For high-concurrency squid servers in Linux, the number of TCP time_wait sockets often reaches two or 30 thousand, and the server is easily dragged to death. By modifying Linux kernel parameters, you can reduce the number of time_wait sockets on the squid server. VI/etc/sysctl. conf
Add the following lines:Reference n
In linux, the proxy server for windows Domain Identity Authentication-Linux Enterprise Application-Linux server application information is described below. The agent server used by the company is based on the Linux system, and sometimes there are more or less problems. It di
The agent server used by the company is based on the Linux system, and sometimes there are more or less problems. It directly affects users' normal Internet access. I have been busy with other projects and have no time to adjust and optimize them. Not long ago, Linux system burst...
The agent server used by the company is based on the Linux system, and sometimes
The agent server used by the company is based on the Linux system, and sometimes there are more or less problems. It directly affects users' normal Internet access. I have been busy with other projects and have no time to adjust and optimize them. Not long ago, the Linux system suddenly failed to enter the GNU/GNOME desktop environment, prompting me to make up my mind to re-plan and deploy a
Squid Proxy server, 1.x or 2.x version can be.
3. Configure Squid agent, start transparent agent function
Squid-2
Add the following line to your/etc/squid/squid.conf.
Http_port 8080Httpd_accel_host VirtualHttpd_accel_port 80Httpd_accel_with_proxy onHttpd_accel_uses_host_hea
can also filter and control some websites, so that we can use it to achieve the original intention-control and save Internet access costs.
In LINUX, Squid Proxy Server, a powerful http/https/ftp Proxy Server, is widely used because it is easy to install and easy to use. It is included in the RedHat
Article Title: Set up a proxy server in Linux (2 ). Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
5.2 User Authentication Settings
By default,
Article Title: Using Linux iptables for proxy server and firewall configuration (2 ). Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
5. cache
NBSP;SQUID working mechanism and basic functions Large server site servers are mostly UNIX-type operating systems, it is necessary to understand that Unix.linux inherits all the characteristics of UNIX, so it is necessary to understand Linux. Squid is the most popular proxy server software under
NBSP;SQUID working mechanism and basic functions Large server site servers are mostly UNIX-type operating systems, it is necessary to understand that Unix.linux inherits all the characteristics of UNIX, so it is necessary to understand Linux. Squid is the most popular proxy server software under
the working mechanism and basic function of squidLarge server sites are mostly Unix-type operating systems, and it's important to understand that Unix.linux inherits all the features of Unix, so it's important to know about Linux. Squid is the most popular proxy server software under Linux, supporting the agent of Http
the Linux 2.2.x kernel:
# Accept all on lookback/Sbin/ipchains-A input-J accept-I lo# Accept my own IP, to prevent loops (Repeat for each interface/alias)/Sbin/ipchains-A input-J accept-p tcp-D 192.168.11.1/32 80# Send all traffic destined to port 80 to squid on port 80/Sbin/ipchains-A input-J redirect 8080-p tcp-s 192.168.11.0/24-D 0/0 80
The following command targets the
card IP address "192.168.0.1" in the number box, the subnet mask defaults to "255.255.255.0", and the default gateway number is blank, OK.
Two Agent Erection Process
This example does not focus on the Linux system configuration, but on the configuration process of Third-party proxy Server software.
1. On Linux under the third party
2. Install SquidThe Yum command is ready to be installed directly online Yum Install Squid After the installation is complete, Cd/etc/squid/, modify the contents of the squid.conf file before you modify it, you can back up the file first: CP squid.conf Squid.conf_bak Then find http_access deny all in the file and modify it to http_access allow all to indicate that all users have access to the agent. Also
If you select a Linux host as a proxy server, you do not need to configure High Performance of the host. He can be the worst machine in your company (There should always be a nic, there are two of the best, you can also bind two IP addresses, one is the Internet IP address and the other is the Intranet IP address ), however, if you configure it as a proxy server,
script (executable file) in linux)
All scripts are stored in cd/bin.
Cd/bin
Touch daili
Chmod a + x daili
Vi daili
#! /Bin/bash
Adsl-stop
Adsl-start
Route add default ppp0
Iptables-t nat-F
Iptables-t filter-F
Echo "1">/proc/sys/net/ipv4/ip_forward
Iptables-t nat-a postrouting-s 202.106.20.0/24-j MASQUERADE
Iptables-t nat-a postrouting-s 192.168.0.0/24-j MASQUERADE
If you want to automatically drive the following machine to access the Internet at ever
request:NPM err! /home/user/npm-debug.logThe various NPM sources have since been replaced and cannot be resolved. We all know the Chinese wall is very high, so fq, but the method of VPN with Linux is more complicated, so I installed the ccproxy on my own VPN computer, as a Linux agent, then set up NPM proxy under Linux:NPM Config set
One, the scene:Some Linux servers are in the intranet, and there is no public network IP, so you want to communicate with the external network can only be HTTP/HTTPS through the way of NAT or proxy. NAT server has the restriction of network segment, and HTTP/HTTPS proxy agent is not, it is convenient to use. However, two problems were encountered when using HTTP/
Precautions for using Linux transparent proxy-Linux Enterprise Application-Linux server application information. For details, refer to the following section. For some reason, you need to record your web access logs, so Squid is used to record access logs on port 80, and
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.