[squid-users] Duplicate Headers
Benjamin Reed
ranger at opennms.org
Tue Nov 24 18:18:05 UTC 2015
On 11/24/15 1:09 PM, Antony Stone wrote:
> squid.conf, minus blank lines and comments, please?
Here you go. Each system is identical but with itself commented out of
the "cache_peer" and "cache_peer_access" lines.
-------------- next part --------------
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl our_sites dstdomain yum.opennms.org debian.opennms.org maven.opennms.org repo.opennms.org .mirrors.opennms.org .mirrors.opennms.com
acl mirrors src 45.55.163.22/32
acl mirrors src 2604:a880:800:10::60:4001/128
acl mirrors src 104.236.160.233/32
acl mirrors src 2604:a880:1:20::d6:7001/128
acl mirrors src 46.101.6.157/32
acl mirrors src 2a03:b0c0:1:d0::7a:7001/128
acl mirrors src 46.101.211.239/32
acl mirrors src 2a03:b0c0:3:d0::8a:6001/128
http_access deny !Safe_ports
http_access deny CONNECT
# manager access
http_access allow localhost manager
http_access deny manager
# proxy access
http_access allow our_sites
http_access allow localhost
http_access deny all
# peer access
icp_access allow mirrors
icp_access deny all
icp_port 3130
# cache access
cache allow all
http_port 80 accel defaultsite=www.mirrors.opennms.org vhost
http_port 8080 accel defaultsite=www.mirrors.opennms.org vhost
#http_port 3128 accel defaultsite=www.mirrors.opennms.org vhost
coredump_dir /var/spool/squid3
logfile_rotate 10
#cache_store_log stdio:/var/log/squid3/store.log
debug_options rotate=10
client_ip_max_connections 8
# how much to cache/keep
minimum_object_size 0
maximum_object_size 600 MB
minimum_expiry_time 60 seconds
refresh_pattern . 900 80% 604800
memory_cache_mode disk
memory_replacement_policy heap LFUDA
cache_replacement_policy heap LFUDA
cache_peer mirror.internal.opennms.com parent 80 0 no-query originserver name=myAccel
cache_peer_access myAccel allow our_sites
cache_peer_access myAccel deny all
#cache_peer ny-1.mirrors.opennms.org sibling 80 3130 name=ny1
cache_peer sf-1.mirrors.opennms.org sibling 80 3130 name=sf1
cache_peer uk-1.mirrors.opennms.org sibling 80 3130 name=uk1
cache_peer de-1.mirrors.opennms.org sibling 80 3130 name=de1
#cache_peer_access ny1 allow all
cache_peer_access sf1 allow all
cache_peer_access uk1 allow all
cache_peer_access de1 allow all
cache_dir aufs /var/spool/squid3/cache-small 2000 16 256 min-size=0 max-size=100000
cache_dir aufs /var/spool/squid3/cache-large 14000 16 256 min-size=100000 max-size=600000000
# cache 404s for 5 minutes
negative_ttl 300 seconds
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151124/ecb76d01/attachment-0001.sig>
More information about the squid-users
mailing list