linux
کد :
# cd /usr/src
# wget -c http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.15.tar.gz
# tar xvf squid-3.1.15.tar.gz
# cd squid-3.1.15
# nano /usr/include/bits/typesizes.h
#define __FD_SETSIZE 16384
# ulimit -HSn 16384
# ulimit -HSd unlimited
# ./configure \
--prefix=/usr/local/squid \
--enable-forward-log \
--enable-follow-x-forwarded-for \
--enable-snmp \
--enable-linux-netfilter \
--enable-http-violations \
--enable-delay-pools \
--enable-storeio=diskd,aufs,ufs \
--with-large-files \
--enable-large-cache-files \
--with-filedescriptors=16384 \
--enable-async-io=128 \
--enable-removal-policies=lru,heap \
--enable-useragent-log \
--enable-referer-log \
--enable-err-languages=English \
--enable-default-err-language=English \
--enable-zph-qos
# make && make install
# cat /dev/null > /usr/local/squid/etc/squid.conf
# nano /usr/local/squid/etc/squid.conf
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl mynet src 192.168.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow mynet
http_access deny all
icp_access deny all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
cache_mem 2048 MB
maximum_object_size 256 MB
cache_dir aufs /cache 55500 128 256
coredump_dir /cache
cache_access_log /usr/local/squid/var/logs/access.log
cache_mgr Root@Cache
visible_hostname Cache-Server
qos_flows local-hit=0x30
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
# nano /etc/rc.d/rc.local
ulimit -HSn 16384
ulimit -HSd unlimited
/usr/local/squid/sbin/squid
Mikrotik
کد :
ip firewall mangle add chain=postrouting tos=12 action=mark-packet new-packet-mark=proxy-hit passthrough=no
queue tree add name="pmark" parent=global-out packet-mark=proxy-hit limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
