Squid.conf with ZPH

Squid yang digunakan dalam contoh squid 2.7 Satble 3

acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8

acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

icp_access allow localnet
icp_access deny all

http_port 3128 transparent

dns_nameservers 127.0.0.1 58.65.247.5 208.67.222.222

#hierarchy_stoplist cgi-bin ?

memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

cache_dir aufs /proxy1 20000 48 256
cache_dir aufs /proxy2 20000 48 256
cache_dir aufs /proxy3 20000 48 256
cache_dir aufs /proxy4 20000 48 256

refresh_pattern -i \.(swf|png|jpg|jpeg|bmp|tiff|png|gif) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i \.(mov|mpg|mpeg|flv|avi|mp3|3gp|sis|wma) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i \.(zip|rar|ace|bz|bz2|tar|gz|exe) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i (.*html$|.*htm|.*shtml|.*aspx|.*asp) 43200 90% 1440 reload-into-ims override-lastmod
refresh_pattern -i \.(class|css|js|gif|jpg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(jpe|jpeg|png|bmp|tif)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(mpg|mpe|wav|au|mid)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(asp|acgi|pl|shtml|php3|php)$ 2 20% 4320 reload-into-ims
refresh_pattern ^http://*.google.*/.*                   720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*korea.*/.*                     720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.akamai.*/.*                   720   100% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.windowsmedia.*/.*             720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.googlesyndication.*/.*        720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.plasa.*/.*                    720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.telkom.*/.*                   720   100% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://www.friendster.com/.*           720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://mail.yahoo.com/.*               720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.yahoo.*/.*                    720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.yimg.*/.*                     720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.gmail.*/.*                    720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.detik.*/.*                    720   100%   4320 reload-into-ims override-lastmod
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern ^ftp: 43200 90% 129600 reload-into-ims override-expire
#refresh_pattern         ^ftp:           1440    20%     10080
#refresh_pattern         ^gopher:        1440    0%      1440
refresh_pattern         .               0       20%     4320
#refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod
max_filedescriptors 4096

acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9]
upgrade_http0.9 deny shoutcast

header_access Accept-Encoding deny all

client_persistent_connections off
server_persistent_connections on

acl apache rep_header Server ^Apache
acl jambunet src 192.168.1.1-192.168.1.255
acl jambunet src 192.168.10.1-192.168.10.3

#acl untuk snmp
acl snmppublic snmp_community public
snmp_port 3401
snmp_access allow snmppublic all
#snmp_access deny all

http_access allow manager localhost
http_access allow jambunet
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
broken_vary_encoding allow apache

server_http11 on

cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95

minimum_object_size 0 KB
maximum_object_size 128 MB
maximum_object_size_in_memory 50 KB

cache_mgr ya_yan98@yahoo.com

hosts_file /etc/hosts

visible_hostname proxy.jambu_net
unique_hostname proxy.jambu_net.purwokerto

cache_effective_user squid
cache_effective_group squid

icp_port 3130

######################################################
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100
range_offset_limit 0 KB
connect_timeout 5 second
peer_connect_timeout 5 seconds
read_timeout 40 second
request_timeout 20 second
half_closed_clients off
shutdown_lifetime 20 second
#####################################################
icp_query_timeout 100
maximum_icp_query_timeout 150
logfile_rotate 2
memory_pools off
pipeline_prefetch on
log_icp_queries off
icp_hit_stale on
vary_ignore_expire on
store_avg_object_size 13 KB
store_objects_per_bucket 10
client_db off
query_icmp off
test_reachability off
redirector_bypass on
forwarded_for off
buffered_logs on