Centos7 squid传统代理

灰太狼 2022-01-17 12:01 270阅读 0赞

# Centos7 squid传统代理 #

> 操作环境:  
> squid代理服务器:192.168.80.100  
> web网站 :192.168.80.101  
> windows客户端 :192.168.80.30

1、安装编译环境  
`yum install gcc gcc-c++ make -y`

2、安装插件  
`yum install perl-devel -y`

3、安装wget下载工具  
`yum install wget -y`

4、下载squid  
`wget http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.21.tar.gz`  
![Centos7 squid传统代理][Centos7 squid]  
5、安装与配置squid  
`tar xf squid-3.5.27.tar.gz -C /opt/ --解压软件包到/opt/下`  
`cd /opt/squid-3.5.27/ --切换到解压目录`

注：
    ./configure \   #配置
    --prefix=/usr/local/squid \    #指定安装路径
    --sysconfdir=/etc \   #配置文件存储目录
    --enable-arp-acl  \   #可在ACL中设置通过MAC地址进行管理，防止IP欺骗
    --enable-linux-netfilter \   #使用内核过滤，目的是对透明模式提供支持
    --enable-linux-tproxy  \   #允许使用透明模式
    --enable-async-io=100  \   #异步I/O，用来提升存储性能。
    --enable-err-language="Simplify_Chinese" \  #
    --enable-underscore \   #允许URL中有下划线
    --enable-poll \    #使用Poll()模式，提升性能
    --enable-gnuregex    #使用GNU正则表达式

`make && make install --编译并且安装`  
![Centos7 squid传统代理][Centos7 squid 1]  
`ln -s /usr/local/squid/sbin/* /usr/local/sbin --软连接启动程序`  
![Centos7 squid传统代理][Centos7 squid 2]  
`useradd -M -s /sbin/nologin squid --创建一个没有家目录，且不能登录系统的用户`  
`chown -R squid:squid /usr/local/squid/var/ --修改文件的归属`  
![Centos7 squid传统代理][Centos7 squid 3]  
`vi /etc/squid.conf --squid配置文件`

http_access allow all 
    http_port 3128 //在下面新增
    visible_hostname 192.168.80.181   #确定公共主机名
    cache_mem 64 MB
    cache_swap_low 80
    cache_swap_high 97
    cache_dir ufs /usr/local/squid/var/cache/squid 512 16 256 //配置硬盘缓存，打开#.缓存目录512M，其中一级目录16个，二级256个
    cache_effective_user squid  #用来设置初始化、运行时缓存的账号，否则启动不成功
    cache_effective_group squid  #//默认为指定账号的基本组

![Centos7 squid传统代理][Centos7 squid 4]

`squid -k parse //检查配置文件`

`squid –k rec //重新加载配置文件`

`squid -zX //初始化缓存目录`

\--------------制作squid系统服务脚本---------  
为了使Squid服务的启动、停止、重载等操作更加方便，可以编写Squid服务脚本，并使用chkconfig和service工具来进行管理。

`vi /etc/init.d/squid --创建一个启动脚本`

#!/bin/bash
    #chkconfig: 35 90 25
    #config: /etc/squid.conf
    #pidfile: /usr/local/squid/var/run/squid.pid
    #Description: Squid - Internet Object Cache
    
    PID="/usr/local/squid/var/run/squid.pid"
    CONF="/etc/squid.conf"
    CMD="/usr/local/squid/sbin/squid"
    
    case "$1" in
            start)
                    netstat -utpln | grep squid &>/dev/null
                    if [ $? -eq 0 ]
                            then
                                    echo "Squid is running"
                    else
                            $CMD
                    fi
            ;;
            stop)
                    $CMD -k kill &>/dev/null
                    rm -rf $PID &>/dev/null
            ;;
            status)
                    [ -f $PID ] &>/dev/null
                            if [ $? -eq 0 ]
                              then
                                    netstat -utpln | grep squid
                            else
                                    echo "Squid is not running"
                            fi
        ;;
            restart)
                    $0 stop &>/dev/null
                    echo "正在关闭Squid..."
                    $0 start &>/dev/null
                    echo "正在启动Squid..."
            ;;
            reload)
                    $CMD -k reconfigure
            ;;
            check)
                    $CMD -k parse
            ;;
            *)
                    echo "用法：{start | stop | restart | reload | check | status}"
    esac

`chmod +x /etc/init.d/squid --给脚本执行权限`  
![Centos7 squid传统代理][Centos7 squid 5]  
`chkconfig --add squid --将脚本添加到系统服务中`

