http_port 3128 icp_port 3130 # htcp_port 4827 # icp_query_timeout 0 # maximum_icp_query_timeout 2000 # mcast_icp_query_timeout 2000 # dead_peer_timeout 10 seconds acl QUERY urlpath_regex cgi-bin \? refresh_pattern ^ftp: 10080 95% 241920 reload-into-ims override-lastmod refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod no_cache deny QUERY # cache_vary on cache_mem 16 MB cache_swap_low 90 cache_swap_high 95 maximum_object_size 2048 KB # minimum_object_size 0 KB # minimum_object_size 0 KB maximum_object_size_in_memory 6 KB ipcache_size 2048 ipcache_low 90 ipcache_high 95 #cache_replacement_policy lru #memory_replacement_policy lru cache_dir ufs /usr/local/cache 6000 14 256 #cache_dir diskd /usr/local/squid/var/cache/cache-1 1024 10 256 Q1=72 Q2=64 #cache_dir diskd /usr/local/squid/var/cache/cache-2 1024 10 256 Q1=72 Q2=64 #cache_dir diskd /usr/local/squid/var/cache/cache-3 1024 10 256 Q1=72 Q2=64 #cache_dir diskd /usr/local/squid/var/cache/cache-4 1024 10 256 Q1=72 Q2=64 #logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %a %Ss/%03Hs %a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %h" cache_access_log /usr/local/squid/var/logs/access.log cache_log /usr/local/squid/var/logs/cache.log cache_store_log /usr/local/squid/var/logs/store.log # emulate_httpd_log off cache_mgr boed@emperium.speed.net.id cache_replacement_policy heap LFUDA memory_replacement_policy heap GDSF # log_ip_on_direct on # mime_table /usr/local/squid/etc/mime.conf # log_mime_hdrs off # pid_filename /usr/local/squid/var/logs/squid.pid # debug_options ALL,1 # log_fqdn off # client_netmask 255.255.255.255 # ftp_user Squid@ # ftp_list_width 32 # ftp_passive on # ftp_sanitycheck on # ftp_telnet_protocol on # check_hostnames on # allow_underscore on # cache_dns_program /usr/local/squid/libexec/dnsserver # dns_children 5 # dns_retransmit_interval 5 seconds # dns_timeout 2 minutes # dns_defnames off # hosts_file /etc/hosts # diskd_program /usr/local/squid/libexec/diskd-daemon # unlinkd_program /usr/local/squid/libexec/unlinkd # pinger_program /usr/local/squid/libexec/pinger # url_rewrite_children 5 # url_rewrite_concurrency 0 # url_rewrite_host_header on # location_rewrite_children 5 # location_rewrite_concurrency 0 #auth_param negotiate program #auth_param negotiate children 5 #auth_param negotiate keep_alive on #auth_param ntlm program #auth_param ntlm children 5 #auth_param ntlm keep_alive on #auth_param digest program #auth_param digest children 5 #auth_param digest realm Squid proxy-caching web server #auth_param digest nonce_garbage_interval 5 minutes #auth_param digest nonce_max_duration 30 minutes #auth_param digest nonce_max_count 50 #auth_param basic program #auth_param basic children 5 #auth_param basic realm Squid proxy-caching web server #auth_param basic credentialsttl 2 hours #auth_param basic casesensitive off # authenticate_cache_garbage_interval 1 hour # authenticate_ttl 1 hour # authenticate_ip_ttl 0 seconds # TAG: wais_relay_host # TAG: wais_relay_port # wais_relay_port 0 # request_header_max_size 20 KB # request_body_max_size 0 KB #quick_abort_min 16 KB # quick_abort_max 16 KB # quick_abort_pct 95 # read_ahead_gap 16 KB # negative_ttl 5 minutes # positive_dns_ttl 6 hours # negative_dns_ttl 1 minute # range_offset_limit 0 KB # collapsed_forwarding off # refresh_stale_hit 0 seconds # forward_timeout 4 minutes # connect_timeout 1 minute # peer_connect_timeout 30 seconds # read_timeout 15 minutes # request_timeout 5 minutes # persistent_request_timeout 1 minute # client_lifetime 1 day # half_closed_clients on # pconn_timeout 120 seconds # ident_timeout 10 seconds # shutdown_lifetime 30 seconds #acl macaddress arp 09:00:2b:23:45:67 #acl myexample dst_as 1241 #acl password proxy_auth REQUIRED #acl fileupload req_mime_type -i ^multipart/form-data$ #acl javascript rep_mime_type -i ^application/x-javascript$ acl all src 0.0.0.0/0.0.0.0 acl emperium src 192.168.30.0/255.255.255.