On 11/24/15 1:09 PM, Antony Stone wrote: > squid.conf, minus blank lines and comments, please? Here you go. Each system is identical but with itself commented out of the "cache_peer" and "cache_peer_access" lines.
acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl our_sites dstdomain yum.opennms.org debian.opennms.org maven.opennms.org repo.opennms.org .mirrors.opennms.org .mirrors.opennms.com acl mirrors src 45.55.163.22/32 acl mirrors src 2604:a880:800:10::60:4001/128 acl mirrors src 104.236.160.233/32 acl mirrors src 2604:a880:1:20::d6:7001/128 acl mirrors src 46.101.6.157/32 acl mirrors src 2a03:b0c0:1:d0::7a:7001/128 acl mirrors src 46.101.211.239/32 acl mirrors src 2a03:b0c0:3:d0::8a:6001/128 http_access deny !Safe_ports http_access deny CONNECT # manager access http_access allow localhost manager http_access deny manager # proxy access http_access allow our_sites http_access allow localhost http_access deny all # peer access icp_access allow mirrors icp_access deny all icp_port 3130 # cache access cache allow all http_port 80 accel defaultsite=www.mirrors.opennms.org vhost http_port 8080 accel defaultsite=www.mirrors.opennms.org vhost #http_port 3128 accel defaultsite=www.mirrors.opennms.org vhost coredump_dir /var/spool/squid3 logfile_rotate 10 #cache_store_log stdio:/var/log/squid3/store.log debug_options rotate=10 client_ip_max_connections 8 # how much to cache/keep minimum_object_size 0 maximum_object_size 600 MB minimum_expiry_time 60 seconds refresh_pattern . 900 80% 604800 memory_cache_mode disk memory_replacement_policy heap LFUDA cache_replacement_policy heap LFUDA cache_peer mirror.internal.opennms.com parent 80 0 no-query originserver name=myAccel cache_peer_access myAccel allow our_sites cache_peer_access myAccel deny all #cache_peer ny-1.mirrors.opennms.org sibling 80 3130 name=ny1 cache_peer sf-1.mirrors.opennms.org sibling 80 3130 name=sf1 cache_peer uk-1.mirrors.opennms.org sibling 80 3130 name=uk1 cache_peer de-1.mirrors.opennms.org sibling 80 3130 name=de1 #cache_peer_access ny1 allow all cache_peer_access sf1 allow all cache_peer_access uk1 allow all cache_peer_access de1 allow all cache_dir aufs /var/spool/squid3/cache-small 2000 16 256 min-size=0 max-size=100000 cache_dir aufs /var/spool/squid3/cache-large 14000 16 256 min-size=100000 max-size=600000000 # cache 404s for 5 minutes negative_ttl 300 seconds
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
