squid安装测试
[root@www root]# wget http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE23.tar.gz
[root@www root]# tar zxvf squid-2.6.STABLE23.tar.gz
[root@www root]# cd squid-2.6.STABLE23
[root@www squid-2.6.STABLE23]# ./congfiure
[root@www squid-2.6.STABLE23]# make && make install
[root@www squid-2.6.STABLE23]# cd /usr/local/squid/
[root@www var]# mkdir cache #建立缓存目录
[root@www var]# ls
cache logs
[root@www var]# chmod 777 cache #为缓存目录添加属性
[root@www var]# ../sbin/squid -z #初始化缓存目录，在cache目录下会自动生成若干文件夹
2010/01/26 11:02:09| Creating Swap Directories
[root@www var]# ../sbin/squid -NCd1
WARNING: Cannot write log file: /usr/local/squid/var/logs/cache.log
/usr/local/squid/var/logs/cache.log: Permission denied
messages will be sent to 'stderr'.
2010/01/26 11:24:19| WARNING: Closing open FD 2
2010/01/26 11:24:19| Starting Squid Cache version 2.6.STABLE23 for i686-pc-linux-gnu...
2010/01/26 11:24:19| Process ID 28736
2010/01/26 11:24:19| With 32768 file descriptors available
2010/01/26 11:24:19| Using epoll for the IO loop
2010/01/26 11:24:19| Performing DNS Tests...
2010/01/26 11:24:19| Successful DNS name lookup tests...
2010/01/26 11:24:19| DNS Socket created at 0.0.0.0, port 36922, FD 5
2010/01/26 11:24:19| Adding nameserver 192.168.10.1 from /etc/resolv.conf
2010/01/26 11:24:19| Adding nameserver 202.96.209.5 from /etc/resolv.conf
2010/01/26 11:24:19| Adding nameserver 202.96.209.6 from /etc/resolv.conf
FATAL: Cannot open '/usr/local/squid/var/logs/access.log' for writing.
The parent directory must be writeable by the
user 'nobody', which is the cache_effective_user
set in squid.conf.
Squid Cache (Version 2.6.STABLE23): Terminated abnormally.
CPU Usage: 0.000 seconds = 0.000 user + 0.000 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
Aborted
[root@www var]# groupadd squid
[root@www var]# useradd -g squid squid
[root@www var]# chown squid:squid /usr/local/squid/var/
[root@www var]# ../sbin/squid -NCd1 #以DEBUG模式启动
WARNING: Cannot write log file: /usr/local/squid/var/logs/cache.log
[root@www var]# chmod 777 logs #一定要为logs添加写权限
[root@www var]# vi /usr/local/squid/etc/squid.conf
#start
http_port 83 vhost defaultsite=com.cn
icp_port 0
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
log_mime_hdrs on
cache_vary on
via off
strip_query_terms on
persistent_request_timeout 60 seconds
client_persistent_connections on
server_persistent_connections on
cache_mem 40 MB
memory_pools on
hosts_file /etc/hosts.squid
cache_mgr test@gmail.com
cache_effective_user squid
cache_effective_group squid
visible_hostname test.com.cn
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 192.168.10.80
acl to_localhost dst 192.168.10.3
http_access allow all
http_reply_access allow all
cachemgr_passwd none all
icp_access deny all
reply_body_max_size 0 allow all
always_direct allow all
#end
[root@www var]# ../sbin/squid -NCd1 #若无误，会出现类似下面的信息
2010/01/26 11:34:03| Starting Squid Cache version 2.6.STABLE23 for i686-pc-linux-gnu...
2010/01/26 11:34:03| Process ID 28996
2010/01/26 11:34:03| With 32768 file descriptors available
2010/01/26 11:34:03| Using epoll for the IO loop
2010/01/26 11:34:03| Performing DNS Tests...
2010/01/26 11:34:03| Successful DNS name lookup tests...
2010/01/26 11:34:03| DNS Socket created at 0.0.0.0, port 36922, FD 6
2010/01/26 11:34:03| Adding nameserver 192.168.10.1 from /etc/resolv.conf
2010/01/26 11:34:03| Adding nameserver 202.96.209.5 from /etc/resolv.conf
2010/01/26 11:34:03| Adding nameserver 202.96.209.6 from /etc/resolv.conf
2010/01/26 11:34:03| Unlinkd pipe opened on FD 11
2010/01/26 11:34:03| Swap maxSize 102400 + 8192 KB, estimated 0 objects
2010/01/26 11:34:03| Target number of buckets: 425
2010/01/26 11:34:03| Using 8192 Store buckets
2010/01/26 11:34:03| Max Mem size: 8192 KB
2010/01/26 11:34:03| Max Swap size: 102400 KB
2010/01/26 11:34:03| Rebuilding storage in /usr/local/squid/var/cache (DIRTY)
2010/01/26 11:34:03| Using Least Load store dir selection
2010/01/26 11:34:03| Set Current Directory to /usr/local/squid/var/cache
2010/01/26 11:34:03| Loaded Icons.
2010/01/26 11:34:03| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 12.
2010/01/26 11:34:03| Accepting ICP messages at 0.0.0.0, port 3130, FD 13.
2010/01/26 11:34:03| Accepting SNMP messages on port 3401, FD 14.
2010/01/26 11:34:03| WCCP Disabled.
2010/01/26 11:34:03| Ready to serve requests.
