Molweni nonke, ningandibiza ngokuba nguBrody. Ndiyingcali kwindawo yeziko ledatha, ikwangumfana othandana nelizwe le-linux kwinto elula yokuba yenza ubomi bam kwaye ndisebenze lula. Ycinge!
Ukusukela ngoku ukuya phambili, ndiza kukuphatha "wena" ngendlela engenabuntu, ngakumbi ngokuzithemba. Izifundo zam aziyi kuba malunga nokufaka inkonzo kwaye ngoku, ndiza kukunika lonke ulwazi kunye nezixhobo eziyimfuneko ukuze wenze olona phawu lubalaseleyo lwento nganye yesicelo, nayiphi na imibuzo ithumela umyalezo kwi-inbox
I-squid ayisiyo proxy kunye ne-cache kuphela, inokwenza okungaphezulu: lawula i-acl (uluhlu lokufikelela), umxholo wokucoca ulwelo, inokwenza nokuhluza i-ssl nkqu kwimowudi ebonakalayo (indlela yommeleli-ngaphandle kokumisela kuseto lwommeleli kwizikhangeli zakho , ifana nendoda embindini, akukho mntu waziyo ukuba ikhona). Ke ndihlala ndibona ukuba amandla esi sicelo aphulukene njani nokungazi ukumisela indawo nganye.
Kodwa izinto zokuqala kuqala, masiqwalasele inqaku le ummeli.
Faka:
Ukufaka ngokufanelekileyo i-squid3
Hlela ifayile yoqwalaselo:
vi /etc/squid3/squid.conf
- http_port ip: izibuko
Umzekelo unokuba http_port 172.16.128.50: 3128 Inkonzo iya kubonelelwa yi-IP echaziweyo kunye nezibuko, ngakumbi andizukucebisa ukuba kushiye i-port 3128 ngokungagqibekanga kwindawo yemveliso.
- I-acl yendawo yenethiwekhi src ip / mask
Umzekelo unokuba acl yekhaya src 172.168.128.0/24 uluhlu lokufikelela ngokubanzi (njengemacro ngokusemandleni) eya kuthi ibe nokufikelela kule nkonzo. i-localnet yile ibizwa ngokuba yi-acl, kodwa ungabeka naliphi na igama olifunayo apho.
- http_access vumela i-localnet
Senzlo http_access vumela yekhaya kwaigama elifanayo olibeka kwinto yangaphambili, apha sivumela le nethiwekhi ukuba ijonge kwaye isebenzise iinkonzo zeskwidi
- ngokukhawuleza_bort_min 0KB
- ngokukhawuleza_abort_max 0KB
Ixesha lokulahla isicelo. Ndiza kuyicacisa ngakumbi: xa umsebenzisi ekhangela kwiproksi yakho kwaye erhoxisa isicelo okanye ukhuphelo, unokukhetha okungama-3, ukuba ukhuphelo lungaphantsi ngokukhawuleza_mizuzu_mfutshane I-80KB emva koko iSkid iya kuyikhuphela, ukuba ukhuphelo lilahlekile ngaphezulu ngokukhawuleza_abort_max I-150 KB iya kucinywa ngoko nangoko, ukuba zombini zisetelwe kwi-0KB njengoko kunjalo, ukhuphelo luphela kwakamsinya nje xa umsebenzisi erhoxisa.
- funda_kuphuma imizuzu emi-5
Eli lixesha leseshoni yeseshoni eya kuvulwa okoko nje kungekho kufundwa kutsha, umzekelo kwiphepha le-tuli, ixabiso eliphezulu kakhulu alifuneki kodwa kumaphepha anamandla anjenge-facebook eli lixabiso elamkelekileyo
- isicelo_kuphuma imizuzu emi-3
Eli xabiso linokuba sezantsi kakhulu, kuxhomekeke kumgangatho wonxibelelwano lweseva yakho kunye nenani labathengi onabo. Le parameter ibhekisa kwelona xesha liphezulu lokulinda ii-headers ze-http zesicelo, emva kokuseka unxibelelwano.
