API tools faq
paste
Advertisement
ujiajah1

update squid.conf with tproxy 20 januari 2016

ujiajah1
Jan 4th, 2016
972
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.95 KB | None | 0 0
raw download clone embed print report
  1. # SQUID CONFIGURATION SQUID VERSION-3.5.xx
  2. # HTTP | HTTPS SQUID PROXY SERVER
  3.  
  4. acl all src
  5. acl SSL_ports port 443
  6. acl SSL_ports port 5353
  7. acl Safe_ports port 21
  8. acl Safe_ports port 22
  9. acl Safe_ports port 53
  10. acl Safe_ports port 70
  11. acl Safe_ports port 80
  12. acl Safe_ports port 210
  13. acl Safe_ports port 280
  14. acl Safe_ports port 1025-65535
  15. acl Safe_ports port 443
  16. acl Safe_ports port 488
  17. acl Safe_ports port 591
  18. acl Safe_ports port 777
  19. acl Safe_ports port 5353
  20. acl Safe_ports port 18901-18909
  21. acl Safe_ports port 1818
  22. acl Safe_ports port 39190
  23. acl Safe_ports port 40000-40010
  24. acl Safe_ports port 7777
  25. acl Safe_ports port 19101
  26. acl Safe_ports port 27780
  27. acl Safe_ports port 29000
  28. acl Safe_ports port 22100
  29. acl Safe_ports port 5121
  30. acl Safe_ports port 6000-6152
  31. acl Safe_ports port 2001
  32. acl Safe_ports port 9601-9602
  33. acl Safe_ports port 8085
  34. acl Safe_ports port 11011-11041
  35. acl Safe_ports port 13413
  36. acl Safe_ports port 19000
  37. acl Safe_ports port 5105
  38. acl Safe_ports port 10009
  39. acl Safe_ports port 12060-12070
  40. acl Safe_ports port 6000-6001
  41. acl Safe_ports port 29200
  42. acl Safe_ports port 10402
  43. acl Safe_ports port 9600
  44. acl Safe_ports port 15002
  45. acl Safe_ports port 16402-16502
  46. acl Safe_ports port 5126
  47. acl Safe_ports port 3010
  48. acl Safe_ports port 11031
  49. acl Safe_ports port 11440-11460
  50. acl Safe_ports port 11100-11125
  51. acl Safe_ports port 4300
  52. acl Safe_ports port 12011
  53. acl Safe_ports port 12110
  54. acl Safe_ports port 15001
  55. acl Safe_ports port 15002
  56. acl Safe_ports port 7341
  57. acl Safe_ports port 7451
  58. acl Safe_ports port 7808
  59. acl Safe_ports port 30000
  60. acl Safe_ports port 9001
  61. acl Safe_ports port 9030
  62. acl Safe_ports port 953
  63. acl Safe_ports port 42051-42052
  64. acl Safe_ports port 36567
  65. acl Safe_ports port 8001
  66. acl Safe_ports port 14000-14050
  67. acl Safe_ports port 27019
  68. acl Safe_ports port 28901-28920
  69. acl Safe_ports port 7201-7208
  70. acl Safe_ports port 17001-17002
  71. acl Safe_ports port 14300-14440
  72. acl Safe_ports port 15100-15150
  73. acl Safe_ports port 7770-7790
  74. acl Safe_ports port 16320-16340
  75. acl Safe_ports port 9000-9160
  76. acl Safe_ports port 7200
  77. acl Safe_ports port 7400
  78. acl Safe_ports port 7106
  79. acl Safe_ports port 7999
  80. acl Safe_ports port 47611
  81. acl Safe_ports port 36567
  82. acl Safe_ports port 10087
  83. acl Safe_ports port 27000-27050
  84. acl Safe_ports port 27014-27050
  85. acl Safe_ports port 4380
  86. acl Safe_ports port 3478
  87. acl Safe_ports port 4379
  88. acl Safe_ports port 8890
  89. acl Safe_ports port 9339
  90. acl Safe_ports port 8890
  91. acl Safe_ports port 7200-7210
  92. acl Safe_ports port 7450-7460
  93. acl Safe_ports port 8000
  94. acl Safe_ports port 64990-65010
  95. acl CONNECT method CONNECT
  96. # =======================================================================
  97. # Lock_resol 240-360
  98. # =======================================================================
  99. acl youtube_240 dstdomain .youtube.com
  100. request_header_access Accept-Encoding deny youtube_240
  101. loadable_modules /usr/local/lib/DSI_ecap_youtube.so
  102. ecap_enable on
  103. ecap_service ecapModifier respmod_precache \
  104. uri=ecap://dokter-squid.com/ecap yt_quality=small
  105. adaptation_access ecapModifier allow youtube_240
  106. adaptation_access ecapModifier deny all
  107.  
