[Share & Posting] Your Lusca Performance
-
Mohon izin kawan2 …
Berangkat dari sudah banyaknya kawan2 yang mengcustom dan mengadaptasi lusca di mesin PfSense
dan sudah cukup stabilnya lusca untuk dipergunakan dalam mesin produksi
dan alhamdulillah, kawan kita, asli produk lokal :), seperti om @grage95, dengan baik hati terus menyediakan update lusca terbaru (keep spirit yah om) ...Izinkan dan mari diskusi dan posting Lusca Performance dari kawan2 semua
sekaligus saling koreksi ...
awalan dr pelosok serang ...
untuk tune up semua sudah ada di forum ini, defaultnya performa semua :)mesin pfsense 1.2.3
hp,2 gb ram, 4 disk, 1 system, 3 cache
pake lusca dari om @grage95
[lagi dicoba] dipake buat parent proxySquid Object Cache: Version LUSCA_HEAD Start Time: Sat, 13 Mar 2010 03:18:23 GMT Current Time: Sun, 14 Mar 2010 05:09:13 GMT Connection information for squid: Number of clients accessing cache: 4 Number of HTTP requests received: 467799 Number of ICP messages received: 102296 Number of ICP messages sent: 102296 Number of queued ICP replies: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 301.6 Average ICP messages per minute since start: 131.9 Select loop called: 15681417 times, 5.934 ms avg Cache information for squid: Request Hit Ratios: 5min: 5.0%, 60min: 5.7% Byte Hit Ratios: 5min: 6.2%, 60min: 3.1% Request Memory Hit Ratios: 5min: 0.0%, 60min: 0.5% Request Disk Hit Ratios: 5min: 93.5%, 60min: 80.3% Storage Swap size: 48976862 KB Storage Mem size: 16356 KB Mean Object Size: 21.69 KB Requests given to unlinkd: 0 Median Service Times (seconds) 5 min 60 min: HTTP Requests (All): 0.02069 0.02317 Cache Misses: 0.02069 0.02317 Cache Hits: 0.01745 0.01745 Near Hits: 0.14252 0.14252 Not-Modified Replies: 0.00091 0.00000 DNS Lookups: 0.00000 0.00000 ICP Queries: 0.00000 0.00000 Resource usage for squid: UP Time: 93049.484 seconds CPU Time: 1009.604 seconds CPU Usage: 1.09% CPU Usage, 5 minute avg: 1.78% CPU Usage, 60 minute avg: 1.38% Process Data Segment Size via sbrk(): 0 KB Maximum Resident Size: 275436 KB Page faults with physical i/o: 5 Memory accounted for: Total accounted: 170683 KB memPoolAlloc calls: 77129503 memPoolFree calls: 72527592 File descriptor usage for squid: Maximum number of file descriptors: 58982 Largest file desc currently in use: 125 Number of file desc currently in use: 81 Files queued for open: 0 Available number of file descriptors: 58901 Reserved number of file descriptors: 100 Store Disk files open: 1 IO loop method: kqueue Internal Data Structures: 2261314 StoreEntries 3755 StoreEntries with MemObjects 3739 Hot Object Cache Items 2258208 on-disk objects
Store Directory Statistics: Store Entries : 2261577 Maximum Swap Size : 109486080 KB Current Store Swap Size: 48978338 KB Current Capacity : 45% used, 55% free Store Directory #0 (aufs): /rama FS Block Size 2048 Bytes First level subdirectories: 29 Second level subdirectories: 256 Maximum Size: 25600000 KB Current Size: 16711606 KB Percent Used: 65.28% Current load metric: 100 / 1000 Filemap bits in use: 753508 of 1048576 (72%) Filesystem Space in use: 16849520/64514690 KB (26%) Filesystem Inodes in use: 760964/8360958 (9%) Flags: Accepted object sizes: 0 - (unlimited) bytes Removal policy: heap Store Directory #1 (aufs): /dhika FS Block Size 2048 Bytes First level subdirectories: 46 Second level subdirectories: 256 Maximum Size: 41943040 KB Current Size: 16272990 KB Percent Used: 38.80% Current load metric: 100 / 1000 Filemap bits in use: 751910 of 1048576 (72%) Filesystem Space in use: 16421708/140198042 KB (12%) Filesystem Inodes in use: 763735/18135038 (4%) Flags: Accepted object sizes: 0 - (unlimited) bytes Removal policy: heap Store Directory #2 (aufs): /danish FS Block Size 2048 Bytes First level subdirectories: 46 Second level subdirectories: 256 Maximum Size: 41943040 KB Current Size: 15993742 KB Percent Used: 38.13% Current load metric: 100 / 1000 Filemap bits in use: 753059 of 1048576 (72%) Filesystem Space in use: 16144916/140198042 KB (12%) Filesystem Inodes in use: 764878/18135038 (4%) Flags: Accepted object sizes: 0 - (unlimited) bytes Removal policy: heap
