Assalamualaikum,
pastikan mesin linux anda telah diinstall ubuntu 12 13 atau 14
dapat juga menggunakan OS centos 6.5 new diatasnya
jalankan perintah apt-get install squid3
pada file /etc/squid/squid.conf ini sebagai berikut:
#STAR CONFIG=========================================
# ACCESS CONTROLS OPTIONS
# ====================
#
acl QUERY urlpath_regex -i cgi-bin \? \.php$ \.asp$ \.shtml$ \.cfm$ \.cfml$ \.phtml$ \.php3$ localhost
acl all src
acl LAB src 10.237.0.0/16 # NETWORK LABOR
#acl to_localhost src 127.0.0.1/32
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
acl sslports port 443 563 81 2087 10000
#acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl ym dstdomain .messenger.yahoo.com .psq.yahoo.com
acl ym dstdomain .us.il.yimg.com .msg.yahoo.com .pager.yahoo.com
acl ym dstdomain .rareedge.com .ytunnelpro.com .chat.yahoo.com
acl ym dstdomain .voice.yahoo.com
acl ymregex url_regex yupdater.yim ymsgr myspaceim
acl porno url_regex -i “/etc/squid3/blok-situs”
acl YT dstdomain .youtube.com
#
http_access deny ym
http_access deny ymregex
#http_access allow to_locallhost
#http_access deny manager
http_access allow purge
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports
#http_access allow to_localhost
http_access allow LAB !porno !YT
http_access deny all
#
# NETWORK OPTIONS
# …..
#
http_port 8080
#
# OPTIONS WHICH AFFECT THE CACHE SIZE
# ==============================
#
cache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir aufs /media/mycache/ca1 6000 14 256
cache_dir aufs /media/mycache/ca2 6000 14 256
cache_dir aufs /media/mycache/ca3 6000 14 256
cache_dir aufs /media/mycache/ca4 6000 14 256
cache_dir aufs /media/mycache/ca5 6000 14 256
cache_dir aufs /media/mycache/ca6 6000 14 256
cache_dir aufs /media/mycache/ca7 6000 14 256
cache_dir aufs /media/mycache/ca8 6000 14 256
cache_dir aufs /media/mycache/ca9 6000 14 256
cache_dir aufs /media/mycache/ca10 6000 14 256
maximum_object_size 128000 KB
cache_swap_low 95
cache_swap_high 99
#
# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# ==================================
#
access_log /var/log/squid3/access.log
cache_log /cache/cache.log
#cache_log /dev/null
cache_store_log none
logfile_rotate 5
log_icp_queries off
#
# OPTIONS FOR TUNING THE CACHE
# ========================
#
cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080 reload-into-ims
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
refresh_pattern -i \.(rpm|cab|deb|exe|msi|msu|zip|tar|xz|bz|bz2|lzma|gz|tgz|rar|bin|7z|doc?|xls?|ppt?|pdf|nth|psd|sis)$ 10080 90% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
refresh_pattern -i \.(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ 43200 95% 432000 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
refresh_pattern -i \.(html|htm|css|js)$ 1440 75% 40320
refresh_pattern -i \.index.(html|htm)$ 0 75% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 1440 90% 10080
#
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100
store_avg_object_size 13 KB
#
# HTTP OPTIONS
# ===========
vary_ignore_expire on
#
# ANONIMITY OPTIONS
# ===============
#
request_header_access From deny all
request_header_access Server deny all
request_header_access Link deny all
request_header_access Via deny all
request_header_access X-Forwarded-For deny all
#
# TIMEOUTS
# =======
#
forward_timeout 240 second
connect_timeout 30 second
peer_connect_timeout 5 second
read_timeout 600 second
request_timeout 60 second
shutdown_lifetime 10 second
#
# ADMINISTRATIVE PARAMETERS
# =====================
#
cache_mgr uptsimubd@binadarma.ac.id
cache_effective_user proxy
cache_effective_group proxy
httpd_suppress_version_string on
visible_hostname uptsimubd@binadarma.ac.id
#
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on
#
# DNS OPTIONS
# ==========
#
dns_timeout 10 seconds
dns_nameservers 10.237.15.151
#
# MISCELLANEOUS
# ===========
#
memory_pools off
client_db off
reload_into_ims on
coredump_dir /cache
pipeline_prefetch on
offline_mode off
#
#Marking ZPH
#==========
zph_mode tos
zph_local 0x04
zph_parent 0
zph_option 136
acl magic_words1 url_regex -i binadarma.ac.id yahoo.com microsoft.com niit.com cisco.com netacad.com google.com
acl magic_words2 url_regex -i ftp .exe .mp3 .vqf .tar .gz .rpm .zip .rar .avi .mpeg .mpe .mpg .gt .rm .ram .iso .raw .wav .bin .3gp
delay_pools 2
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_access 1 allow magic_words1
delay_class 2 2
delay_parameters 2 725000/725000 725000/725000
delay_access 2 allow magic_words2
### END CONFIGURATION ###
Perhatikan pada bagian cache_dir aufs saya membuat 10 folder cache, tujuan untuk mempercepat proxy mencari history.
Tips dan Trik lainnya adalah saya menggunakan 2 Hard Disk pada mesin proxy, tujuan adalah memisahkan beban sistem operasi dan beban cache.
Menurut sebagian administrator linux yang telah berkecimpung di dunia proxy gateway, memisahkan cache ke hard disk lain akan mempercepat proses pencatatan dan respon proxy terhadap client.
Baca cara menambah hard disk pada linux sebagai tujuan memisahkan cache drive dan sistem operasi
Kunjungi jurnal penelitian mahasiswa dan dosen di http://eprints.binadarma.ac.id