Shulou(Shulou.com)06/03 Report--

"1" Overview: when a client requests a WEB page through a proxy, the designated proxy server will first check its own cache. If there is already a page needed by the client in the cache, it will directly feedback the page content in the cache to the client. If there are no pages to be accessed by the client in the cache, the proxy server will send an access request to the INTERNET. When the accessed web page is obtained, the proxy server will send an access request to the client. The web page data is saved to the cache and sent to the client. " 2 "proxy type: traditional proxy: that is, ordinary proxy service. First, you must manually set the address and port of the proxy server in the client's browser, QQ chat tool and download software program before you can use the proxy to access the network." For web browsers, domain name resolution requests when visiting the site are also sent to the specified proxy server. Transparent proxy: provides the same functions and services as traditional proxies, the difference is that the client does not need to specify the address and port of the proxy server, but through the default route, the firewall policy redirects WEB access, which is actually handed over to the proxy server. The process of redirection is transparent to the client, and the user does not even know that he is using a proxy server, so it is called a "transparent proxy". When using a transparent proxy, the domain name resolution request when the web browser visits the website will be given priority to the DNS server. When "3" compiles and installs the compilation option of squid configuration SQUID, set the installation directory to / usr/local/squid, and other specific options are determined according to the actual situation. Please refer to ". / configure-- help" before configuration. Tar zxf squid-3.4.6.tar.gz-C / usr/srccd squid-3.4.6 (compile item interpretation). / configure--prefix=/usr/local/squid / / installation directory-- sysconfdir=/etc / / modify the configuration file to another directory separately-- enable-arp-acl / / can be set in the plan and managed directly through the client MAC. Prevent clients from using IP spoofing-- enable-linux-netfilter / / use kernel filtering-- enable-linux-tproxy / / support transparent mode-- enable-async-io= value / / Asynchronous IBO to improve storage performance Equivalent to-- enable-pthreads-- enable-storeio=ufs,aufs-- with / /-pthreads-- with-aufs-thread= value-- enable-err-language= "Simplify_Chinese" / / error message display language-- enable-underscore / / allows underscore in URL-- enable-poll / / use Poll () mode to improve performance-- enable-gnuregex / / create link files, users and groups after installation using GNU regular expressions. Ln-s / usr/local/squid/sbin/ * (star indicates all) / usr/local/sbinuseradd-M-s / sbin/nologin squidchown-R squid:squid / usr/local/squid/var/SQUID configuration file: the configuration file for the squid service is located in, etc/squid.conf. For more detailed configuration items, please refer to the / etc/squid.conf.documented file. Http_port 3128 / / is used to specify the address and port that the proxy server listens to (default port is 3128) cache_effective_user squid / / this item specifies the SQUID program user, which is used to set the initialization, runtime cache account, otherwise the startup is not successful (manually added)! Cache_effective_group squid / / defaults to the basic group of cache_effective_user specified account (manually added) SQUID operation control: check whether the configuration file syntax is correct: squid-k parse start and stop SQUID: squid-z / /-z option is used to initialize the cache directory squid / / start the SQUID service to confirm that the SQUID service is in normal listening state: netstat-anpt | grep "squid"

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.