- abathengi abasisiqingatha_bavaliwe
Ithintela isiqingatha sonxibelelwano oluvaliweyo ngenxa yeempazamo zonxibelelwano. Awufuni ukuchitha izixhobo zakho zeseva phantsi kwazo naziphi na iimeko.
- shutdown_lifetime imizuzwana eli-15
Le thegi ivumela ukunciphisa ixesha lokulinda ukuvala iinkqubo ze-squid xa usenza i-SIGTERM okanye i-SIGHUP
- log_icp_queries icinyiwe
Oku ndikushiyela kubulumko bakho, ngokungagqibekanga kuyeza, kwaye kukuloga kwilog umbuzo ngamnye owenziwe kwindawo yokugcina izinto ezimeleyo.
- dns_nameservers 8.8.4.4 8 8.8.8.8
Imibuzo ye-DNS iyakwenziwa kwezi ip zihlukaniswe yindawo, ukuba akukho namnye uchaziweyo, i-DNS yenkqubo yakho isetyenziswa ngokungagqibekanga
- dns_v4_first kwi
Kulungile kuxhomekeke kwilizwe okanye useto lwendalo yakho, kodwa kwimeko yam andinayo IPv6 DNS, ke icwangcisa ngokwendalo ukuba yonke into kuboniswane nayo kuqala kwi-ipv4
- ipcache_size 2048
Elona nani liphezulu lamangenelo kwi-squid dns cache
- ipcache_ehlisa 90
Ubungakanani obuncinci bokungena kwe-dns cache.
- fqdncache_ubungakanani 4096
Elona nani liphezulu lokungeniswa kwe-FQDN kwi-cache
- memory_pools kucinyiwe
Senza ukuba inkumbulo ye-RAM igcinelwe iinkqubo ze-squid ezizayo, ukuba sisibonelelo esinqabileyo kwiserver yakho
- dlulisele_ukucima
Ukuba ufuna ukubathintela ekuboneni i-ip yangasese kwi-wan, izicelo ziya kufika ngento engaziwayo, okanye kwimeko apho ru ip wan
siqala i-cache
iskwidi3 -z
Siqala inkonzo kwakhona
I-squid3 yokuqalisa kwakhona
Ukugqiba kufuneka ubeke kwisikhangeli sakho, kukhetho lwommeleli ip kunye nezibuko, ukulungele kufuneka ubrawuza
Oku kwenzelwe lo msitho, uyazi ukuba ngale nto uyakuba neskwidi esomeleleyo, kwizithuba ezizayo siza kubamba isilwanyana esine squid
Ukugqwesa, inyathelo ngenyathelo lokufundisa. eyona nto ndiyithandayo yayiyinkcazo yokhetho ngokhetho lokumiswa kwakhona.
Eyona bendiyithanda kakhulu lukhetho loku:
ngokukhawuleza_bort_min 0KB
ngokukhawuleza_abort_max 0KB
Ndiyakholelwa ukuba oku kubaluleke kakhulu kuba amaxesha amaninzi umsebenzisi angalahla (rhoxisa) ngenxa yeX imeko yokukhuphela sele izakuphela kwaye le parameter iqikelelwa kakuhle ngokwezixhobo zekhompyuter yethu ingasivumela ukuba siqhubeke nokukhuphela, kuba kunokwenzeka Njengomsebenzisi omnye okanye omnye angazama ngexesha elifutshane ukuzama ukuphinda ukhuphele into enye, ukugcina ukugcwala kwi-intanethi.
Ndilungise xa ndiphosakele, BrodyDalle?
Ewe hayi, ndiza kukuchaza.
