API tools faq
paste
Advertisement
punces

squid.conf-170617

punces
Jun 17th, 2017
1,486
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.07 KB | None | 0 0
raw download clone embed print report
  1. dns_v4_first on
  2. reply_header_access Alternate-Protocol deny all
  3. reply_header_access Alt-Svc deny all
  4. refresh_all_ims on
  5. reload_into_ims on
  6.  
  7. sslproxy_cert_error allow all
  8. sslproxy_flags DONT_VERIFY_PEER
  9.  
  10. retry_on_error on
  11. connect_retries 3
  12.  
  13. #debug_options 11,2 22,3
  14.  
  15. cache_dir aufs /cache 670000 256 256
  16. cache_mem 2 MB
  17. cache_swap_high 95
  18. cache_swap_low 90
  19.  
  20. cache_replacement_policy heap LFUDA
  21. memory_replacement_policy heap GDSF
  22.  
  23. maximum_object_size 4096000 KB
  24. maximum_object_size_in_memory 0 KB
  25. request_body_max_size 0 KB
  26.  
  27. cache_mgr cespun@gamil.com
  28. visible_hostname cespun
  29. strip_query_terms off
  30. via off
  31. forwarded_for off
  32.  
  33. request_header_access X-Forwarded-For deny all
  34. request_header_access Proxy-Connection deny all
  35. request_header_access Connection deny all
  36. request_header_access Via deny all
  37.  
  38. reply_header_access X-Forwarded-For deny all
  39. reply_header_access Proxy-Connection deny all
  40. reply_header_access Connection deny all
  41. reply_header_access Via deny all
  42.  
  43. reply_header_access Server deny all
  44. reply_header_replace Server cespun-proxy
  45.  
  46. coredump_dir /var/log/squid
  47. logfile_rotate 1
  48.  
  49. max_filedescriptors 65536
  50. fqdncache_size 0
  51. ipcache_size 0
  52. ipcache_high 0
  53. ipcache_low 0
  54.  
  55. http_port 3128
  56. http_port 3129 tproxy
  57. https_port 3127 tproxy ssl-bump generate-host-certificates=on cert=/etc/squid/ssl_cert/warnet.pem
  58.  
  59. qos_flows local-hit=0x30
  60.  
  61. acl localnet src all
  62. acl semuaport port 0-65535
  63. acl PURGE method PURGE
  64. acl step1 at_step SslBump1
  65. acl step2 at_step SslBump2
  66. acl step3 at_step SslBump3
  67. acl bypass ssl::server_name_regex -i "/etc/squid/bypass.txt"
  68. acl range206 req_header Range -i byte
  69. acl uabrowser browser -i regexp (iPhone|iPad)
  70. acl uabrowser browser -i regexp (BlackBerry|PlayBook)
  71. acl uabrowser browser -i regexp (Windows.*Phone|Trident|IEMobile)
  72. acl uabrowser browser -i regexp Android
  73. acl uabrowser browser -i regexp Linux
  74. acl yt-rewrite url_regex -i ^https?\:\/\/(www|gaming)\.youtube\.com\/(watch\?v|embed|v)[=%&?\/]
  75. acl yt-rewrite url_regex -i ^https?\:\/\/www\.youtube\.com$
  76. acl yt-rewrite url_regex -i ^https?\:\/\/www\.youtube\.com\/$
  77. acl youtube url_regex -i ^http.*(youtube|googlevideo|videoplayback|videogoodput)
  78. acl googlevideo url_regex -i ^http.*google.*video(playback|goodput).*
  79. acl mimehtml rep_mime_type -i mime-type html
  80. acl mimeplain rep_mime_type -i mime-type text
  81. acl urltomiss url_regex -i ^http.*(serverpatch|server_patch|server-patch|patchserver|patch_server|patch-server)
  82. acl urltomiss url_regex -i ^http.*googlevideo\.com\/video(playback|goodput).*source[\&\=\?\/]yt_live
  83. acl patchpartial url_regex -i ^http.*patch.*garena
  84. acl patchpartial url_regex -i ^http.*garena.*patch
  85. acl patchpartial url_regex -i ^http:\/\/.*google\.com\/.*chrome.*\/(.*.(exe))
  86. acl httptomiss http_status 302
  87. acl tostoreid url_regex -i ^http.*(youtube|googlevideo|videoplayback|videogoodput)
  88. acl tostoreid url_regex -i ^http.*(fbcdn|akamaihd)
  89. acl tostoreid url_regex -i ^http.*c2lo\.reverbnation\.com\/audio_player\/ec_stream_song\/.*\?
  90. acl tostoreid url_regex -i ^http.*\.c\.android\.clients\.google\.com\/market\/GetBinary\/GetBinary\/.*\/.*\?
  91. acl tostoreid url_regex -i ^http.*datafilehost.*\/get\.php.*file\=.*
  92. acl tostoreid url_regex -i ^http.*\.filehippo\.com\/.*\?
