Debian
Debian-France
Debian-Facile
Debian-fr.org
Forum-Debian.fr
Debian ?
Communautés
Vous n'êtes pas identifié(e).
L'icône rouge permet de télécharger chaque page du wiki visitée au format
PDF et la grise au format ODT →
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente | Prochaine révision Les deux révisions suivantes | ||
|
utilisateurs:hypathie:tutos:proxy-transparent [04/11/2014 15:30] Hypathie [Configuration détaillée du proxy] |
utilisateurs:hypathie:tutos:proxy-transparent [04/11/2014 15:33] Hypathie [Configuration détaillée du proxy] |
||
|---|---|---|---|
| Ligne 216: | Ligne 216: | ||
| ===Paramétrage du cache dans /etc/squid3/squid.conf=== | ===Paramétrage du cache dans /etc/squid3/squid.conf=== | ||
| - | Avec squid3 le cache n'est pas activer par défaut, pour mettre en place le cache, il faut récupérer les lignes commentées du fichiers d'origine /etc/squid3/squid.conf-bak.\\ | + | Avec squid3 le cache n'est pas activer par défaut, pour mettre en place le cache, il faut récupérer les lignes commentées du fichiers d'origine /etc/squid3/squid.conf_back.\\ |
| * **On désactive squid3** | * **On désactive squid3** | ||
| Ligne 325: | Ligne 325: | ||
| 2014/11/04 12:56:33| Making directories in /data/cache/0C | 2014/11/04 12:56:33| Making directories in /data/cache/0C | ||
| 2014/11/04 12:56:33| Making directories in /data/cache/0D</code> | 2014/11/04 12:56:33| Making directories in /data/cache/0D</code> | ||
| - | |||
| - | |||
| - | |||
| - | |||
| - | |||
| - | <note important> | ||
| - | Comparer :\\ | ||
| - | -> ''# cache_mem 256 MB''\\ | ||
| - | -> ''#cache_dir ufs /var/spool/squid3 100 16 256''\\ | ||
| - | |||
| - | => La définition de la mémoire cache (256 MB) serait plus large que l'espace disque défini (100MB) !\\ | ||
| - | |||
| - | Donc attention en dé-commentant ! | ||
| - | |||
| - | df -h /var | ||
| - | Sys. fich. Taille Util. Dispo Uti% Monté sur | ||
| - | /dev/mapper/systeme-var 2,8G 1,0G 1,7G 39% /var | ||
| - | |||
| - | </note> | ||
| - | |||
| - | |||
| - | * **Ou télécharger ce fichier :** | ||
| - | |||
| - | <code texte my-squid.conf> | ||
| - | # ACCESS CONTROLS OPTIONS | ||
| - | # ==================== | ||
| - | acl QUERY urlpath_regex -i cgi-bin \? \.php$ \.asp$ \.shtml$ \.cfm$ \.cfml$ \.phtml$ \.php3$ localhost | ||
| - | acl all src | ||
| - | acl localhost src 127.0.0.1/32 ::1 | ||
| - | acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 | ||
| - | acl localnet src 192.168.0.0/24 # RFC1918 possible internal network | ||
| - | acl lan src 192.168.1.0/24 | ||
| - | acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535 | ||
| - | acl sslports port 443 563 81 2087 10000 | ||
| - | acl manager proto cache_object | ||
| - | acl purge method PURGE | ||
| - | acl connect method CONNECT | ||
| - | |||
| - | http_access allow manager localhost | ||
| - | http_access deny manager | ||
| - | http_access deny !safeports | ||
| - | http_access deny CONNECT !sslports | ||
| - | http_access allow localhost | ||
| - | http_access allow localnet | ||
| - | http_access allow lan | ||
| - | http_access deny all | ||
| - | |||
| - | # NETWORK OPTIONS | ||
| - | # ==================== | ||
| - | http_port 3128 transparent | ||
| - | |||
| - | # OPTIONS WHICH AFFECT THE CACHE SIZE | ||
| - | # ============================== | ||
| - | |||
| - | cache_mem 16 MB | ||
| - | maximum_object_size_in_memory 32 KB | ||
| - | memory_replacement_policy heap GDSF | ||
| - | cache_replacement_policy heap LFUDA | ||
| - | cache_dir aufs /home/proxy/cache 20000 14 256 | ||
| - | maximum_object_size 128000 KB | ||
| - | cache_swap_low 95 | ||
| - | cache_swap_high 99 | ||
| - | |||
| - | # LOGFILE PATHNAMES AND CACHE DIRECTORIES | ||
| - | # ================================== | ||
| - | access_log /var/log/squid3/access.log | ||
| - | cache_log /var/log/squid3/cache.log | ||
| - | cache_store_log none | ||
| - | logfile_rotate 5 | ||
| - | log_icp_queries off | ||
| - | |||
| - | # OPTIONS FOR TUNING THE CACHE | ||
| - | # ======================== | ||
| - | |||
| - | cache deny QUERY | ||
