Article Title: FreeBsd5.4 + pf + squid reverse proxy practical notes. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
1. hardware configurationHp netserver 800 P Ⅲ 1000 memory 256 M
-lzo
Persist-key
Persist-tun
Status openvpn-status.log
Verb 3
Then install squid. Here, you only need to use the simple forward proxy function of squid, so yum is installed.
Yum install squid-y
Edit the squid configuration file and edit the following two lines
Http_port 10.8
Obtain the real IP address of the client under multi-level reverse proxy [Squid]
In many applications, you may need to record the real IP address of the user. In this case, you need to obtain the real IP address of the user. In JSP, you can obtain the IP address of the client:Request. getRemoteAddr ()In most cases, this method is effective. However, the real IP address of the client cannot be obtained throu
The speed of using this Intranet proxy to access the website is high. In addition, the first CD of the Red Hat has a direct RPM package. It gets everything done for you. You just need to change the default deny all links. /Etc/squid. conf. There is an ACL access control list and you can modify it. (I suspect many vrouters in the world have used it for reference.Code). Well, it's very powerful.
The speed of
IsSmall and medium-sized enterprises customize a set of open source software solutionsStarted to build a website.
1. Install squid
$ Sudo apt-get install squid-y
Note: After installation, you can start/etc/init. d/squid3 start, but the default status is unavailable.
2. Configuration
$/Etc/squid. conf
Configure Port
Http_port 3128
Note: We recommend that you
Configured as follows
The code is as follows
Copy Code
Http_port 142.4.106.1:3128Http_port 142.4.106.xx:3128Http_port 142.4.106.xx:3128Auth_param Basic PROGRAM/USER/LIB/SQUID/LIBEXEC/NCSA_AUTH/ETC/SQUID/PASSWDAuth_param Basic Children 5Auth_param Basic Realm Squid proxy-caching Web serverAu
Tags: des HTTP Io OS ar use for SP Div
Test performed under a virtual machine.
VM 1: (dual Nic)
The Intranet IP address of eth0 is 192.168.0.100/24.
Eth1 configure an Internet virtual IP address 200.168.0.100/24
VM 2:
IP Address: 200.168.0.101/24 (for test, it is in the same network segment as the above IP address)
PC:
192.168.0.110
1. Install squid
Install with yum
Yum install squid *-y
Modify configuratio
I have written a blog: header_access to hide the header information. In order to hide the header information, it is a positive environment test to access webpages that do not allow proxy access, today, I read a blog written by Fukai and found that the security of the reverse proxy can be enhanced. I will record it first ~
Websites using squid# Curl-I www.php-oa.
Problem:When using a proxy to access a website, the following error occurs:==========================================================The requested URL cocould not be retrieved
While trying to retrieve the URL: http://linkhelp.clients.google.com/tbproxy/lh/fixurl?
The following error was encountered:
Unable to determine IP address from host name for linkhelp.clients.google.com
The dnsserver returned:
Timeout
This means that:
The cache was not ab
browser.
2. Transparent proxy buffering Server
The transparent proxy buffering service is exactly the same as the standard proxy server. However, the proxy action is transparent to the client's browser (that is, it does not need to indicate the IP and port of the proxy se
# starts squid serviceSquid-k Check # can detect if the configuration file is wrong; can be shortened to -kcheSquid-k Rec # can reload configuration,reconfig shorthand;Service Squid Restart # restart Squid services; Restart regular very slow, you can first killall squid, in the start service;detection configuration f
Article Title: configuration of squid service on Linux. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
The proxy server is one of the c
In many applications, you may need to record the real IP address of the user. In this case, you need to obtain the real IP address of the user. In JSP, you can obtain the IP address of the client by: request. getRemoteAddr (), which is effective in most cases. However, the real IP address of the client cannot be obtained through reverse proxy software such as Apache and Squid.
During this time, the IP addre
Configuring the Reverse ProxyOpen configuration fileVim/etc/squid/squid.confModify3128 Accel Vhost VportAdd a section below it115.239. 210.27 the 0 originserver name=acache_peer_domain a www.qq.comcache_peer 114.80.143.1580 Originserver name=bcache_peer_domain b www.163.comSee if the configuration file is wrongSquid-kchReloadSquid-kreBrowser viewTurn the forward agent off.Tools-internet Options-Connections-LAN Settings-switch off use a
NobodyCache_effective_group NobodyCoredump_dir/www/sqd/sqd/sqd/var/cacheThird, Parameter modification:The owner of the A,logs,cache file should readNoboby.nobobyb, create a new passwd file in the/www/sqd/sqd/sqd/libexec/directory and add a user account and password to itHtpasswd-c/www/sqd/sqd/sqd/libexec/passwd liangi289Four, before the start of the preparatory work:Generate Cache Directory/www/sqd/sqd/sqd/etc/squid-zThe startup process is displayed
Problem:The following error occurred while using the proxy to access the Web site:========================================The requested URL could not is retrievedWhile trying to retrieve the Url:http://linkhelp.clients.google.com/tbproxy/lh/fixurl?The following error was encountered:Unable to determine IP addresses from host name for linkhelp.clients.google.comThe DNSServer returned:TimeoutThis means:The cache wasn't able to resolve the hostname prese
Label: style HTTP color ar strong SP file on BS Environment Introduction VM 1: IP Eth0192.168.0.100/24 Eth1: 200.168.0.100/24 VM 2 (simulated Internet) 200.168.0.109/24 (run Web Server) PC () IP 192.168.0.111/24 gateway 192.168.0.100 Implementation of transparent proxy Basic implementation 1. ModifySquid. conf Http_port 192.168.0.100: 3128Transparent 2. Reload the configuration file 3. AddIptablesThe rule sets the internalHTTPRequest re
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.