[squid-users] https bug slow browsing

HackXBack hack.back at hotmail.com
Wed Dec 24 11:51:53 UTC 2014


# REVISI 19/10/2014 12:24 By Mc Leod
#INFO
#PORT HTTP
#http_port 3128 transparent
#http_port 3127


https_port 3127 intercept ssl-bump generate-host-certificates=on
dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/myCA.pem
http_port  3129
http_port  3128 intercept

#####HDD
#cache_dir aufs /cache 1000 32 256 min-size=0 max-size=33554432

cache_dir aufs /cache01/1 400000 961 256
cache_dir aufs /cache01/2 400000 961 256
cache_dir aufs /cache01/3 400000 961 256
cache_dir aufs /cache01/4 400000 961 256
cache_dir aufs /cache01/5 400000 961 256
cache_dir aufs /cache01/6 400000 961 256

cache_dir aufs /cache02/1 400000 961 256
cache_dir aufs /cache02/2 400000 961 256
cache_dir aufs /cache02/3 400000 961 256
cache_dir aufs /cache02/4 400000 961 256
cache_dir aufs /cache02/5 400000 961 256
cache_dir aufs /cache02/6 400000 961 256

cache_dir aufs /cache03/1 400000 961 256
cache_dir aufs /cache03/2 400000 961 256
cache_dir aufs /cache03/3 400000 961 256
cache_dir aufs /cache03/4 400000 961 256
cache_dir aufs /cache03/5 400000 961 256
cache_dir aufs /cache03/6 400000 961 256


cache_dir aufs /cache04/1 400000 961 256
cache_dir aufs /cache04/2 400000 961 256
cache_dir aufs /cache04/3 400000 961 256
cache_dir aufs /cache04/4 400000 961 256
cache_dir aufs /cache04/5 400000 961 256
cache_dir aufs /cache04/6 400000 961 256


cache_dir aufs /cache05/1 400000 961 256
cache_dir aufs /cache05/2 400000 961 256
cache_dir aufs /cache05/3 400000 961 256
cache_dir aufs /cache05/4 400000 961 256
cache_dir aufs /cache05/5 400000 961 256
cache_dir aufs /cache05/6 400000 961 256






cache_mgr ipbobos.com +9613006553
visible_hostname Internet
unique_hostname Internet
cachemgr_passwd none all

acl banned_methods method OPTIONS POST PURGE CONNECT PUT DELETE TRACE
acl http_code_ignored http_status 200-299

#ACLs#
acl localnet src 10.0.0.0/8	# RFC1918 possible internal network
acl localnet src 172.16.0.0/12	# RFC1918 possible internal network
acl localnet src 192.168.0.0/16	# RFC1918 possible internal network
acl localnet src 172.192.111.0/24

##redirect Porn
#include /etc/squid/porn.conf



http_access allow localhost manager
http_access deny manager
http_access deny to_localhost
http_access allow localnet
http_access allow localhost
http_access deny all

acl partial_content  url_regex -i ^http:\/\/122\.102\.49.*
acl partial_content  url_regex -i ^http:\/\/202\.93\.20.*
acl partial_content  url_regex -i ^http:\/\/armdl\.adobe\.com/pub.*
acl partial_content  url_regex -i ^http:\/\/download\.cdn\.mozilla\.net.*
acl partial_content  url_regex -i ^http.*netmarble\.co\.id.*
acl partial_content  url_regex -i ^http.*gemscool\.com.*
acl partial_content  url_regex -i ^http.*crossfire\.web\.id.*
acl partial_content  url_regex -i ^http.*garenanow\.com.*
acl partial_content  url_regex -i ^http.*winnerinter\.co\.id.*
acl partial_content  url_regex -i ^http.*starhub\.com.*
acl partial_content  url_regex -i ^http.*lytogame\.com.*
acl partial_content  url_regex -i ^http.*megaxus\.com
acl partial_content  url_regex -i ^http.*images\.offensive-security\.com.*
acl partial_content  url_regex -i ^http.*download\.windowsupdate\.com
acl partial_content  url_regex -i ^http.*ws\.microsoft\.com
acl partial_content  url_regex -i ^http.*fs41\.idup\.in.*
acl partial_content  url_regex -i ^http.*tusfiles\.net.*
acl partial_content  url_regex -i ^http.*files\.jalantikus\.com.*
acl partial_content  url_regex -i ^http.*cdn.files.bagas31.com.*
acl partial_content  url_regex -i ^http\/\/dl\.google\.com.*
acl partial_content  url_regex -i ^http.*\.c\.pack\.google\.com.*
acl partial_content  url_regex -i ^http.*\.(exe|psf|msi|msp|msu|dmg|cab)$
range_offset_limit 1 KB partial_content

