本文介绍了Squid代理服务器的基本配置方法，包括定义访问控制列表（ACLs）、设置访问规则及启用阿布云代理作为父级代理等内容。示例展示了如何通过配置文件「squid.conf」实现对本地网络的服务支持及安全限制。
# 在Squid配置文件「squid.conf」中添加「cache_peer」配置
# 如下为最小Squid配置示例
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl localnet src 10.0.0.0/8
acl localnet src 172.16.0.0/12
acl localnet src 192.168.0.0/16
acl localnet src fc00::/7
acl localnet src fe80::/10
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
# 配置阿布云代理为父级代理，并指定授权用户名/密码
cache_peer http-cla.abuyun.com parent 9030 0 no-query proxy-only login=H01234567890123C:0123456789012345
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
