<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I’m using squid 3.5.2<div class="">and I’m browsing the same website many times but no “HIT” in logs !!!</div><div class=""><br class=""></div><div class="">already enabled https and cert imported .</div><div class=""><br class=""></div><div class="">plz help me why i don’t see HITs in my access.log ?</div><div class=""><br class=""></div><div class="">there are some sites I’m very interested with like ==> <a href="https://www.ruzivodigitallearning.co.zw.com" class="">https://www.ruzivodigitallearning.co.zw.com</a></div><div class=""><br class=""></div><div class="">plz have a look on my config below and advise me with best options to optimise caching and hit ratio increase</div><div class=""><br class=""></div><div class="">cheers </div><div class=""><br class=""></div><div class="">==============</div><div class="">here is my config </div><div class=""><div class="">root@portablecloud-3011:~# cat /etc/squid/squid.conf</div><div class="">acl wu dstdom_regex \.download\.windowsupdate\.com$</div><div class="">acl wu-rejects dstdom_regex stats</div><div class="">acl GET method GET</div><div class="">cache_peer 127.0.0.1 parent 8080 0 proxy-only no-tproxy no-digest no-query no-netdb-exchange name=ms1</div><div class="">cache_peer_access ms1 allow GET wu !wu-rejects</div><div class="">cache_peer_access ms1 deny all</div><div class="">never_direct allow GET wu !wu-rejects</div><div class="">never_direct deny all</div><div class=""><br class=""></div><div class="">########################################</div><div class="">visible_hostname pcloud</div><div class="">acl ip1 myip 10.1.0.1</div><div class="">acl ip2 myip 192.168.10.210</div><div class="">tcp_outgoing_address 192.168.10.210 ip1</div><div class="">tcp_outgoing_address 192.168.10.210 ip2</div><div class="">#</div><div class=""># Recommended minimum configuration:</div><div class="">#</div><div class=""><br class=""></div><div class=""># Example rule allowing access from your local networks.</div><div class=""># Adapt to list your (internal) IP networks from where browsing</div><div class=""># should be allowed</div><div class="">acl localnet src 10.0.0.0/8 # RFC1918 possible internal network</div><div class="">acl localnet src 172.16.0.0/12 # RFC1918 possible internal network</div><div class="">acl localnet src 192.168.0.0/16 # RFC1918 possible internal network</div><div class="">acl localnet src fc00::/7 # RFC 4193 local private network range</div><div class="">acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines</div><div class=""><br class=""></div><div class="">acl SSL_ports port 443</div><div class="">acl Safe_ports port 80 # http</div><div class="">acl Safe_ports port 21 # ftp</div><div class="">acl Safe_ports port 443 # https</div><div class="">acl Safe_ports port 70 # gopher</div><div class="">acl Safe_ports port 210 # wais</div><div class="">acl Safe_ports port 1025-65535 # unregistered ports</div><div class="">acl Safe_ports port 280 # http-mgmt</div><div class="">acl Safe_ports port 488 # gss-http</div><div class="">acl Safe_ports port 591 # filemaker</div><div class="">acl Safe_ports port 777 # multiling http</div><div class="">acl CONNECT method CONNECT</div><div class=""><br class=""></div><div class="">#</div><div class=""># Recommended minimum Access Permission configuration:</div><div class="">#</div><div class=""># Deny requests to certain unsafe ports</div><div class="">http_access deny !Safe_ports</div><div class=""><br class=""></div><div class=""># Deny CONNECT to other than secure SSL ports</div><div class="">http_access deny CONNECT !SSL_ports</div><div class="">http_access allow CONNECT </div><div class=""># Only allow cachemgr access from localhost</div><div class="">http_access allow localhost manager</div><div class="">http_access deny manager</div><div class=""><br class=""></div><div class=""># We strongly recommend the following be uncommented to protect innocent</div><div class=""># web applications running on the proxy server who think the only</div><div class=""># one who can access services on "localhost" is a local user</div><div class="">#http_access deny to_localhost</div><div class=""><br class=""></div><div class="">#</div><div class=""># INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS</div><div class="">#</div><div class=""><br class=""></div><div class=""># Example rule allowing access from your local networks.</div><div class=""># Adapt localnet in the ACL section to list your (internal) IP networks</div><div class=""># from where browsing should be allowed</div><div class="">http_access allow localnet</div><div class="">http_access allow localhost</div><div class=""><br class=""></div><div class=""># And finally deny all other access to this proxy</div><div class="">http_access deny all</div><div class=""><br class=""></div><div class=""># Squid normally listens to port 3128</div><div class="">http_port 3128</div><div class=""><br class=""></div><div class=""># Uncomment and adjust the following to add a disk cache directory.</div><div class="">#cache_dir ufs /var/cache/squid 100 16 256</div><div class=""><br class=""></div><div class=""># Leave coredumps in the first cache dir</div><div class="">#coredump_dir /var/cache/squid</div><div class=""><br class=""></div><div class="">#</div><div class=""># Add any of your own refresh_pattern entries above these.