交通大学计算机中心陈昌盛e-mailcschen@ccnctuedutw(编辑修改稿)

交通大学计算机中心陈昌盛e-mailcschen@ccnctuedutw(编辑修改稿)内容摘要：

cl twdn dstdomain tw • acl TANet src • acl HCdn srcdomain 43 (cont.) access control (3) • Http_access – _access allow manager Proxy – _access deny manager – … – _access deny all • icp_access – icp_access allow TANet – …. – icp_access deny all 44 ACL ban list ( 管制 ) • 範例 1 ( 找 keyword, 用 regular expression) – acl Cooking1 url_regex cooking – acl Recipe1 url_regex recipe – _access deny Cooking1 – _access deny Recipe1 – _access allow all • 範例 2 ( 用 domain name) – acl Cooking2 dstdomain – _access deny Cooking2 – _access allow all 45 Syslog maintenance • /home/squid/etc/ – logfile_rotate 3 • Crontab entry for logrotate – 0 0 * * * /bin/kill USR1 `cat /home/squid/logs/` • 每天執行一次 , 以避免記錄檔越來越大 , 無法處理 46 相關管理的工具程式 • wget • ping, traceroute, nslookup on proxy server homepage • cache manager CGI ( ) – 使用 Apache 為例 – , , • autoproxy configuration support 47 設定 Cache Manager ( Apache) 參考 FAQ • /home/squid/etc/ ScriptAlias /Squid/cgibin/ /home/squid/cgibin • /home/squid/etc/ Location /Squid/cgibin/ order deny,allow deny form all allow from , /Location 48 設定 Cache Manager ( Apache) 參考 FAQ (cont.) • /home/squid/etc/ acl manager proto cache_object acl localhost srt acl all src _access deny manager !localhost _access allow all 49 Sample (1) 10097 TCP_MISS/000 0 GET 0 UDP_MISS/000 76 ICP_QUERY /ly/p/bandn/thumbnails/ NONE/ 0 UDP_DENIED/000 82 ICP_QUERY 0 UDP_HIT/000 70 ICP_QUERY 10171 TCP_REFRESH_HIT/304 265 GET 358 TCP_HIT/200 1762 GET 358 TCP_IMS_HIT/304 225 GET :/ /50 Sample 1998/11/30 06:10:34| Starting Squid Cache version for ... 1998/11/30 06:10:34| Process ID 18654 1998/11/30 06:10:34| With 1024 file descriptors available 1998/11/30 06:10:34| Performing DNS Tests... 1998/11/30 06:10:34| Successful DNS name lookup tests... 1998/11/30 06:10:34| helperOpenServers: Starting 20 39。 dnsserver39。 processes 1998/11/30 06:10:34| Unlinkd pipe opened on FD 29 1998/11/30 06:10:34| Swap maxSize 32768000 KB, estimated 1638400 objects 1998/11/30 06:10:34| Target number of buckets: 40960 1998/11/30 06:10:34| Using 65536 Store buckets, replacement runs every 1 second 1998/11/30 06:10:34| Max Mem size: 131072 KB 1998/11/30 06:10:34| Max Swap size: 32768000 KB 1998/11/30 06:10:34| Store logging disabled 1998/11/30 06:10:34| Rebuilding storage in Cache Dir 0 (CLEAN) 51 Sample (2) 1998/11/30 06:10:34| Rebuilding storage in Cache Dir 7 (CLEAN) 1998/11/30 06:10:34| Loaded Icons. 1998/11/30 06:10:35| Accepting HTTP connections on port 3128, FD 65. 1998/11/30 06:10:35| Accepting ICP messages on port 3130, FD 66. 1998/11/30 06:10:35| Accepting SNMP messages on port 3401, FD 67. 1998/11/30 06:10:35| Ready to serve requests. 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:35| Configuring Sibling 1998/11/30 06:10:36| 65536 Entries read so far. 52 Sample (3) 1998/11/30 06:45:13| Detected DEAD Sibling: 1998/11/30 06:45:13| Detected REVIVED Sibling: 1998/11/30 06:47:07| clientIfRangeMatch: Weak ETags are not allowed in IfRange: b406e5b636279831 ? b406e5b636279831” 1998/11/30 06:50:48| internalStart: unknown request: GET /squidinternalperiodic/store_digest HTTP/ Accept: application/cachedigest Accccept: text/html Via: :3128 (Squid/) XForwardedFor: unknown Host: :3128 CacheControl: maxage=1209600 Connection: keepalive 53 Sample (4) 1998/11/30 08:13:49| urlParse: URI has whitespace: { ial/modx/?p_uniqid=1cKL7P4NYBCC9vptmA。 s_uniqid=2Em4/MoNZkfAd4vndA} 1998/11/30 08:。