[squid-users] Config Recommendations
creditu at eml.cc
creditu at eml.cc
Tue Dec 6 15:05:03 UTC 2016
On Sun, Dec 4, 2016, at 08:19 PM, Amos Jeffries wrote:
> On 5/12/2016 1:44 p.m., creditu at eml.cc wrote:
> > For a 3.1 accelerator we have put the followinconfig together. This
> > accelerator will not be doing any caching since we use an external
> > service. Initially both http and https will be provided. Some
> > questions: I think the ordering of statements and acls is correct, but
> > was hoping to get some feedback if possible. Also, since we want to
> > turn caching off completely I was wondering if some of the statements
> > are unnecessary. Any feedback or recommendations on the overall config
> > would be appreciated.
>
> You can remove any options which are setting things to their default
> values.
>
> Add "cache_mem 0" to prevent the memory cache being allocated.
> And remove the *_replacement_policy lines, they are pointless without
> caching.
>
> The "cachemgr_passwd none info" line is useless, since the next thing
> done is disabled.
> That also means the "http_access allow manager localhost" line is not
> useful either unless you re-open the info report.
>
>
> Amo
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
Quick follow up. When using debug 28,3 does this record
cache_peer_access and deny_info acls in the cache log? Since I'm using
the same ACL declaration for both the cache_peer_access and http_access
statements, in a lot of cases, I just want to make sure I'm
interpreting the ACL debug information correctly.
For example:
acl www dstdomain www.example.com
cache_peer 10.10.10.1 parent 80 0 no-query no-digest originserver
round-robin
cache_peer_access 10.10.10.1 allow www
cache_peer_access 10.10.10.1 deny all
cache_peer 10.10.10.2 parent 80 0 no-query no-digest originserver
round-robin
cache_peer_access 10.10.10.2 allow www
cache_peer_access 10.10.10.2 deny all
. . .
http_access allow www
As always, thanks for the help.
More information about the squid-users
mailing list