Ewe ukhuphelo luya kuphela ngempumelelo nokuba umsebenzisi urhoxisile, kuphela xa umsebenzisi okanye omnye ezama ukukhuphela usetyenziso okanye iphepha lewebhu, iskwidi siza kuzisa ikopi esele inayo kwaye ayiyi kwi-Intanethi. khuphela idatha kwakhona. Ngoku jonga apha isiphumo sokuphinda uqalise ngumphathi wokukhuphela kuphela ogcina idatha kwindawo efihlakeleyo yomatshini wakho ixesha elimiselweyo kwaye ikuvumela ukuba uqalise kwakhona ukhuphelo olurhoxisiweyo okanye oluphazamisekileyo, ayisi squid.
Kwizifundo zexesha elizayo ndiza kunika iskwidi njenge-cache kakuhle, ukuze ungachithi izixhobo ze-WAN (Intanethi) zenethiwekhi yakho
Inqaku elihle ndilifundayo malunga ne-squid kunye nokuphunyezwa kwayo enkosi kakhulu iza kuluncedo
Enkosi, qaphela ukuba kwizifundo zexesha elizayo ndiza kunika iskwidi njenge-cache kakuhle, ukuze ungachithi izixhobo ze-WAN (Intanethi) zenethiwekhi yakho
isifundo esikhulu sihlala silungile ukwandisa ulwazi. Masinwabe
Molweni, okokuqala enkosi ngesihloko, iinkcazo kunye nolwazi olunikiweyo. Ndinokuninzi ukuze ndiphawule, umbuzo. Ndizisa etafileni ingxaki eyenzeke kum nge-squid3 kwi-Debian, kuvela ukuba ngenye imini entle, kwiinyanga ezidlulileyo, ndayihlaziya inkqubo kunye nolu hlaziyo kweza inguqulelo entsha ye-squid, 3.5, ukusuka apho ummeleli ngasekhohlo ukudlulisa lonke uqhagamshelo lwe-HTTPS, oko kukuthi, kwangoko andisavuli https // www.google.com.cu, https://www.facebook.com nayo nayiphi na into esebenzisa umthetho okhuselekileyo we-HTTPS. Ukuphanda kancinci, ndafumanisa ukuba ingxaki yayikukusingathwa kwe-SSL, into ethile uDebian wayeka ukupakisha nge-squid3 ngezizathu zomthetho kunye nefilosofi. AKUFUNEKI nditsho ukungonwabi okukhoyo kwiqumrhu ngeentsuku endizame ukusombulula le "ngxaki" endingenakukwazi ukuyilungisa, kodwa ndibuyele kuhlobo lwangaphambili lwe-Squid3 ndaza ndagcina iphakheji ngokufanelekileyo ukuyikhusela ekuhlaziyweni kwakhona. Kwisiza apho kubikwa khona i-squid bugs, wathetha nge-bug ebizwa ngokuba yi "squid-in-the-middle", kwaye walumkisa ukuba zonke i-squid ukusuka ku-3.4.8 ukubheka phambili babesemngciphekweni, ke ngoko bacebisa ukuvuselelwa kuhlobo Kutshanje kwaye kuqulunqwe i-squid nge-SSL + ukuseta ukwenza izatifikethi ngesandla…. NDIYACELA! Ukuba umntu ukhe wadibana nale meko wayisombulula, ndingathanda ukuba nobubele kwaye undinike ukukhanya kulo mbandela kwaye ukuba akunjalo, ubuncinci ndiveze ukuba kwenzeke into efanayo ... kwaye sisisombululo esithini. Enkosi.
Okwangoku eDebian uJessie ufumaneka kuphela kude kube yinguqulelo 3.4.8-6 + deb8u1… Nangona kunjalo ndiyakuxelela ukuba ungasebenzisa i-ssl bump ukuba usebenzisa isikwidi ngendlela ebonakalayo. http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit…. Andilithandabuzi igalelo lakho, kungekudala ndiza kufaka ingxelo entsha kwiwebhusayithi yayo esemthethweni
Kulungile kusasa,
Ngokubhekisele kwintsebenzo, ngaba kufanelekile ukuyifaka kwiRaspberry Pi 2?