acl querypath urlpath_regex -i cgi-bin localhost
acl queryreg url_regex -i gemscool\.com\/registration\/.*
acl queryreg url_regex -i gemscool\.com\/isiGcash\/.*
acl queryreg url_regex -i ^http.*(youtube|google).*yt_live_broadcast.*
acl queryreg url_regex -i ^http.*live\.mytrans\.com.*
acl queryreg url_regex -i ^http.*socialpointgames\.com\/dragoncity.*USERID.*
acl queryreg url_regex -i ^http.*fb_source=bookmark_apps.*
acl queryreg url_regex -i ^http.*gvoucher.*
acl queryreg url_regex -i ^http.*\.(asp|aspx|php|xml)(\?.*|)$

cache deny banned_methods
cache deny querypath
cache deny queryreg

acl speedtest urlpath_regex -i speedtest\/.*\.(jpg|php|txt).*$
#acl speedtest urlpath_regex -i results.php\?.*$
store_id_access allow speedtest

acl playstoreandroid url_regex -i
c.android.clients.google.com.market.GetBinary.GetBinary.*
store_id_access allow playstoreandroid

acl DENYCACHE urlpath_regex
\.(ini|ui|lst|inf|pak|ver|patch|md5|cfg|lst|list|rsc|log|conf|dbd|db|aspx|js|m3u8|ts)$
acl DENYCACHE urlpath_regex
(notice.html|notice.swf|afs.dat|dat.asp|patchinfo.xml|version.list|iepngfix.htc|updates.txt|patchlist.txt|update.ver)
acl DENYCACHE urlpath_regex (pointblank.css|login_form.css|form.css)$
cache deny DENYCACHE






#redirect youtube agent
acl youtube url_regex -i \.(youtube|googlevideo)\.com.*
#acl youtube url_regex -i ^http://.*\.googlevideo\.com.*
request_header_access User-Agent deny youtube
request_header_replace User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64;
rv:33.0) Gecko/20100101 Firefox/33.0

#redirect all agents
#request_header_access User-Agent deny all
#request_header_replace User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64;
rv:33.0) Gecko/20100101 Firefox/33.0


cache_effective_user proxy
cache_effective_group proxy

#LOGS
coredump_dir /var/spool/squid/cache/squid
error_directory /usr/share/squid/errors/templates
mime_table /etc/squid/mime.conf

cache_log /var/log/squid/cache.log
access_log /var/log/squid/access.log
cache_store_log /var/log/squid/store.log

logfile_daemon /usr/lib/squid/log_file_daemon
logfile_rotate 12

#debug helper
#debug_options ALL,1 84,9

#debug refresh_pattern
#debug_options ALL,1 22,3

#debug ACL
#debug_options ALL,1 33,2 28,9

#debug squid.conf
#debug_options ALL,1 33,2


#YANG ANE RUBAH
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(asp|aspx|htm|html|php)(\?.*)?$ 0 0% 0


#REFRESH PATTERN
# apple updates
refresh_pattern -i ^http://swscan\.apple\.com 86400 100% 86400 
override-lastmod override-expire ignore-reload ignore-must-revalidate
ignore-private store-stale ignore-no-store
refresh_pattern -i ^http://swcdn\.apple\.com 86400 100% 86400 
override-lastmod override-expire ignore-reload ignore-must-revalidate
ignore-private store-stale ignore-no-store



#Windows Update
refresh_pattern -i
microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200
reload-into-ims
refresh_pattern -i
windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%
43200 reload-into-ims
refresh_pattern -i
windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200
reload-into-ims

#sensitive site
refresh_pattern -i \.(sc-|dl-|ex-|mh-|dll|da-) 0 2% 50 reload-into-ims
refresh_pattern -i \.(mst|Xtp|iop)$ 0 50% 1440 reload-into-ims
refresh_pattern -i
(index.php|autoup.exe|main.exe|xtrap.xt|autoupgrade.exe|update.exe|grandchase.exe|FSLauncher.exe|FreeStyle_Setup.exe|grandchase.exe|filelist.zip)$
0 50% 1440
refresh_pattern -i
(wks_avira-win32-en-pecl.info.gz|wks_avira10-win32-en-pecl.info.gz|servers.def.vpx)$
0 50% 1440
refresh_pattern -i
(setup.exe.gz|avscan.exe.gz|avguard.exe.gz|filelist.zip|AvaClient.exe) 0 50%
1440
refresh_pattern -i (livescore.com|goal.com|bobet|betbetty) 0 50% 60



