搭建 CentOS 6 服务器(12) - squid、Varnish

最新推荐文章于 2023-07-03 19:38:30 发布

原创最新推荐文章于 2023-07-03 19:38:30 发布 · 119 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#运维

Linux 专栏收录该内容

29 篇文章

订阅专栏

本文详细介绍了如何安装和配置Squid代理服务器及Varnish缓存服务器，包括基本设置、端口更改、网站屏蔽、基本认证等功能，并提供具体的命令行操作步骤。

[b]（一）squid[/b]

安装

# yum -y install epel-release
# yum -y install squid

设置

# cp /etc/squid/squid.conf /etc/squid/squid.conf.bak

-Allow IP Address
# vi /etc/squid/squid.conf
    acl localnet src 192.168.21.0/24

-Changing Squid Port(Default 3128)
# vi /etc/squid/squid.conf
    http_port 5000

-Allow a Specific Port
# vi /etc/squid/squid.conf
    acl Safe_ports port 5432

-Blocking Websites
# vi /etc/squid/blocked_sites
    baidu.com
# vi /etc/squid/squid.conf
    acl blocked_sites dstdomain "/etc/squid/blocked_sites"
    http_access deny blocked_sites

-Using Basic Authentication
# yum -y install httpd-tools
# touch /etc/squid/passwd && chown squid /etc/squid/passwd
# htpasswd /etc/squid/passwd pxuser
# vi /etc/squid/squid.conf
    auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/passwd
    auth_param basic children 5
    auth_param basic realm Squid Basic Authentication
    auth_param basic credentialsttl 2 hours
    acl auth_users proxy_auth REQUIRED
    http_access allow auth_users

-Hide proxy
# vi /etc/squid/squid.conf
    forwarded_for off
    request_header_access Referer deny all
    request_header_access X-Forwarded-For deny all
    request_header_access Via deny all
    request_header_access Cache-Control deny all

启动服务

# /etc/init.d/squid start
# squid -v
    Squid Cache: Version 3.5.20
    Service Name: squid

# tail -f /var/log/squid/access.log

[b]（二）Varnish[/b]

安装

# rpm --nosignature -i https://repo.varnish-cache.org/redhat/varnish-4.0.el6.rpm
# yum install -y varnish
# varnishd -V

设置

# vi /etc/sysconfig/varnish
    VARNISH_LISTEN_PORT=6081
# vi /etc/varnish/default.vcl
    backend default {
        .host = "127.0.0.1";
        .port = "81";
    }
# varnishd -C -f /etc/varnish/default.vcl

启动服务

# service varnish start
# service varnishncsa start
# service varnishlog start

确认

# varnishadm backend.list