Squid\u662f\u4e00\u4e2a\u7f13\u5b58internet\u6570\u636e\u7684\u4e00\u4e2a\u8f6f\u4ef6\uff0c\u5b83\u63a5\u6536\u7528\u6237\u7684\u4e0b\u8f7d\u7533\u8bf7\uff0c\u5e76\u81ea\u52a8\u5904\u7406\u6240\u4e0b\u8f7d\u7684\u6570\u636e\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u5f53\u4e00\u4e2a\u7528\u6237\u8c61\u8981\u4e0b\u8f7d\u4e00\u4e2a\u4e3b\u9875\u65f6\uff0c\u5b83\u5411 Squid\u53d1\u51fa\u4e00\u4e2a\u7533\u8bf7\uff0c\u8981Squid\u66ff\u5b83\u4e0b\u8f7d\uff0c\u7136\u540eSquid \u8fde\u63a5\u6240\u7533\u8bf7\u7f51\u7ad9\u5e76\u8bf7\u6c42\u8be5\u4e3b\u9875\uff0c\u63a5\u7740\u628a\u8be5\u4e3b\u9875\u4f20\u7ed9\u7528\u6237\u540c\u65f6\u4fdd\u7559\u4e00\u4e2a\u5907\u4efd\uff0c\u5f53\u522b\u7684\u7528\u6237\u7533\u8bf7\u540c\u6837\u7684\u9875\u9762\u65f6\uff0cSquid\u628a\u4fdd\u5b58\u7684\u5907\u4efd\u7acb\u5373\u4f20\u7ed9\u7528\u6237\uff0c\u4f7f\u7528\u6237\u89c9\u5f97\u901f\u5ea6\u76f8\u5f53\u5feb\u3002<\/p>\n
\u5b89\u88c5
yum install squid<\/p>\n
\u4fee\u6539\u914d\u7f6e\u6587\u4ef6 \/etc\/squid\/squid.conf
\uff08\u5982\u679c\u8be5\u6587\u4ef6\u914d\u7f6e\u574f\u6389\u4e86\uff0c\u6709 squid.conf.default \u53ef\u4ee5\u5907\u7528\uff0c\u4e24\u4e2a\u6587\u4ef6\u5728\u521a\u5b89\u88c5\u540e\u662f\u4e00\u6a21\u4e00\u6837\u7684\uff09<\/p>\n
# squid \u7aef\u53e3\uff0c\u9ed8\u8ba4\u662f3128
http_port 3128<\/p>\n
# \u6307\u5b9a\u786c\u76d8\u7f13\u51b2\u533a\u7684\u5927\u5c0f
# ufs: \u7f13\u5b58\u7c7b\u578b
# \/var\/spool\/squid\uff1a\u7f13\u5b58\u76ee\u5f55
# 300\uff1a\u7f13\u5b58\u5927\u5c0f\uff08Mbytes\uff09
# \u5141\u8bb8\u5728\u201c\/tmp\u201d\u4e0b\u521b\u5efa\u7684\u7b2c\u4e00\u7ea7\u5b50\u76ee\u5f55\u6570\u4e3a16\uff0c\u6bcf\u4e2a\u7b2c\u4e00\u7ea7\u5b50\u76ee\u5f55\u4e0b\u53ef\u4ee5\u521b\u5efa\u7684\u7b2c\u4e8c\u7ea7\u5b50\u76ee\u5f55\u6570\u91cf\u4e3a256
cache_dir ufs \/var\/spool\/squid 300 16 256<\/p>\n
# \u81ea\u5b9a\u4e49\u67d0\u4e2aIP\u6216\u8005\u67d0\u7f51\u6bb5\uff0c\u4f7f\u7528 http_access \u9009\u9879\u5141\u8bb8\u8be5\u5217\u8868
acl our_networks src 11.11.11.11\/255.255.255.255
acl our_networks src 12.12.12.12\/29
http_access allow our_networks<\/p>\n
# \u670d\u52a1\u5668\u7684\u4e3b\u673a\u540d\uff0c\u53ef\u968f\u4fbf\u5b9a\u4e49
visible_hostname 221_170<\/p>\n
# \u5173\u95ed\u6b64\u9879\u5c06\u5728\u8bbf\u95ee\u7f51\u7ad9\u65f6\u663e\u793a\u7684IP\u662funknown\uff0c\u5982\u679c\u6253\u5f00\u5219\u663e\u793a\u7684\u662f\u4f60client\u7684\u5185\u7f51IP
forwarded_for off<\/p>\n
# \u9632\u6b62\u77e5\u9053\u5ba2\u6237\u7684\u5185\u90e8 ip
header_access Via deny all<\/p>\n
# \u9632\u6b62\u77e5\u9053\u4ee3\u7406\u670d\u52a1\u5668\u7684\u670d\u52a1\u5668\u540d\u4ee5\u53ca\u7aef\u53e3
header_access X-Forwarded-For deny all<\/p>\n
\u542f\u52a8 squid
service squid start<\/p>\n
squid \u7684 log\uff1a\/var\/log\/squid\/
access.log cache.log squid.out store.log<\/p>\n
