FastHandle - IT Operations Examples

FastHandle is fast operation tools for infrastructure configurations and tests.

User Tools

Site Tools


middleware:squid:squid.conf.html



Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
middleware:squid:squid.conf.html [2017/11/14 01:43]
kurihara
middleware:squid:squid.conf.html [2018/01/28 23:18]
kurihara
Line 1: Line 1:
-====== squid squid.conf ======+[[middleware:squid:index.html]] 
 +====== Squid Recommended Configuration /etc/squid/squid.conf======
  
 +\\
 +{{INLINETOC}}
 +\\
 +
 +===== /etc/squid/squid.conf =====
  
 <sxh apache toolbar:false gutter:false> <sxh apache toolbar:false gutter:false>
-##################################################################################### +#=============================================================================== 
-#squid.conf+#/etc/squid/squid.conf
 #  -rw-r-----  root squid #  -rw-r-----  root squid
 # #
-#####################################################################################+#===============================================================================
  
 +#-------------------------------------------------------------------------------
 +# Port
 +#-------------------------------------------------------------------------------
 +http_port 8080
  
 acl SSL_ports port 443 acl SSL_ports port 443
Line 19: Line 29:
  
  
-#================================================================================== +#------------------------------------------------------------------------------- 
-# test-group1 +ACL1 : test-group1 
-#==================================================================================+#------------------------------------------------------------------------------- 
 +acl all src all
 acl test-group1 src xx.xx.xx.xx # test-server-1 acl test-group1 src xx.xx.xx.xx # test-server-1
 acl test-group1 src xx.xx.xx.xx # test-server-2 acl test-group1 src xx.xx.xx.xx # test-server-2
Line 31: Line 42:
  
  
-#================================================================================== +#------------------------------------------------------------------------------- 
-# localnet +ACL2 : localnet 
-#==================================================================================+#------------------------------------------------------------------------------- 
 +acl test-group2 src xx.xx.xx.xx  xx.xx.xx.xx 
 + 
 +acl whitelist dstdomain "/etc/squid/whitelist" 
 +http_access allow whitelist 
 + 
 + 
 +#------------------------------------------------------------------------------- 
 +# ACL3 : localnet 
 +#-------------------------------------------------------------------------------
 acl localnet src 10.50.0.0/24    # Office acl localnet src 10.50.0.0/24    # Office
 acl localnet src 172.16.0.0/24  acl localnet src 172.16.0.0/24 
Line 51: Line 71:
  
  
-#==================================================================================+#-------------------------------------------------------------------------------
 # Log # Log
-#==================================================================================+#-------------------------------------------------------------------------------
 logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
 access_log /var/log/squid/access.log combined access_log /var/log/squid/access.log combined
 +
 +
 +#-------------------------------------------------------------------------------
 +# Security
 +#-------------------------------------------------------------------------------
 +forwarded_for off
 +
 +header_access Referer deny all
 +header_access X-Forwarded-For deny all
 +header_access Via deny all
 +
 +visible_hostname unknown
 +
 </sxh> </sxh>
 +
 +\\
 +===== /etc/squid/whitelist =====
 +<sxh apache toolbar:false gutter:false>
 +.microsoft.com
 +.windows.com
 +.windowsupdate.com
 +</sxh>
 +
 +
 +\\
 +<WRAP box 90%>
 +<catlist -noAddPageButton -smallHead -sortAscending>
 +</WRAP>
 +
 +
 +\\
 +\\
 +[[middleware:squid:index.html]]


middleware/squid/squid.conf.html.txt · Last modified: 2018/02/08 01:37 by kurihara