| - | refresh_pattern ^ftp: 1440 20% 10080 reload-into-ims | ||
| - | refresh_pattern ^gopher: 1440 0% 1440 | ||
| - | refresh_pattern -i \.(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private | ||
| - | refresh_pattern -i \.(rpm|cab|deb|exe|msi|msu|zip|tar|xz|bz|bz2|lzma|gz|tgz|rar|bin|7z|doc?|xls?|ppt?|pdf|nth|psd|sis)$ 10080 90% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private | ||
| - | refresh_pattern -i \.(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ 43200 95% 432000 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private | ||
| - | refresh_pattern -i \.(html|htm|css|js)$ 1440 75% 40320 | ||
| - | refresh_pattern -i \.index.(html|htm)$ 0 75% 10080 | ||
| - | refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 | ||
| - | refresh_pattern . 1440 90% 10080 | ||
| - | # | ||
| - | quick_abort_min 0 KB | ||
| - | quick_abort_max 0 KB | ||
| - | quick_abort_pct 100 | ||
| - | store_avg_object_size 13 KB | ||
| - | |||
| - | # HTTP OPTIONS | ||
| - | # =========== | ||
| - | vary_ignore_expire on | ||
| - | |||
| - | # ANONIMITY OPTIONS | ||
| - | # =============== | ||
| - | |||
| - | request_header_access From deny all | ||
| - | request_header_access Server deny all | ||
| - | request_header_access Link deny all | ||
| - | request_header_access Via deny all | ||
| - | request_header_access X-Forwarded-For deny all | ||
| - | |||
| - | # TIMEOUTS | ||
| - | # ======= | ||
| - | |||
| - | forward_timeout 240 second | ||
| - | connect_timeout 30 second | ||
| - | peer_connect_timeout 5 second | ||
| - | read_timeout 600 second | ||
| - | request_timeout 60 second | ||
| - | shutdown_lifetime 10 second | ||
| - | |||
| - | # ADMINISTRATIVE PARAMETERS | ||
| - | # ===================== | ||
| - | |||
| - | cache_mgr routeur-debian | ||
| - | cache_effective_user proxy | ||
| - | cache_effective_group proxy | ||
| - | httpd_suppress_version_string on | ||
| - | visible_hostname routeur-debian | ||
| - | ftp_list_width 32 | ||
| - | ftp_passive on | ||
| - | ftp_sanitycheck on | ||
| - | |||
| - | # DNS OPTIONS | ||
| - | # ========== | ||
| - | |||
| - | dns_timeout 10 seconds | ||
| - | dns_nameservers 192.168.0.1 212.27.40.240 212.27.40.241 | ||
| - | |||
| - | # MISCELLANEOUS | ||
| - | # =========== | ||
| - | memory_pools off | ||
| - | client_db off | ||
| - | reload_into_ims on | ||
| - | coredump_dir /var/log/squid | ||
| - | pipeline_prefetch on | ||
| - | offline_mode off | ||
| - | </code> | ||
| - | |||
| - | * Copie du précédent fichier squid.conf : | ||
| - | <code root>mv /etc/squid3/squid.conf /etc/squid3/squid.conf-BAK2</code> | ||
| - | * Mise en place du nouveau fichier /etc/squid3/squid.conf | ||
| - | <code root>mv /home/hypathie/Téléchargements/my-squid.conf /etc/squid3/squid.conf</code> | ||
| - | |||
| - | * **Et quand on re-démarre squid3 :** | ||
| - | > Grâce à la directive ''cache_dir'' les fichiers du cache sont créés | ||
| - | <code root>/etc/init.d/squid3 start</code> | ||
| - | <code>2014/10/17 16:29:49| Creating Swap Directories | ||
| - | 2014/10/17 16:29:49| /var/spool/squid3 exists | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/00 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/01 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/02 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/03 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/04 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/05 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/06 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/07 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/08 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/09 | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/0A | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/0B | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/0C | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/0D | ||
| - | 2014/10/17 16:29:49| Making directories in /var/spool/squid3/0E | ||
| - | 2014/10/17 16:29:50| Making directories in /var/spool/squid3/0F | ||
| - | . ok </code> | ||
| <note> | <note> | ||
