Squid 反向代理服務器配置

簡介：

Squid 反向代理常用于服務器端，客戶端訪問 Squid 代理服務器的 80 端口，Squid 代理服務器根據配置去請求后端的 web 服務器，
?
?然后將請求到的信息保存在本地并回傳給客戶端，當又有客戶端請求相同資源時，Squid 代理服務器直接將緩存中的信息回傳給客戶端。

一、安裝 Squid

shell?>?ulimit?-n??#?默認打開文件描述符為?1024?，要增大它1024shell?>?vim?/etc/security/limits.conf*?-?nofile?65535

## 定義單個用戶的最大打開文件數為 65535 ，要重啟服務器生效 ，如果線上服務器不方便重啟，那么就使用 ulimit -n 65535 來臨時修改

shell?>?vim?/etc/selinux/configSELINUX=enforcing??#?將?enforcing?改為?disabled?，同樣要重啟服務器生效，不方便的話可以使用?setenforce?0?來臨時關閉?SELinuxshell?>?rebootshell?>?ulimit?-n65535shell?>?getenforce Disabled

## 再次確認已經修改成功

shell?>?yum?-y?install?squidshell?>?rpm?-qa?squid squid-3.1.10-29.el6.x86_64

二、配置反向代理

shell?>?mkdir?/opt/squid_cache??#?創建緩存目錄shell?>?chown?-R?squid.squid?/opt/squid_cache??#?更改屬主、屬組shell?>?>?/etc/squid/squid.conf??#?清空默認配置文件shell?>?vim?/etc/squid/squid.confcache_effective_user?squid cache_effective_group?squid##?啟動?Squid?用戶、組http_port?192.168.1.88:80?accel?vhost##?將端口監聽在?192.168.1.88?上,accel?指加速模式，vhost?用于轉發請求dns_nameservers?8.8.8.8##?為了使?Squid?能解析域名需定義真實?DNS?地址visible_hostname?study.localhost.localdomain##?計算機名，可以為?IP?地址，用于錯誤頁面的顯示cache_mgr?wangxiaoqiang888@163.com##?管理員郵箱地址，用于錯誤頁面上的顯示cache_mem?300?MB##?內存緩存大小，指定可以使用多少物理內存作為高速緩存。如果此服務器就是專門的緩存服務器，可以指定為物理內存的一半。否則不應大于三分之一cache_dir?ufs?/opt/squid_cache?4096?16?256##?緩存目錄大小為?4G?，這個可以按實際磁盤大小來定，有?16?二級目錄，每個二級目錄下有?256?個子目錄maximum_object_size?4?MB##?最大緩存文件大小為?4MB?，超過的直接傳給用戶，不作緩存cache_access_log?/var/log/squid/access.log##?訪問日志文件路徑，記錄了用戶訪問?Internet?的詳細信息，可以查看每用戶的上網記錄cache_log?/var/log/squid/cache.log##?緩存日志文件路徑，記錄了緩存相關的日志信息cache_store_log?/var/log/squid/store.log##?網頁緩存日志文件路徑，記錄了網頁在緩存中調用情況logfile_rotate?7##?日志輪轉，7?代表保留?6?個舊的日志跟?1?個新日志（?需配合?crond?來使用?）cache_swap_high?90##?緩存磁盤空間大于?90%?時自動清理cache_swap_low?80##?清理到?80%?時停止cache_peer?192.168.1.80?parent?80?0?originserver?name=sina cache_peer?192.168.1.80?parent?80?0?originserver?name=baidu##?cache_peer?指定后端服務器地址，80?為后端服務端口，0?為?ICP?端口號（多個?Squid?時用）,originserver?指定資源服務器，name?指定一個別名cache_peer_domain?sina?sina.com?www.sina.com cache_peer_domain?baidu?baidu.com?www.baidu.com##?指定對應關系，當用戶請求?baidu.com?或?www.baidu.com?時，轉發到別名為?baidu?的真實服務器上http_access?allow?all##?允許所有人訪問代理服務器（必須開啟）

三、初始化 Squid

shell?>?squid?-z2015/01/06?17:31:14|?Creating?Swap?Directories2015/01/06?17:31:14|?/opt/squid_cache?exists2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/002015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/012015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/022015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/032015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/042015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/052015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/062015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/072015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/082015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/092015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0A2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0B2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0C2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0D2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0E2015/01/06?17:31:14|?Making?directories?in?/opt/squid_cache/0F

四、啟動 Squid

shell?>?service?squid?start 正在啟動?squid：.??????????????????????????????????????????[確定] shell?>?chkconfig?--add?squid shell?>?chkconfig?--level?35?squid?on shell?>?netstat?-anpt?|?grep?squid tcp????????0??????0?192.168.1.88:3128???????????0.0.0.0:*???????????????????LISTEN??????2988/(squid)

