linux中squid3(高命中率)緩存服務器配置

 　　quid cache(簡稱為Squid)是一個流行的自由軟件(GNU通用公共許可證)的代理服務器和Web緩存服務器。Squid有廣泛的用途，從作為網頁服務器的前置cache服務器緩存相關請求來提高Web服務器的速度，到為一組人共享網絡資源而緩存萬維網，域名系統和其他網絡搜索，到通過過濾流量幫助網絡安全，到局域網通過代理上網。Squid主要設計用於在Unix一類系統運行,下面我們來看看squid3(高命中率)緩存服務器配置教程。

　　今天對我的varnish進行了下小小的壓力測試,40s裡的8000並發,沒有失敗一個,估計還可以承受更大的並發,先不說varnish了,我最近找到個命中率很高的squid的配置文件,當然是squid3.0的配置文件,有需要的可以copy回去自己改.

　　系統:centos 5.x

　　需要的軟件:squid-3.0.STABLE25.tar.gz

　　1.下載squid

 代碼如下   wget http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE25.tar.gz
tar zxf squid-3.0.STABLE25.tar.gz && cd squid-3.0.STABLE25

　　2.編譯squid

 代碼如下  

./configure --prefix=/usr/local/squid 
--enable-async-io=100 
--with-pthreads 
--enable-storeio="aufs,diskd,ufs" 
--enable-removal-policies="heap,lru" 
--enable-icmp 
--enable-delay-pools 
--enable-useragent-log 
--enable-referer-log 
--enable-kill-parent-hack 
--enable-arp-acl 
--enable-default-err-language=Simplify_Chinese 
--enable-err-languages="Simplify_Chinese English" 
--disable-poll 
--disable-wccp 
--disable-wccpv2 
--disable-ident-lookups 
--disable-internal-dns 
--enable-basic-auth-helpers="NCSA" 
--enable-stacktrace 
--with-large-files 
--disable-mempools 
--with-filedescriptors=65536 
--enable-ssl 
--enable-x-accelerator-var

make
make install
make install-pinger

　　3.配置squid

 代碼如下   cp /usr/local/squid/etc/squid.conf /usr/local/squid/etc/squid.conf.old
>/usr/local/squid/etc/squid.conf
ln -s /usr/local/squid/etc/squid.conf /etc/squid.conf

　　squid.conf裡的內容:

 代碼如下  

#accel listen port
http_port 80 accel vhost vport
#accel domain
cache_peer xx.xx.xx.xx parent 80 0 no-query originserver no-digest name=a
cache_peer_domain a www.111cn.net
 
#acl
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80       # http
acl Safe_ports port 8080
acl LanSrc src all
acl LanDst dst all
acl LanDstDM dstdomain www.111cn.net
 
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow LanSrc
http_access allow LanDst
http_access allow LanDstDM
http_access deny   all
 
#base
visible_hostname www.111cn.net
cache_mgr [email protected]
cache_effective_user squid
cache_effective_group squid
 
error_directory /usr/local/squid/share/errors/Simplify_Chinese
icon_directory /usr/local/squid/share/icons
mime_table /usr/local/squid/etc/mime.conf
 
cache_replacement_policy lru
#cache_dir
cache_dir aufs /var/cache1 32768 64 64
cache_dir aufs /var/cache2 32768 64 64
cache_mem 2048 MB
max_open_disk_fds 0
#maximum_object_size 512 KB
#maximum_object_size_in_memory 256 KB
maximum_object_size 20 MB
maximum_object_size_in_memory 8 MB
 
#keepalived
client_persistent_connections off
server_persistent_connections on
#persistent_request_timeout 60 seconds
 
#memory_pools on
#memory_pools_limit 64 MB
 
forwarded_for on
log_icp_queries off
 
via off
httpd_suppress_version_string off
 
ie_refresh off
tcp_recv_bufsize 32 KB
 
#acl webservices rep_header Server -i ^linuxtoneWS ^Apache ^nginx
#broken_vary_encoding allow webservices
 
#hidden the squid header
#reply_header_access Server deny all
#reply_header_access X-Cache deny all
#reply_header_access Warning deny all
#reply_header_access Expires deny all
#reply_header_access Cache-Control deny all
#reply_header_access age deny all
#reply_header_access All deny all
 
ipcache_size 1024
ipcache_low 90
ipcache_high 95
 
memory_replacement_policy lru
 
hosts_file /etc/hosts
request_header_max_size 128 KB
 
#deny cache
hierarchy_stoplist cgi-bin ? .php
acl QUERY urlpath_regex cgi-bin? .php
cache deny QUERY
 
#request_body_max_size 0 KB
 
refresh_pattern ^ftp:           60      20%     10080
refresh_pattern ^gopher:        60      0%      1440
refresh_pattern .               0       20%     1440