wiki

http://wiki.squid-cache.org/ConfigExamples/

Squid TAG

# TAG: authenticate_cache_garbage_interval
# TAG: authenticate_ttl
# TAG: authenticate_ip_ttl
# TAG: external_acl_type
# TAG: acl
# TAG: http_access
# TAG: http_access2
# TAG: http_reply_access
# TAG: icp_access
# TAG: htcp_access
# TAG: htcp_clr_access
# TAG: miss_access
# TAG: ident_lookup_access
# TAG: reply_body_max_size
# TAG: follow_x_forwarded_for
# TAG: acl_uses_indirect_client
# TAG: delay_pool_uses_indirect_client
# TAG: log_uses_indirect_client
# TAG: http_port
# TAG: https_port
# TAG: tcp_outgoing_tos
# TAG: tcp_outgoing_address
# TAG: ssl_unclean_shutdown
# TAG: ssl_engine
# TAG: sslproxy_client_certificate
# TAG: sslproxy_client_key
# TAG: sslproxy_version
# TAG: sslproxy_options
# TAG: sslproxy_cipher
# TAG: sslproxy_cafile
# TAG: sslproxy_capath
# TAG: sslproxy_flags
# TAG: sslpassword_program
# TAG: cache_peer
# TAG: cache_peer_domain
# TAG: cache_peer_access
# TAG: neighbor_type_domain
# TAG: dead_peer_timeout
# TAG: hierarchy_stoplist
# TAG: cache_mem
# TAG: maximum_object_size_in_memory
# TAG: memory_replacement_policy
# TAG: cache_replacement_policy
# TAG: cache_dir
# TAG: store_dir_select_algorithm
# TAG: max_open_disk_fds
# TAG: minimum_object_size
# TAG: maximum_object_size
# TAG: cache_swap_low (percent, 0-100)
# TAG: cache_swap_high (percent, 0-100)
# TAG: logformat
# TAG: access_log
# TAG: log_access
# TAG: cache_log
# TAG: cache_store_log
# TAG: cache_swap_state
# TAG: logfile_rotate
# TAG: emulate_httpd_log
# TAG: log_ip_on_direct
# TAG: mime_table
# TAG: log_mime_hdrs
# TAG: useragent_log
# TAG: referer_log
# TAG: pid_filename
# TAG: debug_options
# TAG: log_fqdn
# TAG: client_netmask
# TAG: forward_log
# TAG: strip_query_terms
# TAG: buffered_logs
# TAG: ftp_user
# TAG: ftp_list_width
# TAG: ftp_passive
# TAG: ftp_sanitycheck
# TAG: ftp_telnet_protocol
# TAG: diskd_program
# TAG: unlinkd_program
# TAG: pinger_program
# TAG: url_rewrite_program
# TAG: url_rewrite_children
# TAG: url_rewrite_concurrency
# TAG: url_rewrite_host_header
# TAG: url_rewrite_access
# TAG: redirector_bypass
# TAG: location_rewrite_program
# TAG: location_rewrite_children
# TAG: location_rewrite_concurrency
# TAG: location_rewrite_access
# TAG: cache
# TAG: refresh_pattern
# TAG: quick_abort_min (KB)
# TAG: quick_abort_max (KB)
# TAG: quick_abort_pct (percent)
# TAG: read_ahead_gap buffer-size
# TAG: negative_ttl
# TAG: positive_dns_ttl
# TAG: negative_dns_ttl
# TAG: range_offset_limit
# TAG: minimum_expiry_time
# TAG: store_avg_object_size
# TAG: store_objects_per_bucket
# TAG: request_header_max_size
# TAG: reply_header_max_size
# TAG: request_body_max_size
# TAG: broken_posts
# TAG: via
# TAG: cache_vary
# TAG: broken_vary_encoding
# TAG: collapsed_forwarding
# TAG: refresh_stale_hit
# TAG: ie_refresh
# TAG: vary_ignore_expire
# TAG: extension_methods
# TAG: request_entities
# TAG: header_access
# TAG: header_replace
# TAG: relaxed_header_parser
# TAG: forward_timeout time-units
# TAG: peer_connect_timeout
# TAG: read_timeout
# TAG: request_timeout
# TAG: persistent_request_timeout
# TAG: client_lifetime time-units
# TAG: half_closed_clients
# TAG: pconn_timeout
# TAG: ident_timeout
# TAG: shutdown_lifetime
# TAG: cache_mgr
# TAG: mail_from
# TAG: mail_program
# TAG: cache_effective_user
# TAG: cache_effective_user
# TAG: httpd_suppress_version_string
# TAG: visible_hostnam
# TAG: unique_hostname
# TAG: hostname_aliases
# TAG: umask#
# TAG: announce_period
# TAG: announce_host
# TAG: announce_file
# TAG: announce_port
# TAG: httpd_accel_no_pmtu_disc
# TAG: delay_pools
# TAG: delay_class
# TAG: delay_access
# TAG: delay_parameters
# TAG: delay_initial_bucket_level
# TAG: wccp_router
# TAG: wccp2_router
# TAG: wccp_version
# TAG: wccp2_rebuild_wait
# TAG: wccp2_forwarding_method
# TAG: wccp2_return_method
# TAG: wccp2_assignment_method
# TAG: wccp2_service
# TAG: wccp2_service_info
# TAG: wccp2_weight
# TAG: wccp_address
# TAG: wccp2_address
# TAG: client_persistent_connections
# TAG: server_persistent_connections
# TAG: persistent_connection_after_error
# TAG: detect_broken_pconn
# TAG: digest_generation
# TAG: digest_bits_per_entry
# TAG: digest_rebuild_period
# TAG: digest_rewrite_period
# TAG: digest_swapout_chunk_size
# TAG: digest_rebuild_chunk_percentage
# TAG: snmp_port
# TAG: snmp_access
# TAG: snmp_incoming_address
# TAG: snmp_outgoing_address
# TAG: icp_port
# TAG: htcp_port
# TAG: log_icp_queries on|off
# TAG: udp_incoming_address
# TAG: udp_outgoing_address
# TAG: icp_hit_stale
# TAG: minimum_direct_hops
# TAG: minimum_direct_rtt
# TAG: netdb_low
# TAG: netdb_high
# TAG: netdb_ping_period
# TAG: query_icmp
# TAG: test_reachability
# TAG: icp_query_timeout
# TAG: maximum_icp_query_timeout
# TAG: minimum_icp_query_timeout
# TAG: mcast_groups
# TAG: mcast_miss_addr
# TAG: mcast_miss_ttl
# TAG: mcast_miss_port
# TAG: mcast_miss_encode_key
# TAG: mcast_icp_query_timeout
# TAG: icon_directory
# TAG: global_internal_static
# TAG: short_icon_urls
# TAG: error_directory
# TAG: error_map
# TAG: err_html_text
# TAG: deny_info
# TAG: nonhierarchical_direct
# TAG: prefer_direct
# TAG: always_direct
# TAG: never_direct
# TAG: incoming_icp_average
# TAG: incoming_http_average
# TAG: incoming_dns_average
# TAG: min_icp_poll_cnt
# TAG: min_dns_poll_cnt
# TAG: min_http_poll_cnt
# incoming_icp_average 6
# incoming_http_average 4
# incoming_dns_average 4
# min_icp_poll_cnt 8
# min_dns_poll_cnt 8
# min_http_poll_cnt 8
# TAG: check_hostnames
# TAG: allow_underscore
# TAG: cache_dns_program
# TAG: dns_children
# TAG: dns_retransmit_interval
# TAG: dns_timeout
# TAG: dns_defnames
# TAG: dns_nameservers
# TAG: hosts_file
# TAG: dns_testnames
# TAG: append_domain
# TAG: ignore_unknown_nameservers
# TAG: ipcache_size (number of entries)
# TAG: ipcache_low (percent)
# TAG: ipcache_high (percent)
# TAG: fqdncache_size
# TAG: memory_pools
# TAG: memory_pools_limit
# TAG: forwarded_for
# TAG: cachemgr_passwd
# TAG: client_db
# TAG: reload_into_ims
# TAG: maximum_single_addr_tries
# TAG: retry_on_error
# TAG: as_whois_server
# TAG: offline_mode
# TAG: uri_whitespace
# TAG: coredump_dir
# TAG: chroot
# TAG: balance_on_multiple_ip
# TAG: pipeline_prefetch
# TAG: high_response_time_warning
# TAG: high_page_fault_warning
# TAG: high_memory_warning
# TAG: sleep_after_fork
# TAG: max_filedesc

