>From the multiple instance setup using Squid 3stable25 i have shifted to
>squid3stable1 packaged with ubuntu 8.04 LTS.However i am unable to understand
>why its too much slow. Whats wrong please anybody help out.Is it something to
>do with Operating system? Or initially Squid runs that much slow? I feel
>helpless. Please guide me.
My Hardware:
Physical Server IBM 3650
Physical RAID 1 + A Volume Disk each of 73 GB size. currently i am doing
caching on RAID1.
RAM 4GB
My Conf File:
visible_hostname squidLhr
unique_hostname squidDefault
pid_filename /var/run/squid3.pid
http_port 10.1.82.53:8080
icp_port 0
snmp_port 0
access_log /var/log/squid3/access.log squid
cache_log /var/log/squid3/cache.log
cache_peer 10.1.82.205 parent 8080 0 default no-digest no-query
#cache_peer 127.0.0.1 parent 3128 0 default no-digest no-query proxy-only
no-delay use in the multiple setup
#temporarily Directive
never_direct allow all
#prefer_direct off use in the multiple setup while ponder on the above
directive as well as it may not be needed with direct internet access.
cache_dir aufs /var/spool/squid3 10000 32 320
coredump_dir /var/spool/squid3
cache_swap_low 75
cache_mem 100 MB
range_offset_limit 0 KB
maximum_object_size 4096 MB
minimum_object_size 0 KB
quick_abort_min 16 KB
cache_replacement_policy lru
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#specific for youtube belowone....
refresh_pattern (get_video\?|videoplayback\?|videodownload\?) 5259487 99999999%
5259487
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
#Define Local Network.
acl FcUsr src "/etc/squid3/FcUsr.conf"
acl PUsr src "/etc/squid3/PUsr.conf"
acl RUsr src "/etc/squid3/RUsr.conf"
#Define Local Servers
acl localServers dst 10.0.0.0/8
#Defining & allowing ports section....
acl SSL_ports port 443 #https
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny request to unknown ports
http_access deny !Safe_ports
# Deny request to other than SSL ports
http_access deny CONNECT !SSL_ports
#Allow access from localhost
http_access allow localhost
# Local server should never be forwarded to neighbour/peers and they should
never be cached.
always_direct allow localservers
cache deny LocalServers
# Windows Update Section...
acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com
acl windowsupdate dstdomain sls.microsoft.com
acl windowsupdate dstdomain productactivation.one.microsoft.com
acl windowsupdate dstdomain ntservicepack.microsoft.com
acl wuCONNECT dstdomain www.update.microsoft.com
acl wuCONNECT dstdomain sls.microsoft.com
http_access allow CONNECT wuCONNECT FcUsr
http_access allow CONNECT wuCONNECT PUsr
http_access allow CONNECT wuCONNECT RUsr
http_access allow CONNECT wuCONNECT localhost
http_access allow windowsupdate all
http_access allow windowsupdate localhost
acl workinghours time MTWHF 09:00-12:59
acl workinghours time MTWHF 15:00-17:00
acl BIP dst "/etc/squid3/Blocked.conf"
####----Definitions for BlockingRules----#####
###Definition of MP3/MPEG
acl FTP proto FTP
acl MP3url urlpath_regex \.mp3(\?.*)?$
acl Movies rep_mime_type video/mpeg
acl MP3s rep_mime_type audio/mpeg
###Definition of Flash Video
acl deny_rep_mime_flashvideo rep_mime_type video/flv
###Definition of Porn
acl Sex urlpath_regex sex
acl PornSites url_regex "/etc/squid3/pornlist"
####Definition of YouTube.
## The videos come from several domains
acl youtube_domains dstdomain .youtube.com .googlevideo.com .ytimg.com
###Definition of FaceBook
acl facebook_sites dstdomain .facebook.com
#### Definition of MSN Messenger
acl msn urlpath_regex -i gateway.dll
acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com
acl msn1 req_mime_type application/x-msn-messenger
####Definition of Skype
acl numeric_IPs url_regex
^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9af]+)?:([0-9af:]+)?:([0-9af]+)?\])):443
acl Skype_UA browser ^skype^
##Definition of Yahoo! Messenger
acl ym dstdomain .messenger.yahoo.com .psq.yahoo.com
acl ym dstdomain .us.il.yimg.com .msg.yahoo.com .pager.yahoo.com
acl ym dstdomain .rareedge.com .ytunnelpro.com .chat.yahoo.com
acl ym dstdomain .voice.yahoo.com
acl ymregex url_regex yupdater.yim ymsgr myspaceim
## Other protocols Yahoo!Messenger uses ??
acl ym dstdomain .skype.com .imvu.com
###Definition for Disallowing download of executables from web#####
acl downloads url_regex "/etc/squid3/download.conf"
###Definiton of Torrentz####
acl torrentSeeds urlpath_regex \.torrent(\?.*)?$
###Definition of Rapidshare###
acl dlSites dstdomain .rapidshare.com .rapidsharemegaupload.com .filespump.com
###---------------------------------------------########
http_access deny PornSites
http_access deny Sex
#http_access deny RUsr PornSites
#http_access deny PUsr PornSites #deny everyone porn sites....
#http_access deny RUsr Sex
#http_access deny PUsr Sex
http_access deny PUsr msnd
http_access deny RUsr msnd
http_access deny PUsr msn
http_access deny RUsr msn
http_access deny PUsr msn1
http_access deny RUsr msn1
http_access deny PUsr numeric_IPs
http_access deny RUsr numeric_IPs
http_access deny PUsr Skype_UA
http_access deny RUsr Skype_UA
http_access deny RUsr ym
http_access deny PUsr ym
http_access deny RUsr ymregex
http_access deny PUsr ymregex
#----Most Restricted settings Exclusive for Normal users......#
http_reply_access deny Movies RUsr
http_reply_access deny MP3s RUsr
http_access deny RUsr FTP
http_access deny RUsr MP3url
http_reply_access deny deny_rep_mime_flashvideo RUsr
http_access deny RUsr youtube_domains
http_access deny RUsr facebook_sites
http_access deny RUsr BIP
http_access deny RUsr downloads
http_access deny RUsr torrentSeeds
http_access deny RUsr dlSites
http_access allow PUsr !workinghours youtube_domains
http_access allow PUsr !workinghours facebook_sites
http_access allow PUsr !workinghours BIP
http_access allow FcUsr
http_access allow PUsr
http_access allow RUsr
http_access deny all
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969
