squid搭建

yum install -y squid

squid -v

更改配置文件

http_port 3128

acl manager proto cache_object

acl localhost src 127.0.0.1/32 ::1

acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network

acl localnet src 172.16.0.0/12  # RFC1918 possible internal network

acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

acl SSL_ports port 443

acl Safe_ports port 80 8080         # http

acl Safe_ports port 21          # ftp

acl Safe_ports port 443         # https

acl CONNECT method CONNECT

http_access allow manager localhost

http_access deny manager

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localnet

http_access allow localhost

http_access allow all

cache_dir aufs /data/cache 1024 16 256

cache_mem 128 MB

hierarchy_stoplist cgi-bin ?

coredump_dir /var/spool/squid

refresh_pattern ^ftp:           1440    20%     10080

refresh_pattern ^gopher:        1440    0%      1440

refresh_pattern -i (/cgi-bin/|\?) 0     0%      0

refresh_pattern \.(jpg|png|gif|mp3|xml) 1440    50%     2880    ignore-reload

refresh_pattern .               0       20%     4320

[root@localhost ~]# mkdir /data/cache

[root@localhost ~]# chown -R squid:squid /data/cache/

[root@localhost ~]# squid -z

[root@localhost ~]# /etc/init.d/squid start

curl -xlocalhost:3128 www.baidu.com

在acl http proto HTTP下添加

acl http proto HTTP

acl good_domain dstdomain .aaa.com .text.com

http_access allow http good_domain

http_access deny http !good_domain

acl http proto HTTP

acl bad_domain dstdomain .sina.com .souhu.com

http_access allow http !bad_domain

http_access deny http bad_domain

反向代理

http_port 80 accel vhost vport

cache_peer 180.97.33.108 parent 80 0 originserver name=a

cache_peer 101.226.103.106 parent 80 0 originserver name=b

cache_peer_domain a www.qq.com

cache_peer_domain b www.baidu.com

cache_peer 192.168.10.111 parent 80 0 originserver

squid搭建

原文：http://10907714.blog.51cto.com/10897714/1730657