  108. # =========================================================================
  109. # ads_config
  110. # acl iklan url_regex -i "/etc/squid/ad_block.txt2"
  111. # =========================================================================
  112. # =========================================================================
  113. # xigncode PB_Garena
  114. # =========================================================================
  115. acl xigncode url_regex -i ^http.*xigncode.*
  116. store_miss deny xigncode
  117. send_hit deny xigncode
  118. # ==========================================================================
  119. # config_GAME
  120. # ==========================================================================
  121. # dota2
  122. acl store_rewrite_list url_regex -i \.steampowered\.com/(.*)
  123. acl store_rewrite_list url_regex -i \.edgesuite\.net/(.*)
  124.  
  125. # PARTIAL GARENA
  126. acl partial_garena url_regex -i .*\.garenanow.com\/.*\.(dll|xml|exe|version|jpg|png|bmp)$
  127. acl partial_garena url_regex -i .*\.cdn.starhub.com\/.*\.exe?.*
  128. refresh_pattern -i .*edge.cdn.starhub.com\/.* 1440 40% 14400 override-expire override-lastmod ignore-no-cache ignore-private reload-into-ims ignore-must-revalidate ignore-reload store-stale
  129. refresh_pattern -i .*cdn.garenanow.com\/.* 1440 40% 14400 override-expire override-lastmod ignore-no-cache ignore-private reload-into-ims ignore-must-revalidate ignore-reload store-stale
  130.  
  131. # partial206 coba²
  132. acl rolpartial url_regex -i ^http.*garena.*patcher.*\?.*
  133. acl rolpartial url_regex -i ^https?\:\/\/patch\.gemscool\.com\/th\/patch\/.*
  134. acl rolpartial url_regex -i ^https?\:\/\/update\.netmarble\.co\.id\/Elsword\/Patch/.*
  135. #=============================================================================
  136. #=============================================================================
  137. # ACCESS RULES
  138. http_access deny !Safe_ports
  139. http_access deny CONNECT !SSL_ports
  140. # http_access deny iklan
  141. http_access allow all
  142. http_reply_access allow all
  143.  
  144. # LISTENING PORT SQUID
  145. https_port 3127 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_certs/squid.crt key=/etc/squid/ssl_certs/squid.key cipher=ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:AES128-SHA:RC4-SHA:HIGH:!aNULL:!MD5:!ADH
  146. http_port 3128
  147. http_port 3129 tproxy
  148.  
  149. # CONNECTION HANDLING
  150. qos_flows local-hit=0x30
  151. collapsed_forwarding on
  152. balance_on_multiple_ip on
  153. detect_broken_pconn on
  154. client_persistent_connections off
  155. server_persistent_connections on
  156.  
  157. # DNS OPTIONS
  158. #dns_packet_max 4096
  159. #dns_defnames on
  160. #dns_v4_first on
  161. dns_nameservers 172.16.0.1 192.168.1.254 8.8.8.8 8.8.4.4
  162. connect_retries 2
  163. negative_dns_ttl 1 second
  164. range_offset_limit none rolpartial
  165. range_offset_limit 1 KB !rolpartial
  166. range_offset_limit 0
  167. quick_abort_min 0
  168. quick_abort_max 0
  169. quick_abort_pct 80
  170. ipcache_low 98
  171. ipcache_high 99
  172. ipcache_size 4096
  173. fqdncache_size 2048
  174. pipeline_prefetch 0
  175.  
  176. # MISCELEANOUS
  177. memory_pools off
  178. reload_into_ims on
  179. max_filedescriptors 65536
  180.  
  181. # CACHE MANAGEMENT
  182. cache_mem 512 MB
  183. maximum_object_size_in_memory 128 KB
  184. memory_replacement_policy heap GDSF
  185. cache_effective_group proxy
  186. cache_effective_user proxy
  187. cache_dir aufs /cache/cache 50000 16 256
  188. coredump_dir /cache/cache
  189. cache_mgr proxy-server
  190. visible_hostname proxy-server
  191. minimum_object_size 0 KB
  192. maximum_object_size 1 GB
  193. read_ahead_gap 64 KB
  194. cache_replacement_policy heap LFUDA
  195. store_dir_select_algorithm least-load
  196. cache_swap_low 90
  197. cache_swap_high 95
  198.  