\u7ed9\u51fa\u4e00\u4e9b header\uff0c\u53ef\u4ee5\u5c4f\u853d\u5b83\u4eec<\/p>\n
Accept HTTP_ACCEPT
Accept-Charset HTTP_ACCEPT-CHARSET
Accept-Encoding HTTP_ACCEPT-ENCODING
Accept-Language HTTP_ACCEPT-LANGUAGE
Accept-Ranges HTTP_ACCEPT-RANGES
Age HTTP_AGE
Allow HTTP_ALLOW
Authorization HTTP_AUTHORIZATION
Cache-Control HTTP_CACHE-CONTROL
Connection HTTP_CONNECTION
Content-Base HTTP_CONTENT-BASE
Content-Disposition HTTP_CONTENT-DISPOSITION
Content-Encoding HTTP_CONTENT-ENCODING
Content-Language HTTP_CONTENT-LANGUAGE
Content-Length HTTP_CONTENT-LENGTH
Content-Location HTTP_CONTENT-LOCATION
Content-MD5 HTTP_CONTENT-MD5
Content-Range HTTP_CONTENT-RANGE
Content-Type HTTP_CONTENT-TYPE
Cookie HTTP_COOKIE
Date HTTP_DATE
ETag HTTP_ETAG
Expires HTTP_EXPIRES
From HTTP_FROM
Host HTTP_HOST
If-Match HTTP_IF-MATCH
If-Modified-Since HTTP_IF-MODIFIED-SINCE
If-None-Match HTTP_IF-NONE-MATCH
If-Range HTTP_IF-RANGE
Last-Modified HTTP_LAST-MODIFIED
Link HTTP_LINK
Location HTTP_LOCATION
Max-Forwards HTTP_MAX-FORWARDS
Mime-Version HTTP_MIME-VERSION
Pragma HTTP_PRAGMA
Proxy-Authenticate HTTP_PROXY-AUTHENTICATE
Proxy-Authentication-Info HTTP_PROXY-AUTHENTICATION-INFO
Proxy-Authorization HTTP_PROXY-AUTHORIZATION
Proxy-Connection HTTP_PROXY-CONNECTION
Public HTTP_PUBLIC
Range HTTP_RANGE
Referer HTTP_REFERER
Request-Range HTTP_REQUEST-RANGE
Retry-After HTTP_RETRY-AFTER
Server HTTP_SERVER
Set-Cookie HTTP_SET-COOKIE
Title HTTP_TITLE
Transfer-Encoding HTTP_TRANSFER-ENCODING
Upgrade HTTP_UPGRADE
User-Agent HTTP_USER-AGENT
Vary HTTP_VARY
Via HTTP_VIA
Warning HTTP_WARNING
WWW-Authenticate HTTP_WWW-AUTHENTICATE
Authentication-Info HTTP_AUTHENTICATION-INFO
X-Cache HTTP_X-CACHE
X-Cache-Lookup HTTP_X-CACHE-LOOKUP
X-Forwarded-For HTTP_X-FORWARDED-FOR
X-Request-URI HTTP_X-REQUEST-URI
X-Squid-Error HTTP_X-SQUID-ERROR
Negotiate HTTP_NEGOTIATE
X-Accelerator-Vary HTTP_X-ACCELERATOR-VARY
Squid \u7528\u6237\u540d\u5bc6\u7801\u8ba4\u8bc1
\u5229\u7528 apache \u643a\u5e26\u7684\u5de5\u5177 htpasswd \u751f\u6210\u5bc6\u7801\u6587\u4ef6\u5e76\u6dfb\u52a0\u76f8\u5e94\u7684\u7528\u6237\u4fe1\u606f\uff0c\u53ef\u80fd\u9700\u8981\u5199\u5168 htpasswd \u7684\u8def\u5f84(\u5982\u679c\u8fd9\u4e2a\u670d\u52a1\u5668\u4e0a\u6709\u82e5\u5e72\u7f51\u7ad9\uff0c\u9009\u62e9\u4f7f\u752880\u7aef\u53e3\u7684\u90a3\u4e2a\u76ee\u5f55\u4e0b\u7684htpasswd)
\/usr\/bin\/htpasswd -c \/etc\/squid\/passwd testuser
\u6839\u636e\u63d0\u793a\u8f93\u5165\u5bc6\u7801\uff1a1234
\u6210\u529f\u540e\u5c06\u4f1a\u5728 \/etc\/squid\/passwd \u4e2d\u5199\u5165\uff1a
testuser:cuUEnEwyMTcGY
\u7b2c\u4e00\u5217\u8868\u660e\u7528\u6237\u540d\uff0c\u7b2c\u4e8c\u5217\u8868\u660e\u5bc6\u7801<\/p>\n
\u4fee\u6539 squid \u914d\u7f6e\u6587\u4ef6:
