linux中squid3(高命中率)缓存服务器配置

quid cache（简称为Squid）是一个流行的自由软件（GNU通用公共许可证）的代理服务器和Web缓存服务器。Squid有广泛的用途，从作为网页服务器的前置cache服务器缓存相关请求来提高Web服务器的速度，到为一组人共享网络资源而缓存万维网，域名系统和其他网络搜索，到通过过滤流量帮助网络安全，到局域网通过代理上网。Squid主要设计用于在Unix一类系统运行,下面我们来看看squid3(高命中率)缓存服务器配置教程。

今天对我的varnish进行了下小小的压力测试,40s里的8000并发,没有失败一个,估计还可以承受更大的并发,先不说varnish了,我最近找到个命中率很高的squid的配置文件,当然是squid3.0的配置文件,有需要的可以copy回去自己改.

系统:centos 5.x

需要的软件:squid-3.0.STABLE25.tar.gz

1.下载squid

1. wgethttp://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE25.tar.gz
3. tarzxfsquid-3.0.STABLE25.tar.gz&&cdsquid-3.0.STABLE25

2.编译squid,代码如下:

1. ./configure--prefix=/usr/local/squid
2. --enable-async-io=100
3. --with-pthreads
4. --enable-storeio="aufs,diskd,ufs"
5. --enable-removal-policies="heap,lru"
6. --enable-icmp
7. --enable-delay-pools
8. --enable-useragent-log
9. --enable-referer-log
10. --enable-kill-parent-hack
11. --enable-arp-acl
12. --enable-default-err-language=Simplify_Chinese
13. --enable-err-languages="Simplify_ChineseEnglish"
14. --disable-poll
15. --disable-wccp
16. --disable-wccpv2
17. --disable-ident-lookups
18. --disable-internal-dns
19. --enable-basic-auth-helpers="NCSA"
20. --enable-stacktrace
21. --with-large-files
22. --disable-mempools
23. --with-filedescriptors=65536
24. --enable-ssl
25. --enable-x-accelerator-var
26. make
27. makeinstall
28. makeinstall-pinger

3.配置squid,代码如下:

1. cp/usr/local/squid/etc/squid.conf/usr/local/squid/etc/squid.conf.old
2. >/usr/local/squid/etc/squid.conf
3. ln-s/usr/local/squid/etc/squid.conf/etc/squid.conf

squid.conf里的内容,代码如下:

1. #accellistenport
2. http_port80accelvhostvport
3. #acceldomain
4. cache_peerxx.xx.xx.xxparent800no-queryoriginserverno-digestname=a
5. cache_peer_domainawww.phpfensi.com
7. #acl
8. aclmanagerprotocache_object
9. acllocalhostsrc127.0.0.1/255.255.255.255
10. aclSSL_portsport443563
11. aclSafe_portsport80#http
12. aclSafe_portsport8080
13. aclLanSrcsrcall
14. aclLanDstdstall
15. aclLanDstDMdstdomainwww.phpfensi.com
17. aclCONNECTmethodCONNECT
18. http_accessallowmanagerlocalhost
19. http_accessdenymanager
20. http_accessdeny!Safe_ports
21. http_accessdenyCONNECT!SSL_ports
22. http_accessallowLanSrc
23. http_accessallowLanDst
24. http_accessallowLanDstDM
25. http_accessdenyall
27. #base
28. visible_hostnamewww.phpfensi.com
29. cache_mgrrocdk890@gmail.com
30. cache_effective_usersquid
31. cache_effective_groupsquid
33. error_directory/usr/local/squid/share/errors/Simplify_Chinese
34. icon_directory/usr/local/squid/share/icons
35. mime_table/usr/local/squid/etc/mime.conf
37. cache_replacement_policylru
38. #cache_dir
39. cache_diraufs/var/cache1327686464
40. cache_diraufs/var/cache2327686464
41. cache_mem2048MB
42. max_open_disk_fds0
43. #maximum_object_size512KB
44. #maximum_object_size_in_memory256KB
45. maximum_object_size20MB
46. maximum_object_size_in_memory8MB
48. #keepalived
49. client_persistent_connectionsoff
50. server_persistent_connectionson
51. #persistent_request_timeout60seconds
53. #memory_poolson
54. #memory_pools_limit64MB
56. forwarded_foron
57. log_icp_queriesoff
59. viaoff
60. httpd_suppress_version_stringoff
62. ie_refreshoff
63. tcp_recv_bufsize32KB
65. #aclwebservicesrep_headerServer-i^linuxtoneWS^Apache^nginx
66. #broken_vary_encodingallowwebservices
68. #hiddenthesquidheader
69. #reply_header_accessServerdenyall
70. #reply_header_accessX-Cachedenyall
71. #reply_header_accessWarningdenyall
72. #reply_header_accessExpiresdenyall
73. #reply_header_accessCache-Controldenyall
74. #reply_header_accessagedenyall
75. #reply_header_accessAlldenyall
77. ipcache_size1024
78. ipcache_low90
79. ipcache_high95
81. memory_replacement_policylru
83. hosts_file/etc/hosts
84. request_header_max_size128KB
86. #denycache
87. hierarchy_stoplistcgi-bin?.php
88. aclQUERYurlpath_regexcgi-bin?.php
89. cachedenyQUERY
91. #request_body_max_size0KB
93. refresh_pattern^ftp:6020%10080
94. refresh_pattern^gopher:600%1440
95. refresh_pattern.020%1440
96. refresh_pattern-i.css$36050%2880reload-into-ims
97. refresh_pattern-i.js$144050%2880reload-into-ims
98. refresh_pattern-i.html$72050%1440reload-into-ims
99. refresh_pattern-i.jpg$144090%2880ignore-reload
100. refresh_pattern-i.gif$144090%2880ignore-reload
101. refresh_pattern-i.swf$144090%2880ignore-reload
102. refresh_pattern-i.jpg$144050%2880ignore-reload
103. refresh_pattern-i.png$144050%2880ignore-reload
104. refresh_pattern-i.bmp$144050%2880ignore-reload
106. refresh_pattern-i.doc$144050%2880ignore-reload
107. refresh_pattern-i.ppt$144050%2880ignore-reload
108. refresh_pattern-i.xls$144050%2880ignore-reload
109. refresh_pattern-i.pdf$144050%2880ignore-reload
110. refresh_pattern-i.rar$144050%2880ignore-reload
111. refresh_pattern-i.zip$144050%2880ignore-reload
112. refresh_pattern-i.txt$144050%2880ignore-reload
114. quick_abort_min20KB
115. quick_abort_max20KB
116. quick_abort_pct95
118. connect_timeout1minute
119. negative_ttl0minutes
120. read_timeout30seconds
121. pconn_timeout120seconds
122. shutdown_lifetime5seconds
123. strip_query_termsoff
125. #snmp
126. #snmp_port3401
127. #aclsnmppublicsnmp_orgmunitysnsimg
128. #snmp_accessallowsnmppubliclocalhost
129. #snmp_accessdenyall
131. icp_port0
133. #logfile
134. emulate_httpd_logon
135. #logformatcombined%{X-Forwarded-For}>h%ui%un[%tl]“%rm%ruHTTP/%rv”%Hs%<st“%{Referer}>h”“%{User-Agent}>h”%Ss:%Sh
136. #access_lognone
137. #access_log/data/logs/access.logcombined
138. logformatsquid%ts.%03tu%6tr%>a%Ss/%03Hs%<st%rm%ru%un%Sh/%<A%mt
139. access_log/var/log/squid/access.logsquid
140. #cache_store_log/var/log/squid/store.log
141. cache_store_log/dev/null
142. cache_log/var/log/squid/cache.log
143. logfile_rotate12
145. #MISCELLANEOUS
146. store_objects_per_bucket15
147. client_dboff

4.创建目录,代码如下:

1. /usr/sbin/groupaddsquid
2. /usr/sbin/useradd-gsquidsquid
3. mkdir-p/var/log/squid
4. chown-Rsquid:squid/var/log/squid
5. mkdir-p/var/{cache1,cache2}
6. chown-Rsquid:squid/var/{cache1,cache2}

初始化squid的cache目录:

/usr/local/squid/sbin/squid -z

启动squid:

/usr/local/squid/sbin/squid -D

如果大家不喜欢这样的启动方式,可以自己去找个squid的启动脚本,这里就不放出了.当squid运行起来了之后,大家可以使用下面这个命令来查看命中率:

/usr/local/squid/bin/squidclient -p 80 mgr:info

好了,具体其他squid的使用命令就只能你们自己去搜了,就到这里了.