  199. # LOG FILE OPTIONS
  200. acl log method CONNECT
  201. logfile_daemon /usr/lib/squid/log_file_daemon
  202. access_log daemon:/var/log/squid/access.log !CONNECT
  203. cache_log /var/log/squid/cache.log
  204. cache_store_log /var/log/squid/store.log
  205. debug_options ALL,1 22,3
  206. cache_store_log none
  207. logfile_rotate 3
  208. pid_filename /var/run/squid.pid
  209.  
  210. # FILTERING HTTPS
  211. acl 1 dstdomain .fbcdn.net .akamaihd.net .fbsbx.com
  212. #acl 2a dstdomain .mahadana.com .mql4.com .metaquotes.net
  213. acl 2 url_regex -i ^https?:\/\/attachment\.fbsbx\.com\/.*\?(id=[0-9]*).*
  214. acl 2 url_regex -i \.fbsbx\.com\/.*\/(.*\.(unity3d|pak|zip|exe|dll|jpg|png|gif|swf)/)$
  215. acl 2 url_regex -i ^https?:\/\/.*\.ytimg\.com(.*\.(webp|jpg|gif))
  216. acl 2 url_regex -i ^https?:\/\/([^\.]*)\.yimg\.com\/(.*)
  217. acl 2 url_regex -i ^https?:\/\/.*\.gstatic\.com\/images\?q=tbn\:(.*)
  218. acl 2 url_regex -i ^https?:\/\/.*\.reverbnation\.com\/.*\/(ec_stream_song|download_song_direct|stream_song)\/([0-9]*).*
  219. acl 2 url_regex -i ^https?:\/\/([a-z0-9.]*)(\.doubleclick\.net|\.quantserve\.com|.exoclick\.com|interclick.\com|\.googlesyndication\.com|\.auditude\.com|.visiblemeasures\.com|yieldmanager|cpxinteractive)(.*)
  220. acl 2 url_regex -i ^https?:\/\/(.*?)\/(ads)\?(.*?)
  221. acl 2 url_regex -i ^https?:\/\/.*steampowered\.com\/.*\/([0-9]+\/(.*))
  222. acl 3 url_regex -i ^https?:\/\/(.*?)\/speedtest\/.*\.(jpg|txt|png|gif|swf)\?.*
  223. acl 3 url_regex -i speedtest\/.*\.(jpg|txt|png|gif|swf)\?.*
  224. acl 4 url_regex -i reverbnation.*audio_player.*ec_stream_song.*$
  225. acl 5 url_regex -i utm.gif.*
  226. acl 6 url_regex -i c.android.clients.google.com.market.GetBinary.GetBinary.*
  227. acl 7 url_regex -i youtube.*(ptracking|stream_204|player_204|gen_204).*$
  228. acl 7 url_regex -i \.c\.(youtube|google)\.com\/(get_video|videoplayback|videoplay).*$
  229. acl 7 url_regex -i (youtube|google).*\/videoplayback\?.*
  230. acl 8 http_status 302
  231.  
  232. acl store_url url_regex -i (youtube|googlevideo|docs.google|video.google).*videoplayback\?.*
  233. acl loop_302 http_status 302
  234. acl loop_mime rep_mime_type text/html
  235. acl loop_mime rep_mime_type text/plain
  236. acl getmethod method GET
  237.  
  238. store_miss deny store_url loop_302
  239. store_miss deny store_url loop_mime
  240. send_hit deny store_url loop_302
  241. send_hit deny store_url loop_mime
  242.  
  243.  
  244. ssl_bump splice localhost
  245. acl 9 at_step SslBump1
  246. acl 10 at_step SslBump2
  247. acl 11 at_step SslBump3
  248. ssl_bump peek 9 all
  249. ssl_bump stare 10 all
  250. ssl_bump splice 11 all
  251.  