五、測試

shell?>?cat?/var/log/squid/access.log?|?grep?TCP_MISS1420537525.011?????34?192.168.1.110?TCP_MISS/404?561?GET?http://alabo.com/favicon.ico?-?FIRST_UP_PARENT/www?text/html1420537527.279???1124?192.168.1.110?TCP_MISS/200?2028?GET?http://alabo.com/?-?FIRST_UP_PARENT/www?text/html1420537527.571????137?192.168.1.110?TCP_MISS/200?3271?GET?http://alabo.com/images/css.css?-?FIRST_UP_PARENT/www?text/css1420537528.193????621?192.168.1.110?TCP_MISS/200?140767?GET?http://alabo.com/images/benner6.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537528.205????770?192.168.1.110?TCP_MISS/200?68852?GET?http://alabo.com/images/benner1.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537528.599???1151?192.168.1.110?TCP_MISS/200?232817?GET?http://alabo.com/images/benner2.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537528.606????377?192.168.1.110?TCP_MISS/200?101177?GET?http://alabo.com/images/benner8.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537528.832???1381?192.168.1.110?TCP_MISS/200?210193?GET?http://alabo.com/images/benner4.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537529.101???1652?192.168.1.110?TCP_MISS/200?281791?GET?http://alabo.com/images/benner3.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537529.139????947?192.168.1.110?TCP_MISS/200?75526?GET?http://alabo.com/images/benner7.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537529.198???1747?192.168.1.110?TCP_MISS/200?244311?GET?http://alabo.com/images/benner5.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537529.572????959?192.168.1.110?TCP_MISS/200?287741?GET?http://alabo.com/images/bj1.jpg?-?FIRST_UP_PARENT/www?image/jpeg1420537530.190??????2?192.168.1.110?TCP_MISS/404?561?GET?http://alabo.com/favicon.ico?-?FIRST_UP_PARENT/www?text/html1420537531.790????200?192.168.1.110?TCP_MISS/200?2028?GET?http://alabo.com/?-?FIRST_UP_PARENT/www?text/html

## TCP_MISS 代表沒有被 Squid 緩存，而是從原始服務器取出的并返回給用戶的數據

shell?>?cat?/var/log/squid/access.log?|?grep?TCP_MEM_HIT1420537531.980??????0?192.168.1.110?TCP_MEM_HIT/200?3277?GET?http://alabo.com/images/css.css?-?NONE/-?text/css1420537532.009?????16?192.168.1.110?TCP_MEM_HIT/200?68858?GET?http://alabo.com/images/benner1.jpg?-?NONE/-?image/jpeg1420537532.050?????31?192.168.1.110?TCP_MEM_HIT/200?232823?GET?http://alabo.com/images/benner2.jpg?-?NONE/-?image/jpeg1420537532.108?????66?192.168.1.110?TCP_MEM_HIT/200?281797?GET?http://alabo.com/images/benner3.jpg?-?NONE/-?image/jpeg1420537532.199????139?192.168.1.110?TCP_MEM_HIT/200?210199?GET?http://alabo.com/images/benner4.jpg?-?NONE/-?image/jpeg1420537532.201????102?192.168.1.110?TCP_MEM_HIT/200?244317?GET?http://alabo.com/images/benner5.jpg?-?NONE/-?image/jpeg1420537532.326?????61?192.168.1.110?TCP_MEM_HIT/200?75532?GET?http://alabo.com/images/benner7.jpg?-?NONE/-?image/jpeg1420537532.330????112?192.168.1.110?TCP_MEM_HIT/200?140773?GET?http://alabo.com/images/benner6.jpg?-?NONE/-?image/jpeg1420537532.376?????71?192.168.1.110?TCP_MEM_HIT/200?101183?GET?http://alabo.com/images/benner8.jpg?-?NONE/-?image/jpeg1420537532.393????128?192.168.1.110?TCP_MEM_HIT/200?287747?GET?http://alabo.com/images/bj1.jpg?-?NONE/-?image/jpeg

## TCP_MEM_HIT 代表被 Squid 緩存到內存中并返回給用戶的數據

shell?>?cat?/var/log/squid/access.log?|?grep?TCP_HIT

## TCP_HIT 代表被 Squid 緩存到 cache 目錄（磁盤）中并返回給用戶的數據

本文轉自rshare 51CTO博客，原文鏈接：http://blog.51cto.com/1364952/1956734，如需轉載請自行聯系原作者

總結

以上是生活随笔為你收集整理的Squid 反向代理服务器配置的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。