<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0"></p>
<div>Thanks for reading my Email.</div>
<div><br>
</div>
<div>I have two questions:</div>
<div><br>
</div>
<div>My first question is how many maximum concurrent connection and the maximum new connection of squid are.</div>
<div><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><br>
</span></div>
<div><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">The second question is how </span><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 12pt;">to
configure Squid can improve the maximum concurrent connection,maximum new connection and the performance .</span><br>
</div>
<div><br>
</div>
<div>I used 3.5.27 version.</div>
<div><br>
</div>
<div>My squid.conf is:</div>
<div><br>
</div>
<div>
<div>acl localnet src 10.0.0.0/8<span style="white-space:pre"> </span># RFC1918 possible internal network</div>
<div>acl localnet src 172.16.0.0/12<span style="white-space:pre"> </span># RFC1918 possible internal network</div>
<div>acl localnet src 192.168.0.0/16<span style="white-space:pre"> </span># RFC1918 possible internal network</div>
<div>acl localnet src fc00::/7 # RFC 4193 local private network range</div>
<div>acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines</div>
<div><br>
</div>
<div>acl SSL_ports port 443</div>
<div>acl Safe_ports port 80<span style="white-space:pre"> </span># http</div>
<div>acl Safe_ports port 21<span style="white-space:pre"> </span># ftp</div>
<div>acl Safe_ports port 443<span style="white-space:pre"> </span># https</div>
<div>acl Safe_ports port 70<span style="white-space:pre"> </span># gopher</div>
<div>acl Safe_ports port 210<span style="white-space:pre"> </span># wais</div>
<div>acl Safe_ports port 1025-65535<span style="white-space:pre"> </span># unregistered ports</div>
<div>acl Safe_ports port 280<span style="white-space:pre"> </span># http-mgmt</div>
<div>acl Safe_ports port 488<span style="white-space:pre"> </span># gss-http</div>
<div>acl Safe_ports port 591<span style="white-space:pre"> </span># filemaker</div>
<div>acl Safe_ports port 777<span style="white-space:pre"> </span># multiling http</div>
<div>acl CONNECT method CONNECT</div>
<div><br>
</div>
<div>#</div>
<div># Recommended minimum Access Permission configuration:</div>
<div>#</div>
<div># Deny requests to certain unsafe ports</div>
<div>http_access deny !Safe_ports</div>
<div><br>
</div>
<div># Deny CONNECT to other than secure SSL ports</div>
<div>http_access deny CONNECT !SSL_ports</div>
<div><br>
</div>
<div># Only allow cachemgr access from localhost</div>
<div>http_access allow localhost manager</div>
<div>http_access deny manager</div>
<div><br>
</div>
<div># We strongly recommend the following be uncommented to protect innocent</div>
<div># web applications running on the proxy server who think the only</div>
<div># one who can access services on "localhost" is a local user</div>
<div>http_access deny to_localhost</div>
<div><br>
</div>
<div>#</div>
<div># INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS</div>
<div>#</div>
<div><br>
</div>
<div># Example rule allowing access from your local networks.</div>
<div># Adapt localnet in the ACL section to list your (internal) IP networks</div>
<div># from where browsing should be allowed</div>
<div>http_access allow localnet</div>
<div>http_access allow localhost</div>
<div><br>
</div>
<div># And finally deny all other access to this proxy</div>
<div>acl NCACHE method GET</div>
<div>store_miss deny all</div>
<div>via off</div>
<div><br>
</div>
<div># Squid normally listens to port 3128</div>
<div>http_port 3128 </div>
<div>https_port 192.168.XX.XXX:3129 intercept ssl-bump connection-auth=off generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/local/squid/ssl_cert/myCA.pem key=/usr/local/squid/ssl_cert/myCA.pem options=NO_SSLv3,NO_SSLv2</div>
<div><br>
</div>
<div>acl ssl_step1 at_step SslBump1</div>
<div>acl ssl_step2 at_step SslBump2</div>
<div>acl ssl_step3 at_step SslBump3</div>
<div><br>
</div>
<div>ssl_bump peek ssl_step1</div>
<div>ssl_bump stare ssl_step2</div>
<div>ssl_bump bump ssl_step3</div>
<div><br>
</div>
<div>sslcrtd_program /usr/local/squid/libexec/ssl_crtd -s /usr/local/squid/lib/ssl_db -M 4MB</div>
<div>sslcrtd_children 8 startup=1 idle=1</div>
<div><br>
</div>
<div>#Uncomment and adjust the following to add a disk cache directory.</div>
<div>cache_dir ufs /usr/local/squid/var/cache/squid 4096 16 256</div>
<div>minimum_object_size 0 KB</div>
<div>maximum_object_size 4096 KB</div>
<div>maximum_object_size_in_memory 4096 KB</div>
<div><br>
</div>
<div>ipcache_size 1024 MB</div>
<div>ipcache_low 90</div>
<div>ipcache_high 95</div>
<div>fqdncache_size 1024 MB</div>
<div><br>
</div>
<div>cache_mem 2048 MB</div>
<div>cache_swap_low 90</div>
<div>cache_swap_high 95</div>
<div><br>
</div>
<div># Leave coredumps in the first cache dir</div>
<div>coredump_dir /usr/local/squid/var/cache/squid</div>
<div><br>
</div>
<div>#icap</div>
<div>icap_enable on</div>
<div>icap_preview_enable on</div>
<div>icap_preview_size 1024</div>
<div>icap_send_client_ip on</div>
<div>adaptation_meta X-Client-Port "%>p"</div>
<div>icap_206_enable on</div>
<div>icap_persistent_connections off</div>
<div><br>
</div>
<div>icap_service service_req reqmod_precache 0 icap://192.168.XX.XXX:1344/echo</div>
<div>icap_service service_res respmod_precache 1 icap://192.168.XX.XXX:1344/echo</div>
<div>adaptation_access service_res allow all</div>
<div>adaptation_access service_req allow all</div>
<div><br>
</div>
<div>#</div>
<div># Add any of your own refresh_pattern entries above these.</div>
<div>#</div>
<div>refresh_pattern ^ftp:<span style="white-space:pre"> </span>1440<span style="white-space:pre">
</span>20%<span style="white-space:pre"> </span>10080</div>
<div>refresh_pattern ^gopher:<span style="white-space:pre"> </span>1440<span style="white-space:pre">
</span>0%<span style="white-space:pre"> </span>1440</div>
<div>refresh_pattern -i (/cgi-bin/|\?) 0<span style="white-space:pre"> </span>0%<span style="white-space:pre">
</span>0</div>
<div>refresh_pattern .<span style="white-space:pre"> </span>0<span style="white-space:pre">
</span>20%<span style="white-space:pre"> </span>4320</div>
<div><br>
</div>
<br>
</div>
<div><br>
<span style="font-size: 12pt;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span></span></span></span></div>
<div><span style="font-size: 12pt;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span><br>
</span></span></span></div>
<div><span style="font-size: 12pt;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span><br>
</span></span></span></div>
<p></p>
</div>
</body>
</html>