服务器维护,服务器代维,安全设置,漏洞扫描,入侵检测服务

运维之家

 找回密码
 注册
搜索
查看: 4495|回复: 0

Centos下配置Squid节点(CDN)

[复制链接]
dirtysea 发表于 2010-4-15 11:14:08 | 显示全部楼层 |阅读模式
/usr/include/bits/typesizes.h
/usr/include/linux/posix_types.h
找到#define __FD_SETSIZE 1024
把1024改为65536
并执行
ulimit -Hs 65536
ulimit -n 65536

下载Squid
wget http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE13.tar.gz
解压
tar zxvf squid-2.6.STABLE13.tar.gz
**目录
cd squid-2.6.STABLE13
在configure之前先设置cflags
**http://gentoo-wiki.com/Safe_Cflags
查看机器所用CPU对应的优化参数
用export设置
export CHOST="i686-pc-linux-gnu"
export CFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer"
export CXXFLAGS="${CFLAGS}"


开始configure
./configure --prefix=/usr/local/squid --enable-follow-x-forwarded-for --enable-storeio=aufs,ufs --with-maxfd=65536 --with-pthreads --enable-dlmalloc --enable-poll --enable-stacktraces --enable-removal-policies=heap,lru --enable-delay-pools

然后Make

出现
make[1]: Nothing to be done for `all-am'.
make[1]: Leaving directory `/root/squid-2.6.STABLE13'
[root@cnc squid-2.6.STABLE13]#
为Make成功

make install安装

make[2]: Leaving directory `/root/squid-2.6.STABLE13'
make[1]: Leaving directory `/root/squid-2.6.STABLE13'
[root@cnc squid-2.6.STABLE13]#

结束

如果出现报错则需要make clean再重新Make

配置Squid.conf

RM掉Squid.conf
vi squid.conf创建新文件
并把以下内容粘贴进去

http_port 80 vhost vport=80
acl apache rep_header Server Apache
broken_vary_encoding allow apache
cache_mem 1024 MB
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 256 KB
cache_dir ufs /var/spool/squid 20480 16 256
cache_swap_low 80
cache_swap_high 97
strip_query_terms off
request_body_max_size 5 MB
memory_pools on
memory_pools_limit 50 MB
access_log none
cache_log /var/log/squid/cache.log
cache_store_log none
pid_filename /var/run/squid.pid
hosts_file /etc/hosts
refresh_pattern ftp: 1440 20% 10080
refresh_pattern gopher: 1440 0% 1440
refresh_pattern -i yongchuibuxiu\.cn 240 100% 1440 ignore-reload
refresh_pattern -i www\.yongchuibuxiu\.cn 240 100% 1440 ignore-reload
refresh_pattern -i .gif 180 20% 10080 override-expire ignore-reload reload-into-ims
refresh_pattern -i .jpg 180 20% 10080 override-expire ignore-reload reload-into-ims
refresh_pattern . 120 50% 1440
acl all src 0.0.0.0/0.0.0.0
acl p-manager proto cache_object
acl s-localhost src 127.0.0.1/255.255.255.255
acl d-localhost dst 127.0.0.0/8
acl d-domains dstdomain .yongchuibuxiu.cn
acl p-ssl port 443 563
acl p-safe port 80 443 563
acl m-conn method CONNECT
acl m-purge method PURGE
acl n-maxconn maxconn 15
http_access allow p-manager s-localhost
http_access allow m-purge
http_access deny !p-safe
http_access deny m-conn !p-ssl
http_access deny n-maxconn
http_access allow p-manager
http_access allow d-domains
http_access deny all
http_reply_access allow all
acl r-url urlpath_regex realtime
cache deny r-url
icp_access allow all
follow_x_forwarded_for allow all
acl_uses_indirect_client offrange_offset_limit -1
dns_timeout 2 seconds
forward_timeout 10 seconds
connect_timeout 10 seconds
peer_connect_timeout 6 seconds
read_timeout 10 seconds
request_timeout 6 seconds
persistent_request_timeout 16 seconds
cache_mgr cs@enkj.com
cache_effective_user nobody
cache_effective_group nobody
visible_hostname yongchuibuxiu.cn
logfile_rotate 0
always_direct allow all
error_directory /usr/local/squid/share/errors/Simplify_Chinese
coredump_dir /var/spool/squid

保存退出

设置文件夹权限

mkdir /var/log/squid

chown nobody:nobody /var/log/squid

chown nobody:nobody /var/spool/squid

在/usr/local/squid/sbin目录下运行
./squid -z
没有报错的话说明目录创建成功


./squid -Nd 10
让Squid跑起来

curl -I http://www.yongchuibuxiu.cn/
看一下有没有缓存
没有的话
X-Cache: MISS from yongchuibuxiu.cn
然后再
curl -I http://www.yongchuibuxiu.cn/



ulimit -Hs 65536
ulimit -n 65536
./squid

上面的命令可以让Squid正式跑起来

编辑/etc/rc.local
在文件最后添加
ulimit -Hs 65536
ulimit -n 65536
/usr/local/squid/sbin/squid

让Squid随系统启动
您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|小黑屋|手机版|Archiver|运维之家

GMT+8, 2024-4-27 07:05 , Processed in 0.085124 second(s), 14 queries .

Powered by Dirtysea

© 2008-2020 Dirtysea.com.

快速回复 返回顶部 返回列表