Re: [squid-users] Squid configuration upgrade from 2.6 to 2.7

Drew Wrobel wrote:
> I have upgraded my squid server from 2.6 stable 22 to 2.7 stable 7.
>
> Along with this, I have updated the configuration and wanted to make sure that some of the new settings won't be a problem.
>
> The biggest change is that I increased the maximum object size the squid will cache. Before everything at the default levels.
> I increased this size sine most of the files/pages being servers up, especially the ones that have flash and vidoes would be larger
> then 4K.
>
> Let me know if there is a better way or setting I should/should not be using.
>
> Thanks
>
> acl all src all
> acl manager proto cache_object
> acl localhost src 127.0.0.1/32
> acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
>
> acl SSL_ports port 443
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 # https
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
>
> http_port 127.0.0.1:3128
>
> hierarchy_stoplist cgi-bin ?

NP: if you are caching dynamic pages at all, you will need to use the
default dynamic page refresh pattern to stay RFC compliant:
   refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

Of course providing the pages with correct Expires:, Last-Modified:
and/or Cache-Control: headers is even better.

> refresh_pattern . 0 20% 4320
>
> acl apache rep_header Server ^Apache
> broken_vary_encoding allow apache
>
> coredump_dir /var/cache/squid
>
> http_access allow manager localhost
> http_access deny manager
>
> http_access deny to_localhost
>
> http_port 80 accel vport
>
> cache_peer 172.21.1.2 parent 80 0 no-query originserver round-robin login=PASS
> cache_peer 172.21.3.4 parent 80 0 no-query originserver round-robin login=PASS
> cache_peer 172.21.5.6 parent 80 0 no-query originserver round-robin login=PASS
>
> acl mainSite dstdomain www.company.com
> acl otherSites dstdomain .company.com
>
> cache_peer_access 172.21.1.2 allow mainSite
> cache_peer_access 172.21.1.2 deny all
> cache_peer_access 172.21.3.4 allow mainSite
> cache_peer_access 172.21.3.4 deny all
> cache_peer_access 172.21.5.6 allow mainSite
> cache_peer_access 172.21.5.6 deny all
>
> http_access allow mainSite
>
> deny_info http://www.company.com/ otherSites
>
> http_access deny otherSites
> http_access deny all
>
> icp_port 0
> icp_access deny all
> log_icp_queries off
>
> acl loadbalancer1 src 172.21.10.1
> acl loadbalancer2 src 172.21.10.12
> follow_x_forwarded_for allow loadbalancer1
> follow_x_forwarded_for allow loadbalancer2
> follow_x_forwarded_for allow all
> acl_uses_indirect_client on
> delay_pool_uses_indirect_client on
> log_uses_indirect_client on
>
> logformat combined %{Host}>h %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh

If this really is the real "combined" Apache httpd format there is no
need to define it. If it's a customized version with altered details
please name it with a name of your own.

> access_log /var/log/squid/access.log combined
> logfile_rotate 0
> collapsed_forwarding on
> vary_ignore_expire on
> httpd_suppress_version_string off
>
> cache_effective_user squid
> cache_store_log none
> client_db off
> cache_mem 512 MB
> maximum_object_size_in_memory 24 MB
> cache_replacement_policy lru
> cache_dir ufs /var/cache/squid 2000 10 10
> maximum_object_size 20480 KB

cosmetic: maximum_object_size 20 MB

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE21
   Current Beta Squid 3.1.0.15