安装篇： 本教程应用环境为干净centos 5.5 ，预先分好并加载/data分区,并且关闭selinux及iptables 首先修改文件描述符并设定临时端口范围，这些设置重启后生效 代码如下: cat >> /etc/security/limits.conf <<DDD * soft nofile 8192 * hard nofile 20480 DDD cat >> /etc/sysctl.conf <<DDD #set temp port range net.ipv4.ip_local_port_range = 32768 61000 DDD init 6 确认修改是否正确 代码如下: [root@sudutest ~]# ulimit -n 8192 [root@suduotest ~]# sysctl -n net.ipv4.ip_local_port_range net.ipv4.ip_local_port_range = 32768 61000 添加squid专用账户 代码如下: groupadd squid useradd -g squid -s /bin/false -M squid 添加日志目录、设置缓存和日志目录的权限 代码如下: mkdir /data/squidlog/ chown -R squid.squid /data 然后上传或者wget squid3.0软件tar包，tar zxvf解压，并且进入解压后的目录安装编译 代码如下: ./configure Cprefix=/usr/local/squid3 Cenable-async-io=100 Cwith-pthreads Cenable-storeio="aufs,diskd,ufs" Cenable-removal-policies="heap,lru" Cenable-icmp Cenable-delay-pools Cenable-useragent-log Cenable-referer-log Cenable-kill-parent-hack Cenable-arp-acl Cenable-default-err-language=Simplify_Chinese Cenable-err-languages="Simplify_Chinese English" Cdisable-poll Cdisable-wccp Cdisable-wccpv2 Cdisable-ident-lookups Cdisable-internal-dns Cenable-basic-auth-helpers="NCSA" Cenable-stacktrace Cwith-large-files Cdisable-mempools Cwith-filedescriptors=65535 Cenable-ssl Cenable-x-accelerator-var make make install make install-pinger 至此squid已经成功安装了，然后大家自己所需的/usr/local/squid3/etc/squid.conf 配置文件，我这边的配置文件将会在本文末尾贴出来供大家研究。 写好配置文件后执行下面的命令初始化cache目录 /usr/local/squid3/sbin/squid -z 然后运行squid，注：-D参数用来跳过DNS检测 /usr/local/squid3/sbin/squid -D 最后设置squid开机自动启动 echo "/usr/local/squid3/sbin/squid -D " >>/etc/rc.local 维护篇： 以下是squid常用的命令 如果修改过配置文件，则用下面的命令重读配置文件（即时生效） /usr/local/squid3/sbin/squid -k reconfigure 检查配置文件配置的语法是否正确 注：只有像这样的“cache_cf.cc(346) squid.conf:14 unrecognized: 'http1_port'”才是语法错误， “WARNING: use of 'reload-into-ims'……”这类提示属于意见建议，可以忽略。 /usr/local/squid3/sbin/squid -k parse 查看squid的日志和进程，看squid运行是否正常 代码如下: ps -ef |awk '/^squid/' cat /data/squidlog/cache.log /usr/local/squid3/sbin/squid -k check ;echo $? 关闭squid 发出关闭信号，等会话结束后彻底关闭 /usr/local/squid3/sbin/squid -k shutdown 关闭squid（更高优先级，直接关闭squid） /usr/local/squid3/sbin/squid -k interrupt 关闭squid（最高优先级，直接杀死squid进程） /usr/local/squid3/sbin/squid -k kill 滚动日志文件 /usr/local/squid3/sbin/squid -k rotate 设置每周二凌晨四点30分自动滚动日志 echo "30 4 * * 2 root /usr/local/squid3/sbin/squid -k rotate " >>/etc/crontab 目前应用中的squid.conf文件，由于日志文件增长很快，所以直接输出到/dev/null丢弃掉了 代码如下: #basic cache_effective_user squid cache_effective_group squid pid_filename /usr/local/squid3/var/logs/squid.pid visible_hostname squid.678114.com cache_mgr sudu@sudu.us error_directory /usr/local/squid3/share/errors/Simplify_Chinese icon_directory /usr/local/squid3/share/icons mime_table /usr/local/squid3/etc/mime.conf hosts_file /etc/hosts acl DEIpadd dstdom_regex [0-9]$ http_access deny DEIpadd cache_replacement_policy lru memory_replacement_policy lru http_port 80 vhost vport cache_mem 4024 MB maximum_object_size_in_memory 5120 KB icp_port 0 #.cache_dir cache_dir aufs /data/cache 50000 64 128 max_open_disk_fds 0 maximum_object_size 20 MB #.cache_peer cache_peer 125.76.225.44 parent 80 0 no-query originserver no-digest name=all cache_peer_domain all .678114.com #acl acl Safe_ports port 80 acl SSL_ports port 443 acl LanSrc src 192.168.100.0/24 acl webdomain dstdomain .678114.com acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow LanSrc http_access allow webdomain http_access deny all #refresh_pattern refresh_pattern -i /$ 15 90% 600 reload-into-ims refresh_pattern -i .html$ 15 90% 600 reload-into-ims refresh_pattern -i .htm$ 15 90% 600 reload-into-ims refresh_pattern -i .shtml$ 15 90% 600 reload-into-ims refresh_pattern -i .hml$ 15 90% 600 reload-into-ims refresh_pattern -i .gif$ 1440 90% 129600 reload-into-ims refresh_pattern -i .swf$ 1440 90% 129600 reload-into-ims refresh_pattern -i .jpg$ 1440 90% 129600 reload-into-ims refresh_pattern -i .png$ 1440 90% 129600 reload-into-ims refresh_pattern -i .bmp$ 1440 90% 129600 reload-into-ims refresh_pattern -i .js$ 120 90% 129600 reload-into-ims refresh_pattern -i .css$ 120 90% 129600 reload-into-ims refresh_pattern -i .wma$ 1440 90% 21600 reload-into-ims refresh_pattern -i .zip$ 1440 90% 21600 reload-into-ims refresh_pattern -i .mp3$ 1440 90% 21600 reload-into-ims refresh_pattern -i .rar$ 1440 90% 21600 reload-into-ims refresh_pattern -i .rm$ 1440 90% 21600 reload-into-ims refresh_pattern -i .flv$ 1440 90% 21600 reload-into-ims refresh_pattern -i .rar$ 1440 90% 21600 reload-into-ims refresh_pattern -i .rm$ 1440 90% 21600 reload-into-ims refresh_pattern -i .avi$ 1440 90% 21600 reload-into-ims refresh_pattern -i .3gp$ 1440 90% 21600 reload-into-ims refresh_pattern -i .mp4$ 1440 90% 21600 reload-into-ims refresh_pattern -i .wmv$ 1440 90% 21600 reload-into-ims #keepalived client_persistent_connections off server_persistent_connections on #log emulate_httpd_log on logformat web1 %{X-Forwarded-For}>h %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh cache_log /data/squidlog/cache.log cache_access_log /dev/null web1 cache_store_log /dev/null strip_query_terms off logfile_rotate 10 #other forwarded_for on log_icp_queries off via off httpd_suppress_version_string off ie_refresh off tcp_recv_bufsize 32 KB ipcache_size 1024 ipcache_low 90 ipcache_high 95 cache_swap_low 80 cache_swap_high 90 request_header_max_size 128 KB quick_abort_min 20 KB quick_abort_max 20 KB quick_abort_pct 95 connect_timeout 1 minute negative_ttl 0 minutes read_timeout 30 seconds pconn_timeout 120 seconds half_closed_clients off client_lifetime 10 minutes shutdown_lifetime 5 seconds hierarchy_stoplist cgi-bin ? access_log /dev/null squid 本文首发于