  252. sslcrtd_program /usr/lib/squid/ssl_crtd -s /etc/squid/ssl_db -M 4MB
  253. sslcrtd_children 16 startup=1 idle=1
  254. sslproxy_capath /etc/ssl/certs
  255. sslproxy_cert_error allow all
  256. sslproxy_flags DONT_VERIFY_PEER #this line fixing www.gmail.com, mail.yahoo.com for some errors
  257. sslproxy_flags NO_SESSION_REUSE
  258. always_direct allow all
  259. ssl_unclean_shutdown on
  260.  
  261. # STORE ID
  262. store_id_program /usr/bin/perl /etc/squid/store-id.pl
  263. store_id_children 10 startup=5 idle=2 concurrency=10
  264. store_id_access allow 1
  265. store_id_access allow 2
  266. store_id_access allow 3
  267. store_id_access allow 4
  268. store_id_access allow 5
  269. store_id_access allow 6
  270. store_id_access allow 7
  271. store_miss deny 7 8
  272. send_hit deny 7 8
  273. store_id_access deny all
  274.  
  275. # TUNNING CACHE
  276. max_stale 1 years
  277. vary_ignore_expire on
  278. shutdown_lifetime 10 seconds
  279.  
  280. # REFRESH PATTERN
  281. refresh_pattern -i \.steampowered\.com\/(.*)\/ 1440 100% 4320 override-expire override-lastmod reload-into-ims ignore-auth store-stale
  282. refresh_pattern -i \.edgesuite\.net\/(.*)\/ 1440 100% 4320 override-expire override-lastmod reload-into-ims ignore-auth store-stale
  283. refresh_pattern -i ^http:\/\/(.*\.*\.gemscool\.com)\/.*\/.*\/(.*iop?) 10080 40% 10080 ignore-reload override-expire override-lastmod ignore-must-revalidate ignore-private ignore-no-store ignore-auth store-stale
  284. refresh_pattern -i ^http:\/\/(.*\.*\.gemscool\.com)\/.*\/.*\/(.*zip?) 10080 40% 10080 override-expire override-lastmod ignore-no-cache ignore-private reload-into-ims ignore-must-revalidate ignore-reload store-stale
  285. refresh_pattern -i https?:\/\/.*\.xx\.fbcdn\.net\/.*\.(jpg|png) 43830 99% 259200 override-expire override-lastmod ignore-reload
  286. refresh_pattern static\.(xx|ak)\.fbcdn\.net*\.(jpg|gif|png) 241920 99% 241920 ignore-reload override-expire ignore-no-store
  287. refresh_pattern ^https?\:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 241920 99% 241920 ignore-reload override-expire ignore-no-store
  288. refresh_pattern (akamaihd|fbcdn)\.net 14400 99% 518400 ignore-no-store ignore-private ignore-reload ignore-must-revalidate store-stale
  289. refresh_pattern (audio|video)\/(webm|mp4) 129600 99% 129600 ignore-reload override-expire override-lastmod ignore-must-revalidate ignore-private ignore-no-store ignore-auth store-stale
  290. refresh_pattern -i \/speedtest\/.*\.(txt|jpg|png|swf) 0 99% 14400 override-expire ignore-reload ignore-private ignore-reload override-lastmod reload-into-ims
  291. refresh_pattern -i reverbnation.com 1440 99% 14400 override-expire override-lastmod ignore-no-cache ignore-private ignore-must-revalidate ignore-reload store-stale
  292. refresh_pattern -i (yimg|twimg)\.com\.* 1440 100% 129600 override-expire ignore-reload reload-into-ims
  293. refresh_pattern -i (ytimg|ggpht)\.com\.* 1440 80% 129600 override-expire override-lastmod ignore-auth ignore-reload reload-into-ims
  294. refresh_pattern -i (get_video\?|videoplayback\?|videodownload\?|\.mp4|\.webm|\.flv|((audio|video)\/(webm|mp4))) 241920 100% 241920 override-expire ignore-reload ignore-private ignore-no-store ignore-must-revalidate reload-into-ims ignore-auth store-stale
  295. refresh_pattern -i ^https?\:\/\/.*\.googlevideo\.com\/videoplayback.* 10080 99% 43200 override-lastmod override-expire ignore-reload reload-into-ims ignore-private reload-into-ims ignore-auth store-stale
  296. refresh_pattern ^\.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 1440 99% 14400 ignore-private override-expire ignore-reload ignore-auth max-stale=1440