# refresh pattern
----------------------------------------------------------------------------------#
refresh_pattern -i (cgi-bin|mrtg|graph) 0 0% 0
refresh_pattern -i (xtrap|login|sources) 0 0% 0
refresh_pattern .*(begin|start)\=[1-9][0-9].* 0 0% 0
refresh_pattern -i
\.(html|htm|ini|ver|patch|lst|inf|htc|jsp|asx|asp|aspx|cfg|md5|key|pub|list|db|log|cgi)$
0 0% 0
refresh_pattern
(update.ini|Update.ini|version.list|Version.list|update.1st|update.exe|autoup.exe)
0 0% 0
refresh_pattern
(hackshield|HackShield|HSUpdate|HShield|hsupdate|nprotect|update3) 0 50% 420
override-expire override-lastmod reload-into-ims



#FB
refresh_pattern
\.facebook\.com.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp|api|php(4|3)) 1440
99% 43200 override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-store ignore-private store-stale
refresh_pattern -i facebook\.com.* 1440 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
refresh_pattern -i (fbcdn|akamaihd)\.net.* 14400 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
refresh_pattern \.gstatic\.com/images\? 14400 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
refresh_pattern
\.(edgecastcdn|spilcdn|zgncdn|(tw|y|yt)img)\.com.*\.(jp(e?g|e|2)|gif|png|swf|mp(3|4))
1440 99% 43200 override-expire override-lastmod ignore-reload ignore-private
ignore-no-store reload-into-ims store-stale
refresh_pattern (gstatic|diggstatic)\.com/.* 1440 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
refresh_pattern
(photobucket|pbsrc|flickr|yimg|ytimg|twimg|gravatar)\.com.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp(4|3))
1440 99% 43200 override-expire ignore-reload ignore-private
refresh_pattern ^http:\/\/images|image|img|pics|openx|thumbs[0-9]\. 1440 99%
43200 override-expire override-lastmod ignore-reload ignore-private
ignore-no-store reload-into-ims store-stale
refresh_pattern ^.*safebrowsing.*google 1440 90% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
#refresh_pattern ^http://.*\.squid\.internal\/.* 10080 99% 79900
override-expire override-lastmod ignore-reload ignore-no-store
ignore-must-revalidate reload-into-ims ignore-private ignore-auth
store-stale
refresh_pattern http://gtssl-ocsp.geotrust.com/ 1440 99% 43200
override-expire override-lastmod ignore-reload ignore-private
ignore-no-store reload-into-ims store-stale
refresh_pattern http://ocsp.godaddy.com/ 1440 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale
refresh_pattern http://ocsp.digicert.com/ 1440 99% 43200 override-expire
override-lastmod ignore-reload ignore-private ignore-no-store
reload-into-ims store-stale



#All File with ?
refresh_pattern -i
\.(npk|ipa|sis|apk|ipsw|pak|kom|dds|thor|nar|gpf|nzp|xpi|cdo|3gp|avi|ac4|ram|mp(e?g|a|e|1|2|3|4)|m4(a|v)|3g(p?2|p)|mk(a|v)|og(x|v|a|g|m)|wm(a|v)|wmx|wpl|rm|snd|vob|wav|asx|avi|qt|divx|flv|f4v|x-flv|dvr-ms|m(1|2)(v|p)|mov|mid)\?
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern -i
\.(ogg|m1v|m2(v|p)|txt|dll|mo(d|v)|7z|ace|rar|jar|gz|tgz|bz2|iso|mod|arj|lha|lzh|zip|tar|cab|dat)\?
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern -i \.(jp(e?g|e|2)|bmp|gif|pn[pg]|bm?|tiff?|ico|swf|ad)\?
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern -i \.(exe|ms(i|u|p)|deb|bin|ax|r(a|p)m|app|pkg|apk)\? 86400
100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern -i
\.(pp(t?x|t)|epub|pdf|rtf|wax|cb(r|z|t)|xl(s?x|s)|do(c?x|c)|inc|x-flv)\?
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern -i
\.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|tar.gz|tar.bz2|rpm|vpu)\? 86400 100% 86400 
override-lastmod override-expire ignore-reload ignore-must-revalidate
ignore-private store-stale ignore-no-store
refresh_pattern -i
\.(raw|pnm|png|webp|m4v|rmvb|mkv|webm|doc|docx|pptx?|xlsx?|lit|pdb|prc|djvu|psd|mar|crx|dcr|uha|dmg|zipx|msi|msu|msp|aac|amr|amf|au|wma|rma|nup|vdf|idx|gem|mcs|avc|vpx|ipa)\?
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store