TOTALS ICP : 106417 Queries, 11997 Hits ( 11%) HTTP: 471410 Requests, 83299 Hits ( 18%)
Child Proxy
PfSense 1.2.3
2gb ram, 3 disk, 1 system, 2 cache
pake lusca dari om chudySquid Object Cache: Version LUSCA_HEAD r14448 patched by chudy r10 Start Time: Wed, 10 Mar 2010 13:01:51 GMT Current Time: Sun, 14 Mar 2010 05:21:15 GMT Connection information for squid: Number of clients accessing cache: 18 Number of HTTP requests received: 1354492 Number of ICP messages received: 109843 Number of ICP messages sent: 109843 Number of queued ICP replies: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 255.6 Average ICP messages per minute since start: 41.5 Select loop called: 54258516 times, 5.860 ms avg Cache information for squid: Request Hit Ratios: 5min: 3.6%, 60min: 6.4% Byte Hit Ratios: 5min: 59.2%, 60min: 53.4% Request Memory Hit Ratios: 5min: 1.6%, 60min: 1.9% Request Disk Hit Ratios: 5min: 71.4%, 60min: 75.7% Storage Swap size: 11362018 KB Storage Mem size: 32772 KB Mean Object Size: 23.39 KB Requests given to unlinkd: 0 Median Service Times (seconds) 5 min 60 min: HTTP Requests (All): 0.02190 0.01955 Cache Misses: 0.02190 0.01955 Cache Hits: 0.00598 0.00379 Near Hits: 0.07014 0.02742 Not-Modified Replies: 0.00000 0.00091 DNS Lookups: 0.00000 0.00000 ICP Queries: 0.00027 0.00029 Resource usage for squid: UP Time: 317964.165 seconds CPU Time: 3563.406 seconds CPU Usage: 1.12% CPU Usage, 5 minute avg: 2.18% CPU Usage, 60 minute avg: 1.83% Process Data Segment Size via sbrk(): 0 KB Maximum Resident Size: 144904 KB Page faults with physical i/o: 6 Memory accounted for: Total accounted: 85238 KB memPoolAlloc calls: 239402940 memPoolFree calls: 238213011 File descriptor usage for squid: Maximum number of file descriptors: 58982 Largest file desc currently in use: 67 Number of file desc currently in use: 43 Files queued for open: 0 Available number of file descriptors: 58939 Reserved number of file descriptors: 100 Store Disk files open: 3 IO loop method: kqueue Internal Data Structures: 491688 StoreEntries 7668 StoreEntries with MemObjects 7658 Hot Object Cache Items 485747 on-disk objects
Store Directory Statistics: Store Entries : 491831 Maximum Swap Size : 71680000 KB Current Store Swap Size: 11363514 KB Current Capacity : 16% used, 84% free Store Directory #0 (aufs): /dhika FS Block Size 2048 Bytes First level subdirectories: 29 Second level subdirectories: 256 Maximum Size: 25600000 KB Current Size: 5901368 KB Percent Used: 23.05% Current load metric: 100 / 1000 Filemap bits in use: 242631 of 262144 (93%) Filesystem Space in use: 5962922/71623840 KB (8%) Filesystem Inodes in use: 250087/9279486 (3%) Flags: Accepted object sizes: 0 - (unlimited) bytes Removal policy: heap Store Directory #1 (aufs): /danish FS Block Size 2048 Bytes First level subdirectories: 32 Second level subdirectories: 256 Maximum Size: 46080000 KB Current Size: 5462146 KB Percent Used: 11.85% Current load metric: 100 / 1000 Filemap bits in use: 243265 of 262144 (93%) Filesystem Space in use: 5546734/146294138 KB (4%) Filesystem Inodes in use: 251492/18912254 (1%) Flags: Accepted object sizes: 0 - (unlimited) bytes Removal policy: heap
TOTALS ICP : 0 Queries, 0 Hits ( 0%) HTTP: 1263960 Requests, 450905 Hits ( 36%)
Ngambil dari report lightsquid
