Squid Proxy Server--actual combat

I. Traditional Agent

The use of traditional proxy is characterized in that the client's related programs (such as IE browser, QQ chat tool) must specify the proxy server address, port and other information. The following is a simple application case to learn the configuration and use of traditional agents

Based on the Internet network environment, the main requirements of the case are described as follows:

• On Linux Host B, build squid to provide proxy services for client access to a variety of websites, but prohibit downloading files over 10MB in size by proxy

• On client C, specify Host B as the Web Access Proxy to hide its real IP address

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/72/43/wKioL1Xf03jgVGj2AAD1EHL6wlk756.jpg "title=" Depth 20150828111102.png "alt=" Wkiol1xf03jgvgj2aad1ehl6wlk756.jpg "/>

For the above experimental environment, Host B must properly build the Squid service as a proxy server and allow the client to use proxies, and to enable clients to access the http://www.linuxfan.cn/domain name through the proxy, the proxy server itself must be able to resolve the domain name correctly. Host C as a client, you need to specify the browser and other programs to use the proxy server address, port number and other information, host A as a test site, need to enable the HTTPD service

For httpd server, DNS server construction, please refer to the relevant information, here is not repeated explanation. The following is mainly about the Squid server configuration, Client Agent configuration, and Proxy service authentication methods

1, Squid server configuration

Configuring squid to implement traditional proxy services, you need to be aware of adding the http_access allow all access policy so that any client can use the Proxy service. In addition, in order to limit the file size of the download, you also need to set the Reply_ body_max_size key, all other parameters can be maintained by default

(1) Modify the squid.conf configuration file

[Email protected] ~]# vim/etc/squid.conf

Http_port 3128

Reply_body_max_size 10MB//maximum file size allowed for download (10MB)

Http_access let all//before http_access deny all

...//Omit part of the content

This article from "Painting" blog, reproduced please contact the author!

Squid Proxy Server--actual combat