpg 1440 90% 129600 reload-into-ims
refresh_pattern -i .png 1440 90% 129600 reload-into-ims
refresh_pattern -i .bmp 1440 90% 129600 reload-into-ims
refresh_pattern -i .js 1440 90% 129600 reload-into-ims

  需要改的地方是访问控制设置中的子网改成你自己的子网。其他的地方可根据需要调整。不改也可。

  如果不使用日志,将日志设置部分改成如下句子:

cache_store_log none
cache_access_log /dev/null
cache_log /dev/null

  添加squid系统用户和组:

# pw groupadd squid
# pw useradd squid -g squid -s /sbin/nologin

  建立cache目录:

# mkdir /usr/local/squid/cache

  改变cache目录和logs目录的所有者为squid用户和组:

# chown CR squid /usr/local/squid/cache
# chgrp CR squid /usr/local/squid/cache
# chown CR squid /usr/local/squid/var/logs
# chgrp CR squid /usr/local/squid/var/logs

  运行squid Cz建立cache目录结构:

# /usr/local/squid/sbin/squid Cz

  测试squid运行情况:

# /usr/local/squid/sbin/squid CNCd1

  出现下面显示证明squid安装成功:

2003/06/21 18:01:09| Starting Squid Cache version 2.5.STABLE3 for i386-unknown-freebsd4.7...
2003/06/21 18:01:09| Process ID 160
2003/06/21 18:01:09| With 957 file descriptors available
2003/06/21 18:01:09| Performing DNS Tests...
2003/06/21 18:01:09| Successful DNS name lookup tests...
2003/06/21 18:01:09| DNS Socket created at 0.0.0.0, port 1029, FD 4
2003/06/21 18:01:09| Adding nameserver 202.97.224.68 from /etc/resolv.conf
2003/06/21 18:01:09| Unlinkd pipe opened on FD 9
2003/06/21 18:01:09| Swap maxSize 1048576 KB, estimated 80659 objects
2003/06/21 18:01:09| Target number of buckets: 4032
2003/06/21 18:01:09| Using 8192 Store buckets
2003/06/21 18:01:09| Max Mem size: 32768 KB
2003/06/21 18:01:09| Max Swap size: 1048576 KB
2003/06/21 18:01:09| Store logging disabled
2003/06/21 18:01:09| Rebuilding storage in /usr/local/squid/cache (DIRTY)
2003/06/21 18:01:09| Using Least Load store dir selection
2003/06/21 18:01:09| Current Directory is /usr/local/squid/etc
2003/06/21 18:01:09| Loaded Icons.
2003/06/21 18:01:09| Accepting HTTP connections at 0.0.0.0, port 3128, FD 8.
2003/06/21 18:01:09| WCCP Disabled.
2003/06/21 18:01:09| Ready to serve requests.
2003/06/21 18:01:16| Done scanning /usr/local/squid/cache swaplog (0 entries)
2003/06/21 18:01:16| Finished rebuilding storage from disk.
2003/06/21 18:01:16| 0 Entries scanned
2003/06/21 18:01:16| 0 Invalid entries.
2003/06/21 18:01:16| 0 With invalid flags.
2003/06/21 18:01:16| 0 Objects loaded.
2003/06/21 18:01:16| 0 Objects expired.
2003/06/21 18:01:16| 0 Objects cancelled.
2003/06/21 18:01:16| 0 Duplicate URLs purged.
2003/06/21 18:01:16| 0 Swapfile clashes avoided.
2003/06/21 18:01:16| Took 7.3 seconds ( 0.0 objects/sec).
2003/06/21 18:01:16| Beginning Validation Procedure
2003/06/21 18:01:16| Completed Validation Procedure
2003/06/21 18:01:16| Validated 0 Entries
2003/06/21 18:01:16| store_swap_size = 0k
2003/06/21 18:01:17| storeLateRelease: released 0 object

  否则根据提示检查配制文件。

  为了使squid的透明代理起作用,需要设置端口转发。方法如下:

  编辑/etc/rc.firewall文件,添加下面一句:

ipfw add 00500 fwd 127.0.0.1,3128 tcp from 192.168.0.0/24 to any 80

  下面建立squid的启动脚本squid.sh:

  首先建立/usr/local/etc/rc.d目录:

# mkdir /usr/local/etc
# mkdir /usr/local/etc/rc.d
# cd /usr/local/etc/rc.d
# vi squid.sh

  文件内容如下:

#!/bin/sh

# if ! PREFIX=$(expr $0 : " (/.* )/etc/rc .d/$(basename $0) $"); then
#   echo "$0: Cannot determine the PREFIX" >&2
#   exit 1
# fi

case "$1" in
start)
  if [ -x /usr/local/squid/sbin/squid -a -f /usr/local/squid/etc/squid.conf ]; then
  (cd /usr/local/squid/var/logs; /usr/local/squid/sbin/squid >/dev/null 2>&1 &) ; echo -n ' squid'
  fi
  ;;
stop)
    /usr/local/squid/sbin/squid -k shutdown 2>&1
    # Uncomment this if you'd like the system to (attempt to
    # wait for) squid to shut down cleanly
    #echo "Sleeping for 45 seconds to allow squid to shutdown.."
    #sleep 45
  ;;
*)
  echo "Usage: `basename $0` {start|stop}" >&2
  ;;
esac

exit 0

  这样每次启动后,squid就会自动运行。

  运行/usr/local/etc/rc.d/squid.sh start 启动squid

  运行/usr/local/etc/rc.d/squid.sh stop 停止squid

转自:http://lovingtree.blog.163.com/blog/static/14485342006102915247148/
顶一下
(0)
踩一下
(0)