#All File without ?
refresh_pattern
\.(npk|ipa|sis|apk|ipsw|pak|kom|dds|thor|nar|gpf|nzp|xpi|cdo|3gp|avi|ac4|ram|mp(e?g|a|e|1|2|3|4)|m4(a|v)|3g(p?2|p)|mk(a|v)|og(x|v|a|g|m)|wm(a|v)|wmx|wpl|rm|snd|vob|wav|asx|avi|qt|divx|flv|f4v|x-flv|dvr-ms|m(1|2)(v|p)|mov|mid)
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern
\.(ogg|m1v|m2(v|p)|txt|dll|mo(d|v)|7z|ace|rar|jar|gz|tgz|bz2|iso|mod|arj|lha|lzh|zip|tar|cab|dat)
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern \.(jp(e?g|e|2)|bmp|gif|pn[pg]|bm?|tiff?|ico|swf|ad) 86400
100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern \.(exe|ms(i|u|p)|deb|bin|ax|r(a|p)m|app|pkg|apk) 86400 100%
86400  override-lastmod override-expire ignore-reload ignore-must-revalidate
ignore-private store-stale ignore-no-store
refresh_pattern
\.(pp(t?x|t)|epub|pdf|rtf|wax|cb(r|z|t)|xl(s?x|s)|do(c?x|c)|inc|x-flv) 86400
100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|tar.gz|tar.bz2|rpm|vpu)
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store
refresh_pattern
\.(raw|pnm|png|webp|m4v|rmvb|mkv|webm|doc|docx|pptx?|xlsx?|lit|pdb|prc|djvu|psd|mar|crx|dcr|uha|dmg|zipx|msi|msu|msp|aac|amr|amf|au|wma|rma|nup|vdf|idx|gem|mcs|avc|vpx|ipa)
86400 100% 86400  override-lastmod override-expire ignore-reload
ignore-must-revalidate ignore-private store-stale ignore-no-store



#REFRESH PATTERN
#refresh_pattern -i \.(js|css)$ 0 20% 4320 ignore-reload ignore-no-store
ignore-must-revalidate ignore-private ignore-auth store-stale
#refresh_pattern -i \.(nup|vdf|idx|gem|mcs|avc|vpx)$ 0 20% 4320
ignore-reload ignore-must-revalidate ignore-private store-stale
ignore-no-store
#refresh_pattern -i ^http:\/\/safebrowsing-cache\.google\.com\/.* 525600
100% 525600 override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i ^http.*\/hackshield\/.* 0 20% 1440 ignore-no-store
ignore-must-revalidate ignore-private ignore-auth store-stale
#refresh_pattern -i \.(iop)$ 0 50% 1440 ignore-reload ignore-no-store
ignore-must-revalidate ignore-private ignore-auth store-stale
refresh_pattern -i
^http.*(netmarble\.co\.id|gemscool\.com|crossfire\.web\.id|garenanow\.com|winnerinter\.co\.id|starhub\.com|lytogame\.com|megaxus\.com).*
0 20% 4320 ignore-no-store ignore-private ignore-auth store-stale
refresh_pattern -i ^http:\/\/(storeid\.cdn|cdn\.porno).* 525600 100% 525600
override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i \.(jpg|jpeg|raw|pnm|gif|bmp|tiff|swf|png|webp)(\?.*|)$
525600 100% 525600 override-expire override-lastmod reload-into-ims
ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i
\.(web|avi|f4v|m4v|mpg|3gp|wmv|mov|rmvb|mkv|swf|dat|flv|fla|mp4|webm|00[1-9])
525600 100% 525600 override-expire override-lastmod reload-into-ims
ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i \.(docx?|pptx?|xlsx?|pdf|lit|rtf|pdb|epub|prc|djvu)
525600 100% 525600 override-expire override-lastmod reload-into-ims
ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i
\.(exe|rar|zip|tar|mar|iso|dcr|bz2|gz|7z|uha|bin|dmg|zipx|msi|msu|msp|cab|diff)
525600 100% 525600 override-expire override-lastmod reload-into-ims
ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
#refresh_pattern -i \.(mid|mp3|wav|mka|aac|ogg|amr|amf|au|wma|rma) 525600
100% 525600 override-expire override-lastmod reload-into-ims ignore-reload
ignore-no-cache ignore-no-store ignore-private ignore-auth
ignore-must-revalidate
refresh_pattern  . 0 20% 4320 ignore-no-store ignore-must-revalidate
ignore-private ignore-auth store-stale reload-into-ims ignore-reload