Date Group Users Oversize Bytes Average Hit % 13 Mar 2010 grp 21 16 6.2 G 303.9 M 22.74% 12 Mar 2010 grp 19 15 6.5 G 349.4 M 27.75% 11 Mar 2010 grp 17 13 5.1 G 309.3 M 24.68% 10 Mar 2010 grp 5 4 323.2 M 64.6 M 11.91% 09 Mar 2010 grp 1 0 24 498 24 498 0.00% 08 Mar 2010 grp 20 11 2.5 G 128.1 M 32.44% 07 Mar 2010 grp 14 13 2.3 G 166.2 M 20.89% 06 Mar 2010 grp 20 14 2.8 G 141.6 M 35.42% 05 Mar 2010 grp 19 12 2.2 G 118.0 M 29.70% 04 Mar 2010 grp 20 14 1.5 G 76.7 M 33.83% 03 Mar 2010 grp 18 13 2.7 G 154.3 M 37.28% 02 Mar 2010 grp 21 15 1.8 G 89.8 M 31.36% 01 Mar 2010 grp 2 0 14 000 7 000 0.00% Total/Average: 15 10 33.9 G 146.3 M 23.69%
squid.conf
http_port 192.118.98.254:3128 http_port 127.0.0.1:80 transparent icp_port 3130 pid_filename /var/run/squid.pid cache_effective_user proxy cache_effective_group proxy error_directory /usr/local/etc/squid/errors/English icon_directory /usr/local/etc/squid/icons visible_hostname raihan.proxy.serangku.net cache_mgr serangkugmail.com access_log /var/squid/log/access.log cache_log /var/squid/log/cache.log cache_store_log none logfile_rotate 1 shutdown_lifetime 30 seconds # Allow local network(s) on interface(s) acl localnet src 192.118.98.0/255.255.255.0 uri_whitespace strip dns_nameservers 127.0.0.1 cache_mem 32 MB maximum_object_size_in_memory 32 KB memory_replacement_policy heap GDSF cache_replacement_policy heap LFUDA include /usr/local/etc/squid/dir.conf minimum_object_size 0 KB maximum_object_size 65 MB offline_mode off cache_swap_low 97 cache_swap_high 98 # No redirector configured cache_peer 192.168.117.254 parent 3128 3130 # Setup some default acls acl all src 0.0.0.0/0.0.0.0 acl localhost src 127.0.0.1/255.255.255.255 acl localhost src 192.118.98.254/255.255.255.255 acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 1025-65535 acl sslports port 443 563 acl manager proto cache_object acl purge method PURGE acl connect method CONNECT #acl dynamic urlpath_regex cgi-bin \? include /usr/local/etc/squid/include.conf acl blacklist dstdom_regex -i "/var/squid/acl/blacklist.acl" #cache deny dynamic http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !safeports http_access deny CONNECT !sslports # Always allow localhost connections http_access allow localhost quick_abort_min 32 KB quick_abort_max 128 KB quick_abort_pct 75 request_body_max_size 0 allow all reply_body_max_size 102400000 deny all delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 -1/-1 delay_initial_bucket_level 100 # Throttle extensions matched in the url acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl" delay_access 1 allow throttle_exts delay_access 1 deny all delay_body_max_size 1048576 1 allow all # Block access to blacklist domains http_access deny blacklist # Allow local network(s) on interface(s) http_access allow localnet # Custom options redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf redirector_bypass on redirect_children 3 # Default block all to be sure http_access deny all
sedikit tambahan :
untuk cache_mem bisa dimulai dari angka 16 mb
untuk maximum_object_size mulai dari angka 16 atau 32 mb, setelah object cache sampe +- 500000,silakan bisa dinaikan, karena utk awalan proxy pastinya banyak miss dan ada pesan sponsor : Objects larger than the size specified (in megabytes) will not be saved on disk cache. If you wish to increase speed more than you want to save bandwidth, this should be set to a low value. :D
sangat di sarankan setidaknya untuk menggunakan 1 gb ram dan 2 disk, 1 system, 1 cache
mungkin ada yang mau menambahkan …Bila boleh berkesimpulan, hasil sudah cukup memuaskan
masih banyak belum bisanya ... mohon bimbingan selalu
semoga berkenan -
kalo punya ku :
HTTP/1.0 200 OK
Server: Lusca/LUSCA_HEAD
Date: Thu, 25 Mar 2010 15:11:03 GMT
Content-Type: text/plain
Expires: Thu, 25 Mar 2010 15:11:03 GMT
X-Cache: MISS from localhost
Connection: closeSquid Object Cache: Version LUSCA_HEAD
