Forum Debian Users Gang

#ilosc ramu:
cache_mem 800 MB

# maksymalny plik zapisywany na dysku:
store_avg_object_size 1024 kB

# maksymalna wielkosc obiektu
maximum_object_size 12 MB
minimum_object_size 0 KB

# Poniżej tej wartości obiekty NIE są zachowywane na dysku.
minimum_object_size 0 KB
maximum_object_size_in_memory 128 KB

cache_swap_log /var/log/squid/swap.log
#cache_access_log /var/log/squid/access.log
cache_access_log none
cache_store_log none

log_icp_queries off
logfile_rotate 3
sleep_after_fork 2000

shutdown_lifetime 10 seconds
client_persistent_connections off

#dla archaicznych internet exploderów
ie_refresh on
half_closed_clients off

store_dir_select_algorithm round-robin

cache_effective_user proxy
cache_effective_group proxy
cache_replacement_policy lru

###########################################################

acl all src 10.10.1.0/255.255.255.0
acl all src 10.10.2.0/255.255.255.0
acl all src 10.10.3.0/255.255.255.0

acl blok_reklam url_regex "/etc/squid/reklamy.acl"

# udostepnianie proxy dla wszystkich
http_access deny blok_reklam
http_access allow all

acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 70 80 210 443 563 1025-65535
acl CONNECT method CONNECT

######################################################
icp_access allow all
miss_access allow all
cache_mgr administrator@tctransfer.pl

http_port 3128 transparent
error_directory /usr/share/squid/errors/Polish
visible_hostname localhost
log_fqdn off
log_mime_hdrs on
ident_lookup_access allow all localhost SSL_ports Safe_ports CONNECT

#dysk cache dla squida
cache_dir ufs /var/spool/squid 8244 24 256
redirect_rewrites_host_header off

#na jakim poziomie zapełnienia ma pracować cache dyskowe
cache_swap_low  90
cache_swap_high 95
# Włanczamy cachowanie cgi
    hierarchy_stoplist cgi-bin ?
    acl QUERY urlpath_regex cgi-bin \?
    no_cache deny QUERY

# Reguly odswiezania - zoptymalizowane
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

refresh_pattern -i (.*jpg$|.*gif$) 0 50% 28800 reload-into-ims
refresh_pattern -i (.*png$|.*bmp$) 0 50% 28800 reload-into-ims
refresh_pattern -i (.*html$|.*htm|.*shtml) 0 20% 1440
refresh_pattern (http://.*/$) 0 20% 1440
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

refresh_pattern -i \.(zip|gz|bz2|exe|rar|mp3|mpg|avi|wmv|vqf|ogg)   43200   100%    43200   reload-into-ims
refresh_pattern windowsupdate.com/.*\.(cab|exe|dll)     43200    100%    43200   reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe|dll) 43200   100%    43200   reload-into-ims
refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe|dll) 43200 100% 43200 reload-into-ims
refresh_pattern symantecliveupdate.com/.*\.(zip|exe)    43200    100%    43200   reload-into-ims
refresh_pattern windowsupdate.com/.*\.(cab|exe)         43200   100%    43200   reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe)    43200   100%    43200   reload-into-ims
refresh_pattern avast.com/.*\.(vpu|vpaa)    43200   100%    43200   reload-into-ims