http_port
cache_dir ufs /var/data 3000 12 56
//不要超過3G
cache_mem 2048 MB //內(nèi)存2/3
acl aa src xx
acl bb dst xx
http_access allow aa
http_access deny all
image.png
cache_swap_high 95
cache_swap_low 80
maximum_object_size 40960 KB
//src/dst srcdomain dstdomain
acl internal srcdom_regex -i ..example.com
urlpath_regex -i ..gif$
url_regex
acl none_work time 12:00-13:00
SMTWHFA
acl max_conn maxconn 10 //允許一個客戶端最多幾條連接
port
image.png
image.png
image.png
image.png
多項
image.png
refresh_pattern過期時間設置
image.png
cache_store_log none
--
透明代理：squid+NAT
http_port 3128 transparent
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A POSTROUTING -o eth2 -s 192.168.0.0/24 -j SNAT --to 10.0.1.200
反向代理：負載均衡
image.png
單臺反向代理
image.png
443反向代理
image.png
HTTP協(xié)議命令：GET,HEAD,POST,PUT,DELETE,CONNECT,TRACE,DEBUG,OPTIONS
防火墻用string過濾地址
image.png
