Minggu, 21 April 2013

Sample Optimized Squid Proxy Server Configuration for Windows

#    WELCOME TO SQUID 2.7.STABLE8
#    ----------------------------

# ACCESS CONTROLS
# -----------------------------------------------------------------------------
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 172.16.0.0/12   
acl localnet src 192.168.0.0/16   
acl localnet src 202.182.189.16/28
acl localnet src 114.79.0.0/16
acl localnet src 112.215.0.0/16
acl localnet src 223.255.0.0/16
acl localnet src 202.127.0.0/16
acl SSL_ports port 443
acl Safe_ports port 80        # http
acl Safe_ports port 21        # ftp
acl Safe_ports port 443        # https
acl Safe_ports port 70        # gopher
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535    # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
icp_access allow localnet
icp_access deny all


# NETWORK OPTIONS
# -----------------------------------------------------------------------------
http_port 3128

# MEMORY CACHE OPTIONS
# -----------------------------------------------------------------------------
cache_mem 8 MB
maximum_object_size_in_memory 8 KB

# DISK CACHE OPTIONS
# -----------------------------------------------------------------------------
cache_dir aufs c:/squid/var/cache 2000 16 256

# LOGFILE OPTIONS
# -----------------------------------------------------------------------------
access_log none
cache_log none
cache_store_log none

# OPTIONS FOR FTP GATEWAYING
# -----------------------------------------------------------------------------
refresh_pattern ^ftp:        1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%    0
refresh_pattern .        0    20%    4320
quick_abort_min 0 KB
quick_abort_max 0 KB

# HTTP OPTIONS
# -----------------------------------------------------------------------------
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
half_closed_clients off
visible_hostname localhost

# ICP OPTIONS
# -----------------------------------------------------------------------------
log_icp_queries off

# DNS OPTIONS
# -----------------------------------------------------------------------------
dns_nameservers 172.21.2.21 8.8.4.4 208.67.220.220 8.8.8.8 208.67.222.222
hosts_file C:\Windows\SYSTEM32\DRIVERS\ETC\hosts

# MISCELLANEOUS
# -----------------------------------------------------------------------------
memory_pools off
client_db off
coredump_dir c:/squid/var/cache