`chkconfig squid on --启动squid`

`service firewalld stop --关闭防火墙`  
`setenforce 0 --关闭selinux`

`service squid start --启动squid`

`netstat -anpt | grep 3128`  
![Centos7 squid传统代理][Centos7 squid 6]  
6、搭建web网站  
web网站 :192.168.80.101  
1、安装apache服务  
`yum install httpd -y`  
![Centos7 squid传统代理][Centos7 squid 7]  
2、切换到YUM安装的网页根目录，并创建测试文件  
`cd /var/www/html`

dd if=/dev/zero of=test1.tgz bs=1M count=11
    dd if=/dev/zero of=test2.tgz bs=1M count=2

`systemctl start httpd --启动apache服务`

7、给squid设置参数  
`vi /etc/squid.conf`

reply_body_max_size 10 MB                   //禁止下载的超过10MB的文件
    maximum_object_size 4096 KB                 //超过4MB的文件不进行缓存
    http_access deny all                        //前面两行需要放在这行之上才生效

![Centos7 squid传统代理][Centos7 squid 8]

8、测试:windows系统  
1、给浏览器设置代理服务器地址和端口  
![Centos7 squid传统代理][Centos7 squid 9]  
![Centos7 squid传统代理][Centos7 squid 10]  
![Centos7 squid传统代理][Centos7 squid 11]  
![Centos7 squid传统代理][Centos7 squid 12]

2、在浏览器输入ip地址/test1.tgz实验效果如下  
![Centos7 squid传统代理][Centos7 squid 13]  
![Centos7 squid传统代理][Centos7 squid 14]  
3、查看squid日志  
`tail /usr/local/squid/var/logs/access.log`  
![Centos7 squid传统代理][Centos7 squid 15]  
4、查看httpd的访问日志  
提示:从日志来看我们的客户端没有访问apache的记录，都是客户端访问代理服务器，代理服务器去我们的apache拿数据  
![Centos7 squid传统代理][Centos7 squid 16]  
5、测试缓存效果  
提示:我们的缓存服务器，设置的参数是大于10M的不需要下载，大于4M的不能缓存，所以我们用一个test2.tgz的测试文件来测试  
1.我们要先下载test2.tgz  
![Centos7 squid传统代理][Centos7 squid 17]

提示:当我们下载完以后我们的test2.tgz应该会缓存到我们的代理服务器，当我们再去apache拿test2文件的时候我们的代理服务器应该会直接把数据返回给我们而不是在去web服务器拿数据

转载于:https://blog.51cto.com/13701082/2345526

[Centos7 squid]: https://s1.51cto.com/images/blog/201901/22/6fafd1ee08b86fa6329219b0a833a96d.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 1]: https://s1.51cto.com/images/blog/201901/22/b67a1ab4060773f3842f4d92f82a9e3e.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 2]: https://s1.51cto.com/images/blog/201901/22/84aaadccdfcc8dd69230a6f6eade035f.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 3]: https://s1.51cto.com/images/blog/201901/22/ca63c31947ec074024c05d1ee3ef2cee.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 4]: https://s1.51cto.com/images/blog/201901/22/cbc101b0789c1b4c4dc4930a683e79e7.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 5]: https://s1.51cto.com/images/blog/201901/22/7e380de29a59efede871024a33976e55.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 6]: https://s1.51cto.com/images/blog/201901/22/cd406c372a179dc37ad9afdc3900a223.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 7]: https://s1.51cto.com/images/blog/201901/22/e8755180ee33f7c01fa6673e0c671194.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 8]: https://s1.51cto.com/images/blog/201901/22/37ec358e717d33a9edc4a881f90bd453.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 9]: https://s1.51cto.com/images/blog/201901/22/c72cb4eaa2fba491e3c12c5fcbe0094c.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 10]: https://s1.51cto.com/images/blog/201901/22/77adcc82a120c97ea2d80f260cd82785.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 11]: https://s1.51cto.com/images/blog/201901/22/8411a6e6275e50b5b298172ae874829d.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 12]: https://s1.51cto.com/images/blog/201901/22/2888b8fe194d0a77fd4f8beeea648a83.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 13]: https://s1.51cto.com/images/blog/201901/22/fdba6523fcbcdf04ed0144cf9be03aa9.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 14]: https://s1.51cto.com/images/blog/201901/22/271a9ff38218191019781626b9bfb4ff.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 15]: https://s1.51cto.com/images/blog/201901/22/6a736fd3933d02519c1322568d369966.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 16]: https://s1.51cto.com/images/blog/201901/22/d4816c03ca80706733c8f3cb41d44c46.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Centos7 squid 17]: https://s1.51cto.com/images/blog/201901/22/ba9af3f5339d9e34e7e3ea5106ca7eb8.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=