110 likes | 497 Views
Setup / Tune Proxy Server Squid for RTC. Wayne Chiang 04/24/2013. What is squid. Popular open source proxy server. Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Reduces bandwidth and improves response times by caching and reusing frequently-requested web pages.
E N D
Setup / Tune Proxy Server Squid for RTC Wayne Chiang 04/24/2013
What is squid • Popular open source proxy server. • Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. • Reduces bandwidth and improves response times by caching and reusing frequently-requested web pages.
Download and Build • http://www.squid-cache.org/Versions/ • Latest release 3.3.3 (released 3/12/2013) • I have built it on miles-lab (Linux 6.4) /home/mlsinst/squid/squid-3.3.3 • Installed on /home/mlsinst/squid/install333 • Proxy of https://satchmo.ottawa.ibm.com:9443 to https://miles-lab.ottawa.ibm.com:9843
squid.conf cache_replacement_policy heap GDSF memory_replacement_policy heap GDSF logformat squid %{%b %d %Y %H:%M:%S}tl.%03tu %{%Z}tl %6tr %>a->%lp %Ss/%03>Hs %<st %rm %ru %un %Sh/%<A %mt access_log /home/mlsinst/squid/install333/var/logs/access.log squid #cache_store_log none cache_store_log /home/mlsinst/squid/install333/var/logs/store.log cache_peer satchmo.ottawa.ibm.com parent 9443 0 no-query originserver name=satchmoAccel ssl login=PROXYPASS sslflags=DONT_VERIFY_PEER acl satchmoport myport 9843 cache_peer_access satchmoAccel allow satchmoport coredump_dir /home/mlsinst/squid/install333/var/cache http_access allow all cachemgr_passwd disable all ssl_bump allow all sslproxy_cert_error allow all https_port 9843 cert=/home/mlsinst/squid/install333/etc/server.pem accel key=/home/mlsinst/squid/install333/etc/privkey.pem vhost refresh_pattern . 0 20% 4320 cache_dir aufs /home/mlsinst/squid/install333/var/cache 4096 256 256 buffered_logs on
Run squid • Cd /home/mlsinst/squid/install333/sbin • Run './squid -z' to create the directory structure for the first time. • Run './squid' to start the proxy on Linux. • To stop the proxy, you can run "./squid -k shutdown".
access.log • TCP_HIT • A valid copy of the requested object was in the cache. • TCP_MISS • The requested object was not in the cache. • TCP_MEM_HIT • A valid copy of the requested object was in the cache and it was in memory, thus avoiding disk accesses.
Tuning Squid • Set the "cache_mem" directive in squid.conf as large as possible • Set the "cache_dir" directive in squid.conf to a large value will increase the disk-based cache size for squid. • Turn off access logging if you do not require it for day to day use
Reference • Setting up the Squid Caching Proxy w/SSL for RTC 2.0 • Using content caching proxies for Jazz Source Control