  297. refresh_pattern \.(ico|video-stats) 1440 99% 14400 override-expire ignore-reload ignore-private ignore-auth override-lastmod ignore-must-revalidate
  298. refresh_pattern ^http://((cbk|mt|khm|mlt|tbn)[0-9]?)\.google\.co(m|\.uk|\.id) 1440 99% 14400 override-expire override-lastmod ignore-reload ignore-private ignore-auth ignore-must-revalidate
  299. refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 1440 99% 14400 override-expire override-lastmod
  300. refresh_pattern galleries\.video(\?|sz) 1440 99% 14400 override-expire ignore-reload ignore-must-revalidate ignore-private
  301. refresh_pattern \.wikimapia\.org\/? 1440 99% 14400 override-expire override-lastmod ignore-reload ignore-private
  302. refresh_pattern -i (livescore.com|goal.com|bobet) 0 50% 60
  303. refresh_pattern (photobucket|pbsrc|flickr|yimg|ytimg|twimg|gravatar)\.com.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp(4|3)) 1440 99% 14400 override-expire ignore-reload ignore-private
  304. refresh_pattern (zynga|topeleven|ninjasaga|mafiawars|cityville|farmville|crowdstar|spilcdn|agame|popcap)\.com/.* 1440 99% 14400 override-expire ignore-reload ignore-private
  305. refresh_pattern -i \.(3gp|7z|ace|asx|bin|deb|divx|dvr-ms|ram|rpm|exe|inc|cab|qt) 10080 80% 10080 override-expire override-lastmod reload-into-ims
  306. refresh_pattern -i \.(rar|jar|gz|tgz|bz2|iso|m1v|m2(v|p)|mo(d|v)|arj|lha|lzh|zip|tar|iop|nzp|pak|mar|msp) 10080 80% 10080 override-expire override-lastmod reload-into-ims ignore-reload
  307. refresh_pattern -i \.(jp(e?g|e|2)|gif|pn[pg]|bm?|tiff?|ico|swf|dat|ad|txt|dll) 10080 80% 10080 override-expire override-lastmod reload-into-ims
  308. refresh_pattern -i \.(avi|ac4|mp(e?g|a|e|1|2|3|4)|mk(a|v)|ms(i|u|p)|og(x|v|a|g)|rm|r(a|p)m|snd|vob|webm) 10080 80% 10080 override-expire override-lastmod reload-into-ims
  309. refresh_pattern -i \.(pp(t?x)|s|t)|pdf|rtf|wax|wm(a|v)|wmx|wpl|cb(r|z|t)|xl(s?x)|do(c?x)|flv|x-flv) 10080 80% 10080 override-expire override-lastmod reload-into-ims
  310. refresh_pattern -i \.(3gp|7z|ace|asx|bin|deb|cup|dvr-ms|ram|rpm|exe|inc|cab|qt) 10080 100% 43800 override-expire override-lastmod ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  311. refresh_pattern -i \.(rar|jar|gz|tgz|bz2|iso|m1v|m2(v|p)|mo(d|v)|arj|lha|lzh|zip|tar|pak|cup) 10080 100% 43800 override-expire override-lastmod ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  312. refresh_pattern -i \.(jp(e?g|e|2)|gif|pn[pg]|bm?|tiff?|ico|swf|dat|ad|txt|dll) 10080 100% 43800 override-expire override-lastmod ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  313. refresh_pattern -i \.(avi|ac4|mp(e?g|a|e|1|2|3|4)|mk(a|v)|ms(i|u|p)|og(x|v|a|g)|rm|r(a|p)m|snd|vob) 10080 100% 43800 override-expire override-lastmod ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  314. refresh_pattern -i \.(pp(t?x)|s|t)|pdf|rtf|wax|wm(a|v)|wmx|wpl|cb(r|z|t)|xl(s?x)|do(c?x)|flv|x-flv) 10080 100% 43800 override-expire override-lastmod ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  315. refresh_pattern -i .(html|htm|css|js|xml)$ 1440 75% 40320
  316. refresh_pattern -i .index.(html|htm)$ 0 75% 43800
  317. refresh_pattern -i ^http.*squid\.internal.* 43200 100% 799000 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth
  318.  
  319. #KEEP THESE LINES AT BOTTOM OF CONFIGURATION
  320. refresh_pattern ^ftp: 1440 20% 10080
  321. refresh_pattern ^gopher: 1440 0% 1440
  322. refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  323. refresh_pattern . 0 20% 4320
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!