View Single Post
  #7 (permalink)  
Old 15-09-2007, 23:39
d3v4's Avatar
d3v4 d3v4 is offline
VIP Member
 
Join Date: Jul 2007
Location: di alam baka
Posts: 982
iTrader: (0)
Thanks: 49
Thanked 391 Times in 150 Posts
d3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant futured3v4 has a brilliant future
yang pertama coba beberapa perubahan pada squid.conf di parent proxy

Code:
http_port 8080
#http_port 3128 <--- ini di tutup aja 
#http_port 80
icp_port 3130 

hierarchy_stoplist cgi-bin ? .js .jsp .g .do .php .asp .cgi localhost visicom indosat.net.id
acl QUERY urlpath_regex cgi-bin \? .js .jsp .g .do .php .asp .cgi localhost visicom indosat.net.id
no_cache deny QUERY

cache_mem 8 MB <----- ini jadi 8 aja
maximum_object_size 16 MB <-- ini di jadiin 1024 KB saja jika ingin respon lebih baik
maximum_object_size_in_memory 128 KB <-- ini 32 KB saja
#minimum_object_size 2 KB  <=== ini di hilangkan saja 
fqdncache_size 1024
cache_swap_low 98%
cache_swap_high 99%
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
#high_memory_warning 70 MB  <-- ini ga perlu
ipcache_size 4096 
ipcache_low 98
ipcache_high 99

cache_access_log c:/squid/var/logs/access.log
cache_log c:/squid/var/logs/cache.log
cache_store_log c:/squid/var/logs/store.log
mime_table c:/squid/etc/mime.conf
pid_filename c:/squid/var/logs/squid.pid
log_fqdn off
log_icp_queries off
buffered_logs off
emulate_httpd_log off
half_closed_clients off

ftp_passive on
ftp_sanitycheck on
#============================================================$
# DNS resolution section
#============================================================$
dns_nameservers 127.0.0.1/8 202.72.208.8/29 202.149.69.254/24 <-- ini yang 127.0.0.1 di hilangkan 
#============================================================$
# AUTH section
#============================================================$
#auth_param basic children 5
#auth_param basic realm Squid proxy-caching web server
#auth_param basic credentialsttl 2 hours
#auth_param basic casesensitive off
#============================================================$
# Refresh Rate TUNING CACHE PROXY
#============================================================$
refresh_pattern \.gif 4320 50% 43200
refresh_pattern \.jpg 4320 50% 43200
refresh_pattern \.tif 4320 50% 43200
refresh_pattern \.png 4320 50% 43200
refresh_pattern \.jpeg 4320 50% 43200
refresh_pattern ^http://www.friendster.com/.* 720 100% 4320
refresh_pattern ^http://mail.yahoo.com/.* 720 100% 4320
refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320
refresh_pattern ^http://*.yimg.*/.* 720 100% 4320
refresh_pattern ^http://*.gmail.*/.* 720 100% 4320
refresh_pattern ^http://*.google.*/.* 720 100% 4320
refresh_pattern ^http://*korea.*/.* 720 100% 4320
refresh_pattern ^http://*.akamai.*/.* 720 100% 4320
refresh_pattern ^http://*.windowsmedia.*/.* 720 100% 4320
refresh_pattern ^http://*.googlesyndication.*/.* 720 100% 4320
refresh_pattern ^http://*.plasa.*/.* 720 100% 4320
refresh_pattern ^http://*.telkom.*/.* 720 100% 4320 di hilangkan saja yang di blok
refresh_pattern ^ftp: 10080 95% 40320 reload-into-ims override-lastmod
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320 reload-into-ims override-lastmod
negative_ttl 1 minutes <-- ini juga 

quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100%

#============================================================$
# ACL section AKSES KONTROL
#============================================================$
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl mikrotik src 192.168.0.1
acl localnet src 192.168.0.0/24 192.10.11.0/24 202.72.208.8/29
acl localhost src 127.0.0.1/255.255.255.255
#acl our_networks src 192.168.0.0/24 192.10.11.0/24 202.72.208.8/29
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 5004 # telnet Mikrotik bima dan bagus net
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
acl blokdomain dstdomain -i regex "C:\squid\etc\blocklist.txt"
#acl blokdomain dstdomain  "C:\squid\etc\blocklist.txt"
acl blocker dstdomain  -i regex "c:\squid\etc\blocklist.txt"
#acl ipblok dst  "C:\squid\etc\blocklist.txt"
acl porno url_regex -i "C:\squid\etc\blocklist.txt"
no_cache deny porno
acl noporno url_regex -i "C:\squid\etc\nonporno.txt"
http_access deny porno all
#http_access deny ipblok 
http_access deny blokdomain
#http_access deny files
http_access allow manager localhost
http_access deny manager
http_access allow noporno all
http_access allow localnet
http_access allow localhost
#http_access deny blocker
http_access allow mikrotik

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny CONNECT
#http_access deny all

maximum_object_size 10240 KB
maximum_object_size_in_memory 32 KB
minimum_object_size 4 KB
ipcache_size 4096
ipcache_low 98
ipcache_high 99
quick_abort_min 0
quick_abort_max 0
quick_abort_pct 100
fqdncache_size 4096
shutdown_lifetime 10 second
cachemgr_passwd flashdisk
cache_effective_user squid
cache_effective_group squid
memory_pools off
buffered_logs off
log_icp_queries off
logfile_rotate 0
log_fqdn off
forwarded_for on
icp_hit_stale on
query_icmp on
reload_into_ims on
emulate_httpd_log off
negative_ttl 2 minutes
pipeline_prefetch on
vary_ignore_expire on
half_closed_clients off
high_memory_warning 32 MB
high_response_time_warning 2000
high_page_fault_warning 2
cache_mgr Selama_Bulan_Puasas_Situs_Porno_tida...vest@yahoo.com
visible_hostname bagusnet_proxy_web_filter_by_yusuf
header_access Accept-Encoding deny all
#============================================================$
# Transparent proxy setting
#============================================================$
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
httpd_accel_no_pmtu_disc on
httpd_accel_single_host off
half_closed_clients off
#forwarded_for on

#============================================================$
# MISCELLANEOUS
#============================================================$
logfile_rotate 3
negative_ttl 2 minutes
#digest_rebuild_period 30 minute
#digest_rewrite_period 30 minute
#digest_swapout_chunk_size 4096 bytes
client_persistent_connections on
server_persistent_connections on
pipeline_prefetch on
vary_ignore_expire on
reload_into_ims on
store_dir_select_algorithm round-robin
nonhierarchical_direct off
prefer_direct off
memory_pools off
shutdown_lifetime 5 seconds
cachemgr_passwd flashdisk
ie_refresh on
cache_effective_user proxy
cache_effective_group proxy
setelah di coba apabila tidak ada perubahan

coba di disable NAT nya bandingkan ada proxy dengan tidak ada proxy .. bedakan hasilnya di enable sama di disable..

jika yang ini di disable hasil lebih baik maka kemungkinan di proxy ya yang bottle neck

Reply With Quote
The Following User Says Thank You to d3v4 For This Useful Post: