squid配置透明代理并支持Https及http、https拦截

1、开启路由转发

echo "1" > /proc/sys/net/ipv4/ip_forward

2、iptables配置

iptables -t nat -I PREROUTING -i ens160 -s 10.10.40.0/24 -p tcp --dport 80 -j REDIRECT --to 3128

iptables -t nat -I PREROUTING -i ens160 -s 10.10.40.0/24 -p tcp --dport 443 -j REDIRECT --to 3129

 

3、/usr/lib64/squid/ssl_crtd -c -s /var/lib/ssl_db

chown squid:squid /var/lib/ssl_db

 

4、openssl genrsa -out example.com.private 2048

5、openssl req -new -key example.com.private -out example.com.csr 

 

Country Name (2 letter code) [XX]:US  

State or Province Name (full name) []:Illinois  

Locality Name (eg, city)