</div><div class="">#</div><div class="">#</div><div class="">refresh_pattern -i \.htm 120 50% 10080 reload-into-ims</div><div class="">refresh_pattern -i \.html 120 50% 10080 reload-into-ims</div><div class="">refresh_pattern ^<a href="http://*.facebook.com/*" class="">http://*.facebook.com/*</a> 720 100% 4320</div><div class="">refresh_pattern ^<a href="https://*.ruzivodigitallearning.co.zw.com/*" class="">https://*.ruzivodigitallearning.co.zw.com/*</a> 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.ruzivodigitallearning.co.zw.com/*" class="">http://*.ruzivodigitallearning.co.zw.com/*</a> 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://mail.yahoo.com" class="">http://mail.yahoo.com</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.yahoo.*" class="">http://*.yahoo.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.yimg.*" class="">http://*.yimg.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.gmail.*" class="">http://*.gmail.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.google.*" class="">http://*.google.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.kaskus.*" class="">http://*.kaskus.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.googlesyndication.*" class="">http://*.googlesyndication.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.plasa.*" class="">http://*.plasa.*</a>/.* 720 100% 4320</div><div class="">refresh_pattern ^<a href="http://*.telkom.*" class="">http://*.telkom.*</a>/.* 720 100% 4320</div><div class="">##################################################</div><div class="">refresh_pattern -i \.<a href="http://fbcdn.net" class="">fbcdn.net</a>.*\.(jpg|gif|png|swf|mp3) 10800 80% 10800 ignore-reload override-expire ignore-no-cache</div><div class="">refresh_pattern static\.ak\.fbcdn\.net*\.(jpg|gif|png) 10800 80% 10800 ignore-reload override-expire ignore-no-cache</div><div class="">refresh_pattern ^http:\/\/profile\.ak\.<a href="http://fbcdn.net" class="">fbcdn.net</a>*\.(jpg|gif|png) 10800 80% 10800 ignore-reload override-expire ignore-no-cache</div><div class="">##############</div><div class="">refresh_pattern -i \.(3gp|7z|ace|asx|avi|bin|cab|dat|deb|divx|dvr-ms) 10800 80% 10800 ignore-no-cache ignore-private override-expire override-lastmod reload-into-ims</div><div class="">refresh_pattern -i \.(rar|jar|gz|tgz|bz2|iso|m1v|m2(v|p)|mo(d|v)) 10800 80% 10800 ignore-no-cache ignore-private override-expire override-lastmod reload-into-ims</div><div class="">refresh_pattern -i \.(jp(e?g|e|2)|gif|pn[pg]|bm?|tiff?|ico|swf|css|js) 10800 80% 10800 ignore-no-cache ignore-private override-expire override-lastmod reload-into-ims</div><div class="">refresh_pattern -i \.(mp(e?g|a|e|1|2|3|4)|mk(a|v)|ms(i|u|p)|og(x|v|a|g)|rar|rm|r(a|p)m|snd|vob|wav) 10800 80% 10800 ignore-no-cache ignore-private override-expire override-lastmod reload-into-ims</div><div class="">refresh_pattern -i \.(pp(s|t)|wax|wm(a|v)|wmx|wpl|zip|cb(r|z|t)) 10800 80% 10800 ignore-no-cache ignore-private override-expire override-lastmod reload-into-ims</div><div class=""> #############################</div><div class="">refresh_pattern (cgi-bin|\?) 0 0% 0</div><div class="">refresh_pattern ^gopher: 1440 0% 1440</div><div class="">refresh_pattern ^ftp: 10080 95% 10800 override-lastmod reload-into-ims</div><div class="">refresh_pattern . 180 95% 10800 override-lastmod reload-into-ims</div><div class="">#################</div><div class="">minimum_object_size 0 bytes</div><div class="">maximum_object_size_in_memory 500 MB</div><div class="">refresh_pattern ^ftp: 1440 20% 10080</div><div class="">refresh_pattern ^gopher: 1440 0% 1440</div><div class="">refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</div><div class="">refresh_pattern . 0 20% 4320</div><div class=""><br class=""></div><div class="">http_port 3126</div><div class="">#http_port 3128</div><div class="">#######################################</div><div class="">cache_swap_low 90</div><div class="">cache_swap_high 95</div><div class="">############################</div><div class="">cache_effective_user squid</div><div class="">cache_effective_group squid</div><div class="">memory_replacement_policy lru</div><div class="">cache_replacement_policy heap LFUDA</div><div class="">########################</div><div class="">maximum_object_size 10000 MB</div><div class="">cache_mem 5000 MB</div><div class="">maximum_object_size_in_memory 10 MB</div><div class="">#########################</div><div class="">logfile_rotate 2</div><div class="">max_filedescriptors 131072</div><div class="">###############################</div><div class="">#cache_dir ufs /root/cache3 600000 64 128</div><div class="">############</div><div class="">cache_dir aufs /var/cache/squid 600000 64 128</div><div class="">#######################################</div><div class="">https_port 3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/local/squid/ssl_cert/myca.pem key=/usr/local/squid/ssl_cert/myca.pem</div><div class="">ssl_bump server-first all</div><div class="">sslcrtd_program /lib/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB</div><div class="">sslcrtd_children 8 startup=1 idle=1</div></div></body></html>