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # follow_x_forwarded_for deny all # delay_pool_uses_indirect_client on #=========limit================================================================= delay_pools 3 delay_class 1 1 delay_parameters 1 -1/-1 delay_access 1 allow emperium delay_access 1 deny all acl multimedia url_regex -i \.mp3$ \.rm$ \.zip$ \.rar$ \.pdf$ \.mpg$ \.mpeg$ \.a delay_class 2 1 delay_parameters 2 4000/4000 delay_access 2 allow emperium delay_access 2 deny ALL delay_class 3 1 delay_parameters 3 4000/4000 delay_access 3 allow emperium delay_access 3 deny multimedia # log_uses_indirect_client on #Recommended minimum configuration: http_access allow manager localhost http_access allow emperium http_access deny manager # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports http_access deny all #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_networks http_access deny all # http_reply_access allow all http_reply_access allow all # icp_access deny all icp_access allow all #htcp_access allow all # htcp_access deny all #acl htcp_clr_peer src 172.16.1.2 #htcp_clr_access allow htcp_clr_peer # htcp_clr_access deny all # miss_access allow all # ident_lookup_access deny all # reply_header_max_size 20 KB # reply_body_max_size 0 allow all # cache_mgr webmaster # mail_program mail cache_effective_user squid cache_effective_group squid # httpd_suppress_version_string off # umask 027 # announce_period 0 #announce_period 1 day # announce_host tracker.ircache.net # announce_port 3131 httpd_accel_host virtual #httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on # dns_testnames netscape.com internic.net nlanr.net microsoft.com # logfile_rotate 10 # append_domain .yourdomain.com # tcp_recv_bufsize 0 bytes # memory_pools on # memory_pools_limit 5 MB # via on request_body_max_size 1000 KB allow emperium # forwarded_for on # log_icp_queries on # icp_hit_stale off # minimum_direct_hops 4 # minimum_direct_rtt 400 # cachemgr_passwd secret shutdown # cachemgr_passwd lesssssssecret info stats/objects # cachemgr_passwd disable all # store_avg_object_size 13 KB # store_objects_per_bucket 20 # client_db on # netdb_low 900 # netdb_high 1000 # netdb_ping_period 5 minutes # query_icmp off # test_reachability off # buffered_logs off # reload_into_ims off # icon_directory /usr/local/squid/share/icons # global_internal_static on # short_icon_urls off # error_directory /usr/local/squid/share/errors/English # maximum_single_addr_tries 1 # retry_on_error off # snmp_port 3401 # snmp_access allow snmppublic localhost # snmp_access deny all # snmp_access deny all # snmp_incoming_address 0.0.0.0 # snmp_outgoing_address 255.255.255.255 # as_whois_server whois.ra.net # as_whois_server whois.ra.net # wccp_router 0.0.0.0 # wccp_version 4 # wccp2_rebuild_wait on # wccp2_forwarding_method 1 # wccp2_return_method 1 # wccp2_service standard 0 # wccp_address 0.0.0.0 # wccp2_address 0.0.0.0 # delay_pools 0 # delay_pools 2 # 2 delay pools # delay_class 1 2 # pool 1 is a class 2 pool # delay_class 2 3 # pool 2 is a class 3 pool # delay_access 1 allow some_big_clients # delay_access 1 deny all # delay_access 2 allow lotsa_little_clients # delay_access 2 deny all # delay_initial_bucket_level 50 # incoming_icp_average 6 # incoming_http_average 4 # incoming_dns_average 4 # min_icp_poll_cnt 8 # min_dns_poll_cnt 8 # min_http_poll_cnt 8 # max_open_disk_fds 0 # offline_mode off # uri_whitespace strip # acl buggy_server url_regex ^http://.... # broken_posts allow buggy_server # mcast_miss_addr 255.255.255.255 # mcast_miss_ttl 16 # mcast_miss_port 3135 # mcast_miss_encode_key XXXXXXXXXXXXXXXX # nonhierarchical_direct on # prefer_direct off # strip_query_terms on coredump_dir /usr/local/squid/var/cache # redirector_bypass off # ignore_unknown_nameservers on # digest_generation on # digest_bits_per_entry 5 # digest_rebuild_period 1 hour # digest_rewrite_period 1 hour # digest_swapout_chunk_size 4096 bytes # digest_rebuild_chunk_percentage 10 # client_persistent_connections on # server_persistent_connections on # persistent_connection_after_error off # detect_broken_pconn off # balance_on_multiple_ip on # pipeline_prefetch off # request_entities off # high_response_time_warning 0 # high_page_fault_warning 0 # high_memory_warning 0 # store_dir_select_algorithm least-load # ie_refresh off # vary_ignore_expire off # sleep_after_fork 0 # minimum_expiry_time 60 seconds # relaxed_header_parser on