How do I set up the squid Proxy Server for two NICs? -- Linux Enterprise Application-Linux server application information. For details, refer to the following section. System Environment: dell 755 Desktop
Ubuntu9.04
Nic 1: built-in (Intranet)
Nic 2: tp-link 8139 (Internet)
Network Environment: Internet (ip address
BKJIA exclusive Article] recently, a customer helped a friend pick up a small project. The customer rented several servers for their U.S. machines and then wanted to use proxy servers for Internet access, for customers in China. The specific requirements are as follows:
1. The customer's server has multiple egress IP addresses
2. The customer wants to use the proxy
This is actually the same as configuring the HTTP proxy, I did not use the support of the Squid version of SSL, so repeatedly toss does not work!
First have to check if you are using the Squid version is to support SSL, mainly to see if the Squid\sbin\ssleay32.dll file exists, if there is no this file that will have t
Label: style HTTP color ar strong SP file on BS Environment Introduction VM 1: IP Eth0192.168.0.100/24 Eth1: 200.168.0.100/24 VM 2 (simulated Internet) 200.168.0.109/24 (run Web Server) PC () IP 192.168.0.111/24 gateway 192.168.0.100 Implementation of transparent proxy Basic implementation 1. ModifySquid. conf Http_port 192.168.0.100: 3128Transparen
Configured as follows
The code is as follows
Copy Code
Http_port 142.4.106.1:3128Http_port 142.4.106.xx:3128Http_port 142.4.106.xx:3128Auth_param Basic PROGRAM/USER/LIB/SQUID/LIBEXEC/NCSA_AUTH/ETC/SQUID/PASSWDAuth_param Basic Children 5Auth_param Basic Realm Squid proxy-caching
isolate data from adsl and reduce mutual interference. each ad is independent of each other. if a sub-Nic is used, the mac address cannot be modified, even if the modification is successful, all the sub-nics and the mac of the primary Eni are the same and cannot meet the requirements of multiple adsl connections at the same time. Therefore, vlan virtual interfaces must be used.
3. the Nic connected to the optical fiber uses a sub-Nic to Mount multiple public ip addresses
4. the linux
NobodyCache_effective_group NobodyCoredump_dir/www/sqd/sqd/sqd/var/cacheThird, Parameter modification:The owner of the A,logs,cache file should readNoboby.nobobyb, create a new passwd file in the/www/sqd/sqd/sqd/libexec/directory and add a user account and password to itHtpasswd-c/www/sqd/sqd/sqd/libexec/passwd liangi289Four, before the start of the preparatory work:Generate Cache Directory/www/sqd/sqd/sqd/etc/squid-zThe startup process is displayed
generated. Without caching, even if the program is more efficient, it is difficult to meet the needs of large traffic. It is meaningless to keep the program working on the same thing. First, the web program needs to cache the data that is used repeatedly. Even this is not enough. Simply starting a web handler costs a lot, and caching the final static page is essential. This is squid's strength. It serves a
Squid + MRTG implement complete cache proxy and HTTP service acceleration proxy
By mirolers
Author: zitianxingTime: 2002-9-25Source: www.hackerabc.com
Squid is an open source code high-performance Proxy Cache Server. It supports
Implementing reverse proxy in squid
Introduction
This document describes reverse proxies, and how they are used to improve web server performance. section 1 gives an introduction to reverse proxies, describing what they are and what they are used. section 2 compares reverse proxy
The domain name of this instance is Wenjin.cache. ibm.com.cn , through DNS the polling technology, the client's request is distributed to one of the Squid reverse proxy server processing, if the squid cache the user's request resource, the requested resource is returned directly to the user, otherwise this
server.
back to the top of the page
Realization principle of SQUID reverse proxy
At present, there are many reverse agent software, more famous have Nginx and Squid. Nginx is a high-p
does not need to specify the proxy server address, port and other information, the proxy server needs to set the firewall policy to transfer the client's Web Access data to the agent service process;Reverse proxy : Refers to the
Squid cache (squid for short) is a popular free software (GNU General Public License) proxy server and Web Cache Server. Squid has a wide range of uses, from cache-related requests as f
Turn from: Http://www.ibm.com/developerworks/cn/linux/l-cn-squid/
On the basis of introducing the working principle of squid Reverse proxy, this paper points out that reverse proxy technology has a good use in improving Web site access speed and enhancing usability and sec
"Usage only start | stop | restart"
;;
Esac
Put this file in the/etc/init. d/directory and name it squid.
Chmod + x/etc/init. d/squid
Chkconfig -- add squid
If the squid service does not support chkconfig
Then modify the preceding chkconfig: 345 61 61 numbers.
Configure Squid
Squid optimization full manual (1)
Summary
This article focuses on optimizing squid performance without changing hardware conditions (12:31:57)
By ideal
I. Overview
Squid is an excellent open source proxy server software that can run on multiple system platforms. Ho
Squid is an application-level proxy. After the client host and server host are connected over the network, you must set the client software before using Squid, for example, set the proxy server address and port for Internet Explor
net.ipv4.tcp_fin_timeout=2Net.ipv4.tcp_tw_reuse=1Net.ipv4.tcp_tw_recycle=1Net.ipv4.tcp_syncookies=1net.ipv4.tcp_keepalive_time=600net.ipv4.ip_local_port_range=4000 65000net.ipv4.tcp_max_syn_backlog=16384net.ipv4.route.gc_timeout=100Net.ipv4.tcp_syn_retries=1Net.ipv4.tcp_synack_retries=1net.core.somaxconn=16384net.core.netdev_max_backlog=16384net.ipv4.tcp_max_orphans=16384#以下参数是对iptables防火墙的优化, the firewall does not meet the prompts, you can ignore thenet.nf_conntrack_max=25000000net.netfilter.nf
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.