Start Time: Thu, 25 Mar 2010 14:25:42 GMT
Current Time: Thu, 25 Mar 2010 15:11:03 GMT
Connection information for squid:
Number of clients accessing cache: 0
Number of HTTP requests received: 4336
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Number of HTCP messages received: 0
Number of HTCP messages sent: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 95.6
Average ICP messages per minute since start: 0.0
Select loop called: 90687 times, 30.000 ms avg
Cache information for squid:
Request Hit Ratios: 5min: 18.3%, 60min: 19.2%
Byte Hit Ratios: 5min: 30.2%, 60min: 9.3%
Request Memory Hit Ratios: 5min: 0.0%, 60min: 0.4%
Request Disk Hit Ratios: 5min: 13.1%, 60min: 15.0%
Storage Swap size: 5960492 KB
Storage Mem size: 5432 KB
Mean Object Size: 129.00 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 0.52331 0.72387
Cache Misses: 0.89858 1.00114
Cache Hits: 0.00000 0.01745
Near Hits: 0.00000 0.00000
Not-Modified Replies: 0.02190 0.00091
DNS Lookups: 0.00000 0.00000
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 2720.570 seconds
CPU Time: 14.873 seconds
CPU Usage: 0.55%
CPU Usage, 5 minute avg: 0.44%
CPU Usage, 60 minute avg: 0.55%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 23616 KB
Page faults with physical i/o: 1
Memory accounted for:
Total accounted: 9582 KB
memPoolAlloc calls: 763080
memPoolFree calls: 647966
File descriptor usage for squid:
Maximum number of file descriptors: 11095
Largest file desc currently in use: 111
Number of file desc currently in use: 79
Files queued for open: 0
Available number of file descriptors: 11016
Reserved number of file descriptors: 100
Store Disk files open: 0
IO loop method: kqueue
Internal Data Structures:
46257 StoreEntries
961 StoreEntries with MemObjects
951 Hot Object Cache Items
46206 on-disk objectsngga tahu bener apa salah yg jelas dah jalan semua dan client dah tersenyum, kalo ada yg kurang SIP mohon di koreksi… siapa tahu malah bisa tambah nyoosss
-
punyaku:
Squid Object Cache: Version LUSCA_HEAD
Start Time: Fri, 26 Mar 2010 08:41:22 GMT
Current Time: Fri, 26 Mar 2010 16:27:50 GMT
Connection information for squid:
Number of clients accessing cache: 0
Number of HTTP requests received: 155662
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 333.7
Average ICP messages per minute since start: 0.0
Select loop called: 2787456 times, 10.040 ms avg
Cache information for squid:
Request Hit Ratios: 5min: 9.5%, 60min: 26.2%
Byte Hit Ratios: 5min: 1.8%, 60min: 23.8%
Request Memory Hit Ratios: 5min: 5.2%, 60min: 2.3%
Request Disk Hit Ratios: 5min: 76.7%, 60min: 86.2%
Storage Swap size: 2104510 KB
Storage Mem size: 8184 KB
Mean Object Size: 12.58 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 0.89858 0.72387
Cache Misses: 1.00114 1.00114
Cache Hits: 0.00286 0.00463
Near Hits: 0.00000 0.30459
Not-Modified Replies: 0.00179 0.00091
DNS Lookups: 0.00000 0.00000
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 27987.194 seconds
CPU Time: 814.608 seconds
CPU Usage: 2.91%
CPU Usage, 5 minute avg: 1.93%
CPU Usage, 60 minute avg: 3.02%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 45044 KB
Page faults with physical i/o: 0
Memory accounted for:
Total accounted: 21733 KB
memPoolAlloc calls: 23129504
memPoolFree calls: 22748483
File descriptor usage for squid:
Maximum number of file descriptors: 235929
Largest file desc currently in use: 327
Number of file desc currently in use: 143
Files queued for open: 0
Available number of file descriptors: 235786
Reserved number of file descriptors: 100
Store Disk files open: 1
IO loop method: kqueue
Internal Data Structures:
167470 StoreEntries
1831 StoreEntries with MemObjects
1808 Hot Object Cache Items
167330 on-disk objects -
Baru ganti ke versi baru….