  93. acl tostoreid url_regex -i ^http.*\.4shared\.com\/.*\/.*\/.*\/dlink.*preview.mp3
  94. acl tostoreid url_regex -i ^http.*\.4shared\.com\/download\/.*\/.*\?tsid
  95. acl tostoreid url_regex -i ^http.*steam(powered|content).*\/(client|depot)\/.*\/(chunk|manifest)\/.*\?.*
  96. acl tostoreid url_regex -i ^http.*savefile\.co\:[0-9]{2,5}\/.*\/.*\.(mp4|flv|3gp)
  97. acl tostoreid url_regex -i ^http.*video\-http\.media\-imdb\.com\/.*\.mp4\?
  98. acl tostoreid url_regex -i ^http.*\.dl\.sourceforge\.net
  99. acl tostoreid url_regex -i ^http.*\youtubeinmp3\.com\/download\/get\/.*id\=.*t\=.*
  100. acl tostoreid url_regex -i ^http.*patch\.gemscool\.com\/lsaga.*\.iop.*\?.*
  101. acl tostoreid url_regex -i ^http.*googleusercontent\.com/docs/securesc\/.*
  102. acl tostoreid url_regex -i ^http.*mp4upload\.com\:[0-9]{2,5}\/.*\.[0-9a-zA-Z]{2,5}
  103. acl speedtest url_regex -i ^http.*([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}|speedtest|espeed|api\.ookla).*\/(speedtest\.swf|speedtest-long\.swf|latency\.txt|upload\.php|speedtest-config\.php|ipaddress\.php|random.*\.jpg)
  104. acl denyurl url_regex -i gvt1.com\/edgedl.*
  105. acl denyurl url_regex -i google\.com/edgedl.*
  106. acl denyurl url_regex -i ^http\:\/\/cache\.pack\.google\.com\/edgedl\/.*
  107. acl rangesteam url_regex -i ^http.*steam(powered|content).*\/(client|depot)\/.*\/(chunk|manifest)\/.*\?.*
  108. acl basejs url_regex -i ^http.*(youtube|ytimg)\.com\/.*\/player.*\/base\.js
  109.  
  110. acl CONNECT method CONNECT
  111. acl getmethod method GET
  112.  
  113. http_access deny denyurl
  114. http_access deny rangesteam range206
  115. deny_info https://s.ytimg.com/yts/swfbin/player-vflx0pAVB/watch_as3.swf basejs
  116. http_access deny basejs
  117.  
  118. http_access allow localhost manager
  119. http_access deny manager
  120. http_access allow localhost purge
  121. http_access deny purge
  122. http_access allow localnet
  123. http_access allow localhost
  124. http_access allow semuaport
  125. http_access deny all
  126.  
  127. access_log /var/log/squid/access.log !CONNECT
  128.  
  129. range_offset_limit none range206 patchpartial
  130. range_offset_limit 128 KB range206 !patchpartial
  131. quick_abort_min 1 KB
  132. quick_abort_max 1 KB
  133. quick_abort_pct 95
  134.  
  135. ssl_bump splice bypass
  136. ssl_bump peek step1 all
  137. ssl_bump bump all
  138.  
  139. cache_peer 10.212.212.212 parent 8033 0 no-digest no-tproxy
  140. dead_peer_timeout 5 seconds
  141. cache_peer_access 10.212.212.212 allow speedtest
  142. cache_peer_access 10.212.212.212 deny all
  143. always_direct deny speedtest
  144. never_direct allow speedtest
  145.  
  146. request_header_access Accept-Encoding deny yt-rewrite !uabrowser
  147. #yt_quality: tiny = 144px small = 240px medium = 360px large = 480px HD720 = Hd720px
  148. ecap_enable on
  149. loadable_modules /usr/local/lib/ecap_adapter_modifying.so
  150. ecap_service modif respmod_precache uri=ecap://dokter-squid.com/ecap yt_quality=medium no-html5=no
  151. #ecap_service modif respmod_precache uri=ecap://e-cap.org/ecap/services/sample/modifying victim="html5":true replacement="html5":false
  152. #ecap_service modif respmod_precache uri=ecap://e-cap.org/ecap/services/sample/modifying victim="enablejsapi" replacement="dash":"0","vq":"medium","enablejsapi"
  153. adaptation_access modif allow yt-rewrite !uabrowser
  154. adaptation_access modif deny all
  155.  
  156. store_id_bypass off
  157. store_id_extras "%{Referer}>h"
  158. store_id_program /etc/squid/storeid.pl
  159. store_id_children 2000 startup=30 idle=1
  160. store_id_access allow tostoreid
  161. store_id_access deny all
  162.  
  163. store_miss deny googlevideo httptomiss
  164. send_hit deny googlevideo httptomiss
  165. store_miss deny googlevideo mimeplain
  166. send_hit deny googlevideo mimeplain
  167. store_miss deny googlevideo mimehtml
  168. send_hit deny googlevideo mimehtml
  169. store_miss deny urltomiss
  170. send_hit deny urltomiss
  171. store_miss deny mimehtml
  172. send_hit deny mimehtml
  173. store_miss deny mimeplain
  174. send_hit deny mimeplain
  175.  
  176. refresh_pattern -i ^https?\:\/\/squid\/(mp4upload|google\/video) 0 90% 432000 override-expire override-lastmod ignore-no-store ignore-must-revalidate ignore-private ignore-auth
  177. refresh_pattern -i .* 0 1% 1 override-expire override-lastmod ignore-no-store ignore-must-revalidate ignore-private ignore-auth
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!