Enkosi kwangaphambili, imibuliso.
Sawubona,
Isifundo esihle, kodwa ndinombuzo: ngokwendlela yokusebenza, ngaba kufanelekile ukuyifaka kwiRaspberry Pi 2?
Ukubulisa
Impendulo emfutshane nguHayi ... ungayenza kodwa amanqaku athile anje ngonxibelelwano lwenethiwekhi, iprosesa, idiski uninzi lweebhotile zakho. Ngoku ukuba usafuna ukusebenza njengommeleli, ndicinga ukuba iproxy encinci ingcono
Enkosi ngokuthatha kwakho inxaxheba
Ngaba unamava nge-squid ngaphakathi kwe-pfSense?
ewe, yintoni ekufuneka uyazi? ukubona ukuba ndingakunceda na.
Isifundo esifanelekileyo, esele silungile ixesha. Andazi kangako malunga nomcimbi.Ngoku ndifaka ummeleli kwinkampani yam kunye ne squid.conf kwinguqulelo yangaphambili kwaye kukho izinto ezitshintshe is syntax. Undikhonze kakhulu. Ndiza kuqhubeka ndilinde icandelo 2.
Imibulelo emininzi
Enkosi ngengcaciso yakho, ngokuxhomekeka kwinxalenye yesibini yeskwidi malunga nendlela yokugcina i-cache izakufumaneka kungekudala.
Ukugqwesa, kwakudala ndisebenzisa i-ubuntu server kunye ne-squid kwaye ibaleke kakuhle ngoku ndikhutshiwe kwi-linux kangangexesha elithile kwaye ndingathanda ukubuyela kumcimbi weeseva ezigciniweyo ukunika ukusebenza okungcono kwimicimbi ye-wisp, enkosi ngegalelo lakho Brody!
Molo, uncedo lwakho luhle kakhulu, ndingene kumcimbi we-IPV6 nge-DNS kwaye ndinengxaki apho. Xa kungekho web ine-IPV6 ibonakala izakusebenzela mna, ke ndifuna ukwazi ukuba i-dns_v4_first kuqwalaselo kufuneka yenziwe ngaphambi kokuba ihlanganiswe i-squid, kuba ngo-3.3.8 ibingazukusebenza.
Ulungile ekuseni
Ukuqala, le tutorial ibe luncedo kakhulu. Ngoku ndibonisa elam ityala, kuba andazi ukuba nge-squid ndingayisombulula na intswelo yam okanye kufuneka ndikhangele enye indlela.
Ndinesicelo esiqwalaselweyo kwimeko ye-AWS EC2, ekufuneka yenze izicelo kwi-amazon api, ingxaki ivela xa ezi zicelo zikhulu, ke amazon ayazibona i-ip kwaye azikhabe ezi zicelo okwexeshana, zivelisa iingxaki Isicelo ndinaso. Ukusombulula oku, sisebenzisa inkonzo yeProxymesh, ethatha isicelo kwaye siyithumele kwenye ye-ip's, ngaloo ndlela kuthintelwe ukubhloka, inyani yile yokuba, xa sisenza isicelo kwi-amazon, siyenza nge-curl kwi-php, sinika njengenketho yokuxhuma kwi-proxymesh. Ngoku ndikhangele ukuba kungenzeka ukuba ivela kwimeko enokuthi iqwalaselwe xa izicelo zenziwe kwi-amazon api, ziye ngqo kwinkonzo yommeleli ukuze ibe nguye ophetheyo ukuthumela isicelo kwindawo yokugqibela. Ngaba kunokwenzeka ukuba uphinde wenze oku kwakhona nge-squid okanye ucebisa ngenye indlela?
Enkosi kakhulu.