$ squidclient -p 80 mgr:info HTTP/1.0 200 OK Server: Lusca/LUSCA_HEAD Date: Sun, 28 Mar 2010 11:11:21 GMT Content-Type: text/plain Expires: Sun, 28 Mar 2010 11:11:21 GMT X-Cache: MISS from ServerDarutTaqwa Connection: close Squid Object Cache: Version LUSCA_HEAD Start Time: Sun, 28 Mar 2010 09:01:50 GMT Current Time: Sun, 28 Mar 2010 11:11:21 GMT Connection information for squid: Number of clients accessing cache: 0 Number of HTTP requests received: 15829 Number of ICP messages received: 13591 Number of ICP messages sent: 13591 Number of queued ICP replies: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 122.2 Average ICP messages per minute since start: 209.9 Select loop called: 358013 times, 21.706 ms avg Cache information for squid: Request Hit Ratios: 5min: 14.4%, 60min: 13.3% Byte Hit Ratios: 5min: 4.1%, 60min: 6.4% Request Memory Hit Ratios: 5min: 91.6%, 60min: 73.6% Request Disk Hit Ratios: 5min: 0.0%, 60min: 0.8% Storage Swap size: 79642 KB Storage Mem size: 16396 KB Mean Object Size: 8.94 KB Requests given to unlinkd: 0 Median Service Times (seconds) 5 min 60 min: HTTP Requests (All): 0.18699 0.39928 Cache Misses: 0.42149 0.72387 Cache Hits: 0.00102 0.00091 Near Hits: 0.00919 0.00865 Not-Modified Replies: 0.00000 0.00000 DNS Lookups: 0.00000 0.00000 ICP Queries: 0.00281 0.00235 Resource usage for squid: UP Time: 7770.981 seconds CPU Time: 63.399 seconds CPU Usage: 0.82% CPU Usage, 5 minute avg: 1.69% CPU Usage, 60 minute avg: 1.09% Process Data Segment Size via sbrk(): 0 KB Maximum Resident Size: 141572 KB Page faults with physical i/o: 0 Memory accounted for: Total accounted: 21052 KB memPoolAlloc calls: 2326713 memPoolFree calls: 2209445 File descriptor usage for squid: Maximum number of file descriptors: 14781 Largest file desc currently in use: 80 Number of file desc currently in use: 58 Files queued for open: 0 Available number of file descriptors: 14723 Reserved number of file descriptors: 100 Store Disk files open: 0 IO loop method: kqueue Internal Data Structures: 8957 StoreEntries 3978 StoreEntries with MemObjects 3955 Hot Object Cache Items 8909 on-disk objects
-
sebelum bobo :
LUSCA i386 (p4,2gb,sata jadul, mbuh mereknya apa)
-
Buat Om Serangku, Ipoelnet, yantisna dan kawan2 lainnya…
saya kebetulan baru di forum ini...tertarik dengan pFsense karena ada teman yg memperlihatkan grafik cachenya yg sangat menggiurkan...
setelah ditanya dia menggunakan Lusca Cache....
namun anehnya kami berdua sama2 kesulitan melihat performa kami lewat perintahsquidclient -p mgr:info
atau
squidclient mgr:info |less
client: ERROR: Cannot connect to localhost:3128: Connection refused
mungkin kami mempunyai kesalahan konfigurasi di squid.inc ato mungkin juga di konfigurasi Service > Proxy Server
sekiranya mohon juga disharing konfigurasi di webGUI agar kami benar paham mengenai konfigurasi lusca proxy ini dan juga kalau bisa konfigurasi squid.inc bisa disharing disini sama seperti yg om Serangku sudah lebih dulu share tentang konfigurasi squid.conf -nya om serangku
http_port 192.118.98.254:3128
http_port 127.0.0.1:80 transparent
icp_port 3130pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname raihan.proxy.serangku.net
cache_mgr serangkugmail.com
access_log /var/squid/log/access.log
cache_log /var/squid/log/cache.log
cache_store_log none
logfile_rotate 1
shutdown_lifetime 30 secondsAllow local network(s) on interface(s)
acl localnet src 192.118.98.0/255.255.255.0
uri_whitespace strip
dns_nameservers 127.0.0.1cache_mem 32 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDAinclude /usr/local/etc/squid/dir.conf
minimum_object_size 0 KB
maximum_object_size 65 MB
offline_mode off
cache_swap_low 97
cache_swap_high 98No redirector configured
cache_peer 192.168.117.254 parent 3128 3130
Setup some default acls
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl localhost src 192.118.98.254/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 1025-65535
acl sslports port 443 563
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
#acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/include.conf
acl blacklist dstdom_regex -i "/var/squid/acl/blacklist.acl"
#cache deny dynamic
http_access allow manager localhosthttp_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslportsAlways allow localhost connections
http_access allow localhost
quick_abort_min 32 KB
quick_abort_max 128 KB
quick_abort_pct 75
request_body_max_size 0 allow all
reply_body_max_size 102400000 deny all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100Throttle extensions matched in the url
acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
delay_access 1 allow throttle_exts
delay_access 1 deny all
delay_body_max_size 1048576 1 allow allBlock access to blacklist domains
http_access deny blacklist
Allow local network(s) on interface(s)
http_access allow localnet
Custom options
redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
redirector_bypass on
redirect_children 3Default block all to be sure
http_access deny all
untuk waktu sharingnya saya ucapkan terima kasih…
sementara ini saya sudah pake pFsense 1.2.3 namun masih menggunakan squid bawaan pFsense.....