2010/01/26 11:34:04| Done scanning /usr/local/squid/var/cache (0 entries)
2010/01/26 11:34:04| Finished rebuilding storage from disk.
2010/01/26 11:34:04| 0 Entries scanned
2010/01/26 11:34:04| 0 Invalid entries.
2010/01/26 11:34:04| 0 With invalid flags.
2010/01/26 11:34:04| 0 Objects loaded.
2010/01/26 11:34:04| 0 Objects expired.
2010/01/26 11:34:04| 0 Objects cancelled.
2010/01/26 11:34:04| 0 Duplicate URLs purged.
2010/01/26 11:34:04| 0 Swapfile clashes avoided.
2010/01/26 11:34:04| Took 0.3 seconds ( 0.0 objects/sec).
2010/01/26 11:34:04| Beginning Validation Procedure
2010/01/26 11:34:04| Completed Validation Procedure
2010/01/26 11:34:04| Validated 0 Entries
2010/01/26 11:34:04| store_swap_size = 0k
2010/01/26 11:34:04| storeLateRelease: released 0 objects
编译选项说明：
--prefix=/usr/local/squid :指定软件的安装路径<br />--enable-snmp :此选项可以让MRTG使用SNMP协议对服务器的流量状态进行监测，因此必须选择此项，使Squid支持SNMP接口。<br />--enable-storeio=diskd,ufs :磁盘ache的模式<br />--enable-poll :应启用Poll()函数而不是select()函数，通常而言poll(轮询)比select要好，但configure(脚本程序)已知Poll在某些平台下失效, 若你认为你比configure编译配置脚本程序要聪明的话，可以用这个选项启用Poll。总之就是用这个可以提升性能就是啦<br />--disable-hostname-checks :关闭hostname检查;以提高速度<br />--enable-underscore :允许解析的URL中出现下划先，因为默认squid会认为带下划线的URL地址是非法的，并拒绝访问该地址。<br /><br />--enable-kill-parent-hack :关掉suqid的时候，要不要连同父进程一起关掉.<br />--enable-err-language="Simplify_Chinese" 和<br />--enable-default-err-languages="Simplify_Chinese" :指定出错是显示的错误页面为简体中文<br />--disable-ident-lookups :防止系统使用RFC931规定的身份识别方法<br /><br />--enable-cahce-digests :加快请求时，检索缓存内容的速度。(在squid集群时才有用)<br />--enable-linux-netfilter :可以提升效能可以支持透明代理for linux2.4.<br />--enable-arp-acl :可以在规则设置中直接通过客户端的MAC地址进行管理，防止客户使用IP欺骗。(和上一行配合用;只有反向代理时没用).<br />--with-maxfd=65535 //打开文件数为65536<br /><br /><br />//squid 命令行选项<br />-v<br />打印版本信息。<br /><br />-z<br />初始化cache，或者交换，目录。在首次运行squid，或者增加新的cache 目录时，你必须使用该选项。<br /><br />-C<br />阻止安装某些信号句柄，它们捕获特定的致命信号例如SIGBUS 和SIGSEGV。正常的，这些信号被squid 捕获，以便它能干净的关闭。然而，捕获这些信号可能让以后调试问题困难。使用该选项，致命的信号导致它们的默认动作，通常是coredump。<br /><br />-D<br />禁止初始化DNS 测试。正常情况下，squid 直到验证它的DNS 可用才能启动。该选项阻止了这样的检测。你也能在squid.conf 文件里改变或删除dns_testnames 选项。<br /><br />-F<br />让squid 拒绝所有的请求，直到它重新建立起存储元数据。假如你的系统很忙，该选项可以减短重建存储元数据的时间。然而，如果你的cache 很大，重建过程可能会花费很长的时间。<br /><br />-N<br />阻止squid 变成后台服务进程。<br /><br />-R<br />阻止squid 在绑定HTTP 端口之前使用SO_REUSEADDR 选项。<br />//}<br /><br /><br />重配置运行中的squid 进程<br />./squid -k reconfigure(不重启squid服务而使squid.conf重新生效)<br /><br />对配置文件查错<br />%squid -k parse<br /><br /><br />在终端窗口里测试squid<br />%squid -N -d1<br /><br />将squid 作为服务进程运行<br />%squid -s<br /><br />squid_start 脚本<br />% /usr/local/squid/sbin/squid –sD<br /><br /><br />停止squid服务<br /><br />killall squid<br /><br />最安全的停止squid 的方法是使用squid -k shutdown 命令：<br />%squid -k shutdown<br /><br /><br />进程检查<br /><br /><p>ps -ef |grep squid</p><p><br /></p>端口检查<br /><br />netstat -alp|grep squid<br /><br />telnet 192.168.2.3 80<br /><br />GET / HTTP/1.1<br /><br />再敲回车健;有信息就代表通了.<br /><br />查看日志<br /><br />日志记录了客户的ip地址,使用的协议,获得的目的地IP地址和所获得的内容.access.log文件是比较重要的日志文件,记录了代理服务的日常活动,可以通过一些软件,很容易对代理服务的活动信息加以统计,及查找不安全信息.<br />而cache.log则是缓冲区的相关记录,store.log记录了服务器访问的网页状态信息.相对而言access.log日志是使用较多的日志文件.<br /><br /><br />
2010-01-26 08:32:09
2010-01-26 08:32:57
2010-03-26 14:56:55