Squid Bypass Auth

##Bypass Auth
acl allowlist dstdomain "/etc/squid/allow_site.txt"
http_access allow all allowlist


##ACL Authen
acl ldap-auth proxy_auth REQUIRED
http_access allow ldap-auth

###allow_site.txt
.tbfst.co.th
.google.com
.google.co.th


*ต้องว่างตำแหน่ง Bypass Auth ไว้ก่อน http_access allow ldap-auth

Access Lists

• http_access: Allows HTTP clients (browsers) to access the HTTP port. This is the primary access control list.
• icp_access: Allows neighbor caches to query your cache with ICP.
• miss_access: Allows certain clients to forward cache misses through your cache.
• no_cache: Defines responses that should not be cached.
• redirector_access: Controls which requests are sent through the redirector pool.
• ident_lookup_access: Controls which requests need an Ident lookup.
• always_direct: Controls which requests should always be forwarded directly to origin servers.
• never_direct: Controls which requests should never be forwarded directly to origin servers.
• snmp_access: Controls SNMP client access to the cache.
• broken_posts: Defines requests for which squid appends an extra CRLF after POST message bodies as required by some broken origin servers.
• cache_peer_access: Controls which requests can be forwarded to a given neighbor (peer).

ACL elements

• src: source (client) IP addresses
• dst: destination (server) IP addresses
• myip: the local IP address of a client's connection
• srcdomain: source (client) domain name
• dstdomain: destination (server) domain name
• srcdom_regex: source (client) regular expression pattern matching
• dstdom_regex: destination (server) regular expression pattern matching
• time: time of day, and day of week
• url_regex: URL regular expression pattern matching
• urlpath_regex: URL-path regular expression pattern matching, leaves out the protocol and hostname
• port: destination (server) port number
• myport: local port number that client connected to
• proto: transfer protocol (http, ftp, etc)
• method: HTTP request method (get, post, etc)
• browser: regular expression pattern matching on the request's user-agent header
• ident: string matching on the user's name
• ident_regex: regular expression pattern matching on the user's name
• src_as: source (client) Autonomous System number
• dst_as: destination (server) Autonomous System number
• proxy_auth: user authentication via external processes
• proxy_auth_regex: user authentication via external processes
• snmp_community: SNMP community string matching
• maxconn: a limit on the maximum number of connections from a single client IP address
• req_mime_type: regular expression pattern matching on the request content-type header
• arp: Ethernet (MAC) address matching

Squid Block URL

ข้อมูลสรุปนี้ไม่พร้อมใช้งาน โปรด คลิกที่นี่เพื่อดูโพสต์