#OTHER
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

#acl fakespeed urlpath_regex -i speedtest\/.*\.(jpg|php).*$
#acl fakespeed urlpath_regex -i results.php\?.*$
#url_rewrite_access allow fakespeed
#url_rewrite_program /etc/squid/rewriter.pl
#url_rewrite_children 10 startup=5 concurrency=10
#redirector_bypass on

cache_mem 512 MB
cache_swap_low 98
cache_swap_high 99

##ZPH
qos_flows local-hit=0x30

## DNS
dns_nameservers 127.0.0.1
ftp_user anonymous@
ftp_passive on
ftp_sanitycheck on

#============================================================$
# SNMP , if you want to generate graphs for SQUID via MRTG
#============================================================$
#acl snmppublic snmp_community public
#snmp_port 3401
#snmp_access allow snmppublic all
#snmp_access allow all


#To prevent caching of a domain:
#acl example dstdomain .example.com
#cache deny example

#acl mix dstdom_regex -i "/etc/squid/block.txt"
#http_access deny mix



sslcrtd_program /usr/lib/squid/ssl_crtd -s /var/squid/ssl_db/certs/ -M 4MB
sslcrtd_children 32 startup=30 idle=1

ssl_unclean_shutdown on
sslproxy_version 1
always_direct allow all
sslproxy_cert_error allow all
sslproxy_flags DONT_VERIFY_PEER



ssl_bump server-first all


acl norewrite url_regex -i redirector\.c\.android\.clients\.google\.com
acl norewrite url_regex -i ^http.*(youtube|google).*yt_live_broadcast.*
acl norewrite url_regex -i ^http://redirector\.(googlevideo|c\.youtube)\.com

store_id_program /etc/squid/storeid.pl
store_id_children 40 startup=10 idle=5 concurrency=10
store_id_access deny norewrite
store_id_access deny banned_methods
store_miss deny !banned_methods !http_code_ignored
send_hit deny banned_methods http_code_ignored



pid_filename	/var/run/squid.pid





maximum_object_size 4096 MB
maximum_object_size_in_memory 10 KB
minimum_object_size 512 bytes

icap_206_enable on
httpd_suppress_version_string	on
ipcache_low 98
ipcache_high 99
offline_mode off
#range_offset_limit 1 KB
client_persistent_connections off
server_persistent_connections off
ipcache_size 85120
shutdown_lifetime 10 seconds
log_icp_queries off
icp_hit_stale on
query_icmp on
#high_page_fault_warning 2
nonhierarchical_direct on
prefer_direct off
half_closed_clients off
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
range_offset_limit 0

vary_ignore_expire on
#reload_into_ims on
memory_pools off
max_filedescriptors 100000
fqdncache_size 85120
read_timeout 1 minutes
client_lifetime 24 hours
positive_dns_ttl 6 hours
negative_ttl 0 second
negative_dns_ttl 1 second
request_timeout 15 seconds
store_avg_object_size 13 KB
#client_db on
pipeline_prefetch off
forwarded_for off
# If you want to hide your proxy machine from being detected at various site
use following
#via off

global_internal_static off
retry_on_error on
read_ahead_gap 1 KB

minimum_expiry_time 3600 seconds
#accept_filter data=2
relaxed_header_parser on
check_hostnames off
allow_underscore on
request_header_max_size 64 KB
reply_header_max_size 64 KB


#persistent_request_timeout 150 seconds
uri_whitespace allow
ignore_unknown_nameservers off
strip_query_terms off
detect_broken_pconn on
pconn_timeout 150 seconds
store_dir_select_algorithm round-robin



ie_refresh on

#range_offset_limit 64 KB
buffered_logs on
dns_v4_first on




--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/https-bug-slow-browsing-tp4668830p4668834.html
Sent from the Squid - Users mailing list archive at Nabble.com.


More information about the squid-users mailing list