# \u5b9a\u4e49\u4e86\u8ba4\u8bc1\u65b9\u5f0f\u4e3a basic\uff0c\u8ba4\u8bc1\u7a0b\u5e8f\u7684\u8def\u5f84\uff0c\u8ba4\u8bc1\u7a0b\u5ea6\u9700\u8981\u8bfb\u53d6\u7684\u5e10\u6237\u6587\u4ef6\uff08\u6ce8\u610f ncsa_auth \u548c \u4e0a\u4e2a\u6b65\u9aa4\u5efa\u7acb\u7684 passwd \u7684\u8def\u5f84\uff09
auth_param basic program \/usr\/lib\/squid\/ncsa_auth \/etc\/squid\/passwd
# \u81ea\u5b9a\u4e49\u4e00\u6761\u540d\u4e3a auth_user \u7684ACL\uff0cACL\u7c7b\u578b\u4e3a proxy_auth \u901a\u8fc7\u5916\u90e8\u7a0b\u5e8f\u8fdb\u884c\u7528\u6237\u8ba4\u8bc1\u65b9\u5f0f\uff0c\u5217\u8868\u503c\u4e3aREQUIRED\uff0c\u8bf4\u660e\u63a5\u53d7\u6240\u6709\u5408\u6cd5\u7528\u6237\u7684\u8bbf\u95ee\uff0c\u7136\u540e\u4f7f\u7528 http_access \u9009\u9879\u5141\u8bb8\u8be5\u5217\u8868
acl auth_user proxy_auth REQUIRED
http_access allow auth_user<\/p>\n
\u4f53\u9a8c\uff1a
– \u5728\u6ca1\u6709\u5f00\u542f\u7528\u6237\u540d\u5bc6\u7801\u8ba4\u8bc1\u65f6\uff0c\u80fd\u6210\u529f\u5730\u53ea\u5141\u8bb8\u67d0\u4e9b IP \u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u5e76\u4e14\u5c4f\u853d\u6389\u5ba2\u6237\u7aef\u7684\u4fe1\u606f\u3002
– \u5f53\u5f00\u542f\u7528\u6237\u540d\u5bc6\u7801\u8ba4\u8bc1\u65f6\uff0c\u53ea\u8981\u9a8c\u8bc1\u6210\u529f\uff0c\u65e0\u8bba IP \u662f\u4ec0\u4e48\uff0c\u90fd\u80fd\u591f\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n
\u9a8c\u8bc1\u65b9\u6cd5\uff1a
\u6d4f\u89c8\u5668\u83dc\u5355 \u2013 \u5de5\u5177 \u2013 Internet\u9009\u9879 \u2013 \u8fde\u63a5 \u2013 \u5c40\u57df\u7f51\u8bbe\u7f6e \u2013 \u52fe\u9009\u201c\u4e3aLAN\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u201d\uff0c\u8f93\u5165\u4ee3\u7406\u670d\u52a1\u5668\u7684IP\u548c\u7aef\u53e3<\/p>\n
\u7136\u540e\u770b\u662f\u5426\u80fd\u6b63\u5e38\u6d4f\u89c8\u7f51\u9875\uff0c\u5982\u679c\u662f\u901a\u8fc7\u7528\u6237\u540d\u5bc6\u7801\u9a8c\u8bc1\u7684\uff0c\u5219\u4f1a\u8df3\u51fa\u9a8c\u8bc1\u6846\uff0c\u5982\u679c\u4e0d\u5728IP\u5141\u8bb8\u5217\u8868\u91cc\uff0c\u5219\u663e\u793a\u7684\u9875\u9762\u662f\u7981\u6b62\u8bbf\u95ee\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
Squid\u662f\u4e00\u4e2a\u7f13\u5b58internet\u6570\u636e\u7684\u4e00\u4e2a\u8f6f\u4ef6\uff0c\u5b83\u63a5\u6536\u7528\u6237\u7684\u4e0b\u8f7d\u7533\u8bf7\uff0c\u5e76\u81ea\u52a8\u5904\u7406\u6240\u4e0b\u8f7d\u7684\u6570\u636e\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u5f53 … \u7ee7\u7eed\u9605\u8bfbCentOS Squid Server \u5b89\u88c5\u914d\u7f6e<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117],"tags":[79,78,90,89],"class_list":["post-343","post","type-post","status-publish","format-standard","hentry","category-network","tag-centos","tag-linux","tag-proxy","tag-squid"],"_links":{"self":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts\/343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=343"}],"version-history":[{"count":0,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts\/343\/revisions"}],"wp:attachment":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}