squid3配置要点

squid3配置要点

 

首先需要apt-get update

 

然后安装apt-get install squid

 

配置和开启

   vi /usr/local/squid/etc/squid.conf

   3.1更改监听端口

      http_port 9090

   3.2更改访问控制

      http_access allow all

   3.3开启squid

      3.3.1初始化squid.conf里的cache目录

------------------非常重要的命令-----------------

           /usr/local/squid/sbin/squid -z 

      3.3.2对squid.conf进行排错

           /usr/local/squid/sbin/squid -k parse

      3.3.3前台启动squid

           /usr/local/squid/sbin/squid -N -d1

      3.3.4后台运行squid

           /usr/local/squid/sbin/squid -s

      3.3.5 停止

           /usr/local/squid/sbin/squid -k shutdown

      3.3.5重新引导修改过的squid.conf

           /usr/local/squid/sbin/squid -k reconfigure

 

----------------------本人配置，亲测可用---------------

2013/06/29 01:19:40| Processing Configuration File: /etc/squid3/squid.conf (depth 0)

2013/06/29 01:19:40| Processing: acl manager proto cache_object

2013/06/29 01:19:40| Processing: acl localhost src 127.0.0.1/32 ::1

2013/06/29 01:19:40| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

2013/06/29 01:19:40| Processing: acl localnet src 10.0.0.0/8    # RFC1918 possible internal network

2013/06/29 01:19:40| Processing: acl SSL_ports port 443

2013/06/29 01:19:40| Processing: acl Safe_ports port 80         # http

2013/06/29 01:19:40| Processing: acl Safe_ports port 21         # ftp

2013/06/29 01:19:40| Processing: acl Safe_ports port 443                # https

2013/06/29 01:19:40| Processing: acl Safe_ports port 70         # gopher

2013/06/29 01:19:40| Processing: acl Safe_ports port 210                # wais

2013/06/29 01:19:40| Processing: acl Safe_ports port 1025-65535 # unregistered ports

2013/06/29 01:19:40| Processing: acl Safe_ports port 280                # http-mgmt

2013/06/29 01:19:40| Processing: acl Safe_ports port 488                # gss-http

2013/06/29 01:19:40| Processing: acl Safe_ports port 591                # filemaker

2013/06/29 01:19:40| Processing: acl Safe_ports port 777                # multiling http

2013/06/29 01:19:40| Processing: acl CONNECT method CONNECT

2013/06/29 01:19:40| Processing: http_access allow manager localhost

2013/06/29 01:19:40| Processing: http_access allow localnet

2013/06/29 01:19:40| Processing: http_access allow localhost

2013/06/29 01:19:40| Processing: http_access allow all

2013/06/29 01:19:40| Processing: http_port 0.0.0.0:3128

2013/06/29 01:19:40| Processing: cache_mem 1000 MB

2013/06/29 01:19:40| Processing: maximum_object_size_in_memory 1024 KB

2013/06/29 01:19:40| Processing: cache_dir ufs /var/spool/squid3 1024 16 256

2013/06/29 01:19:40| Processing: maximum_object_size 32327 KB

2013/06/29 01:19:40| Processing: cache_swap_low 90

2013/06/29 01:19:40| Processing: cache_swap_high 95

2013/06/29 01:19:40| Processing: access_log /var/log/squid3/access.log squid

2013/06/29 01:19:40| Processing: cache_store_log /var/log/squid3/store.log

2013/06/29 01:19:40| Processing: pid_filename /var/run/squid3.pid

2013/06/29 01:19:40| Processing: cache_log /var/log/squid3/cache.log

2013/06/29 01:19:40| Processing: coredump_dir /var/spool/squid3

2013/06/29 01:19:40| Processing: refresh_pattern ^ftp:          1440    20%    10080

2013/06/29 01:19:40| Processing: refresh_pattern ^gopher:       1440    0%     1440

2013/06/29 01:19:40| Processing: refresh_pattern -i (/cgi-bin/|\?) 0    0%     0

2013/06/29 01:19:40| Processing: refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880

2013/06/29 01:19:40| Processing: refresh_pattern .              0       20%    4320

2013/06/29 01:19:40| Processing: cache_mgr xxx

2013/06/29 01:19:40| Processing: visible_hostname xxx.xxx.xxx.xxx

2013/06/29 01:19:40| Processing: dns_nameservers xxx.xxx.xxx.xxx

 

squid 最终的解决问题不在于上面的配置。而在于相关日志、缓存文件的权限；

squid 3 显示启动：squid3 -N -d1,发现     

 

直接赋予swap.state文件夹权限，即可。

同时，对于access.log,cache.log 的日志权限也需要考虑提前变更。这些在squid3 -k parse 中就已经提到。

 

asset ion failure mem->swap out.sio=self  出现此错误，目前公网上找不到答案，唯一解决方案就是减少IP，不再分配新的ip；或者是通过squid3 -z 重新初始化目录

切记：以后再改动conf 文件的时候，先将原来的文件进行备份。

http://www.2cto.com/os/201307/229016.html