Ngaba ukhona umntu ozamile izikimu zokuqinisekisa ezininzi kwiskwidi? Ndinenguqulo engu-3.5.22 efakwe kwi-debian kwaye nangona ndizamile iindlela ezahlukeneyo azisebenzi, imeko yam kukuba ndifuna bobabini abasebenzisi be-AD kunye nabanye abasebenzisi bangaphandle ukuze bakwazi ukungena, ukuba basebenzela ngokwahlukileyo kum okanye i-ntml kubasebenzisi be Isizinda singene ngaphakathi kwaye sisisiseko (ncsa) sangaphandle kodwa hayi zombini ngaxeshanye. naluphi na uncedo luya kuba luncedo. Ndiyabulela kwangoko
Molo, andazi ukuba kutheni, bendifake i-squid ngaphandle kweengxaki, kodwa xa ndiyivuselelayo kwinguqulo 3.5 ifayile yokungena.log yaqala ukuhlala ingenanto, ayisayigcini idatha xa ibifudula. Andazi ukuba kufuneka ndibone kwaye ndisebenzise i-WPAD ukuze ndingaphinde ndisebenzise ukucwangciswa okungafihli nto, kunye nokususa ulungelelwaniso kwakhona kwizibuko lama-80 ukuya kuma-3128 njengoko kuqhele ukwenziwa, kuba i-wpad leyo ilawula ayisekho mfuneko.
Kungenxa yoko le nto ukufikelela.log ngoku kungasasebenziyo ukurekhoda umsebenzi?
Masinwabe !!
Isikhokelo esihle kakhulu!
Ndisebenzise i-squid njengommeleli wewebhu okwethutyana, kodwa mva nje ndiyabona ukuba kuthatha ixesha elide ukukhangela okanye ukuvula amaphepha ... kungafuneka ndicoca i-cache?
Umntu othile usebenze ngeskwidi nge-mkt, isebenza njani?
Phendula nge quote
Ulwazi oluhle kakhulu, uxolo ukuba ndingazibandakanya njani ne-squid kunye nolawulo olusebenzayo ukuze ngexesha lokungena kwiphepha elivaliweyo lindibuze igama lomsebenzisi kunye negama eligqithisiweyo leakhawunti ye-directory esebenzayo kwaye ukuba umsebenzisi uthe unemvume yokungena kwiphepha ndiza kukunika ukufikelela.
Sawubona,
Isikhokelo esigqwesileyo, nangona kunjalo kwaye ungandikhokela kuba andikuniki nje, ndine-20MB yefayibha ye-intanethi kunye ne-squid 3.1 ekhwele kwi-centos 6.9 kwaye ndikhonza malunga nabasebenzisi abangama-300 ngaphambi kokuba ndibenekhonkco le-4MB kunye ne-squid 3.1 nenani elifanayo abasebenzisi kwaye ngokucacileyo yonke into ihamba kancinci kwaye ikhankanyiwe kumlawuli (mna) Ndityhola ikhonkco, ndade ndabafumana ukuba bayitshintshe kwaye i-intanethi iyacotha, ndaphinda ndayibuyisela i-OS, ndayiqwalasela i-squid 3.1 kwaye akukho nto iyenye engakhawulezisiyo ndenza umlinganiso isantya esivela kumthengi weskwidi kwaye indinika i-18 ukuya kwi-20 MB kodwa ndihlala ndikhankanywa kuba inkonzo iyacotha
Ukuba wena okanye umntu onengxaki efanayo unokundinika ukukhanya, ndiza kubabulela ngokungapheliyo.
Kwenzeka ntoni ngeedilesi, ngaba zitshintshelwe kwidilesi yenethiwekhi yakho okanye ezo uzisebenzisayo ziyasetyenziswa.
Ndifunda nge-squid debian kunye nokuphunyezwa kwayo, enkosi kakhulu, iza iluncedo. kodwa indinika iingxaki ngonxibelelwano kwaye ndikhangela ukuba inika impazamo kwaye kubonakala ukuba yonke into ihamba kakuhle.