Using Redhat to create a secure and efficient proxy server

Linux has the advantage of being safe, efficient and inexpensive, but it has always been a hard to use impression. In fact, with the continuous development of Linux, its ease of use has greatly improved. The use of Linux operating system, can make a configuration Celeron 400MHz CPU, 256MB memory machine, using ADSL to drive two hundred or three hundred computers online becomes a breeze. Here's an example of Redhat 8.0 and squid to teach you to build a safe, efficient server.

Configure the server to surf the internet

First, make the server available to the Internet. In order to improve the efficiency of the server, generally use a dual network card, a connection to the internal LAN, a piece to connect the Internet. Now let's look at the way to connect ADSL broadband.

1. Click "Start (small red hat) → system tools → network device Control".

2. Click the Configure button in the Network Device Control window.

3. Select the Internal network card and click the Edit button. Please see figure 1.

4. Check "Activate device when computer starts", click "Statically set IP number", after "number" Enter IP Address "192.168.1.1" (assuming intranet segment IP is 192.168.1.2~192.168.1.255), subnet mask fill " 255.255.255.0 ", the default gateway number is blank, click OK. Please see Figure 2.

5. Select the Chinese and Foreign network card, its IP set to a reserved IP, such as "192.168.2.1", other settings with the 4th step. Although the external NIC does not set IP can also, but in the startup because to go to DHCP automatically obtain IP, will greatly reduce the start speed.

6. Click the start → system tools → Internet configuration Wizard, select xDSL Connection in the Choose Settings Type window, and click the Next button.

7. In the "Ethernet equipment" in the choice of Chinese and foreign network card, the "provider name" can be arbitrarily entered a name, in the "login name" after filling in the telephone to the account number, in the "password" after the dialing password. Please see Figure 3. Press [forward], and the Create DSL connection window appears, and click Apply.

8. Now back to the "Network Configuration" window, select just the "PPP0" device, click "Active", ADSL began dialing; If you want to automatically dial every time the computer starts up, click Edit, and then check "Activate the device when the computer starts up."

Client Configuration

The first step is to ensure that the LAN is connected and the corresponding protocol is installed. The client can use any one of the operating systems, such as Windows 9X/ME/2000/XP, and the settings are simple. Open the Browser, click the menu Tools →internet options, click the Connections page, click LAN Settings, check "Use proxy server for LAN" (different versions show a slightly different version), and after "address", insert the server's IP address "192.168.1.1" and the port. 3128 ". Please see Figure 4.

Configure Squid

Linux under the proxy Server software is more, squid is one of the more excellent. It caches Internet data, receives a user's download request, and processes the downloaded data automatically. Squid can proxy http, FTP, GOPHER, SSL and WAIS protocol, temporarily can not agent pop, NNTP and other protocols. There is a configuration file squid.conf in the/etc/squid directory that can be modified to meet your different needs. For beginners, may feel that the project too much, at a loss. But as long as you understand how it is configured, you can control your proxy server as freely as possible. (Note the "#" number before the line, indicating that the comment follows.) ）

1. The simplest proxy server

If you don't want to spend a lot of time on this, and you don't have any requirements for the security and efficiency of your proxy server, you can just change one word to make squid work. Search "Http_access deny all", change "Deny" to "allow" on the line! (Note that the line that has no "#" in front of it is changed.) ）

2. Options that affect performance

To play the advantage of squid, it is best to be able to thoroughly understand squid profile. Although it is very large, users can modify the corresponding options according to their actual situation, do not need to configure all the options. Let's take a look at which options affect squid performance.