NB : konfigurasi PfSense saya
IP Lokal : 192.168.1.1/24
IP WAN : PPPoE Speedy Telkomport squid : 3128
cache : 50GB partisinya terpisah dari system
-
squidclient mgr:info |less
client: ERROR: Cannot connect to localhost:3128: Connection refusedsaya pernah seperti itu kemudian sembuh dengan
http_port 192.118.98.254:3128
http_port 127.0.0.1:3128 transparent <–- aku ganti seperti ini mau jalan, kalo aku kembalikan lagi ke port 80 atau selain 3128 ngga mau jalan squidclient mgr:info nya
icp_port 3130trus kalo bisa, saran aja kalo client anda banyak dan cerewet semua.. jangan PPOE / bridge modem nya.. buat aja ppoe nya di modem, jadi kalo speedy nya putus bisa nyambung lagi, kalo yang dial pfsense nya kalo mati kita harus connectkan lagi.. mungkin teman2 disini ada yg bisa bikin otomatis connect cuman ya itu harus buat script nya dulu.
kalo configurasi saya standart kok... itu pun karena bimbingan om grage dan teman2 di forum ini
http_port 10.10.0.252:3128 transparent
http_port 127.0.0.1:3128 transparent
icp_port 0pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname localhost
cache_mgr admin@localhost
access_log /var/squid/log/access.log
cache_log /var/squid/log/cache.log
cache_store_log none
server_http11 on
logfile_rotate 1
shutdown_lifetime 3 secondsAllow local network(s) on interface(s)
acl localnet src 10.10.0.0/255.255.255.0
forwarded_for off
via off
uri_whitespace stripcache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir aufs /var/squid/cache 6000 16 256
minimum_object_size 0 KB
maximum_object_size 128000 KB
offline_mode on
cache_swap_low 98
cache_swap_high 99No redirector configured
Setup some default acls
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 8888 3128 1025-65535
acl sslports port 443 563 8888
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/tunning.conf
cache deny dynamic
http_access allow manager localhosthttp_access deny manager
http_access allow purge localhost
http_access deny purge
http_access allow !safeports
http_access deny CONNECT !sslportsAlways allow localhost connections
http_access allow localhost
quick_abort_min 0 KB
quick_abort_max 0 KB
request_body_max_size 0 KB
reply_body_max_size 0 allow all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 30720/30720
delay_initial_bucket_level 100Throttle extensions matched in the url
acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
delay_access 1 allow throttle_exts
delay_access 1 deny allAllow local network(s) on interface(s)
http_access allow localnet
Default block all to be sure
http_access deny all
-
coba cari cachemgr.conf
ganti
localhost
menjadi
localhost:port –-> port diganti sesuai dng port yg dipakai -
coba cari cachemgr.conf
ganti
localhost
menjadi
localhost:port –-> port diganti sesuai dng port yg dipakaiuntuk perintahnya pake apa ya? mohon diperjelas biar para pemula bisa ikutan
-
masuk ke konsole ketik: find |grep cachemgr.conf << mudah2 an aja bisa….
coba aja yah
-
Saya punya : Pfsense 1.2.3, Lusca Head r14554
Cache Manager menu
Cache Clients:
Address: 127.0.0.1
Name: 127.0.0.1
Currently established connections: 1
ICP Requests 0
HTTP Requests 19438
TCP_MISS 19422 100%
TCP_DENIED 16 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 11745
TCP_HIT 1641 14%
TCP_MISS 8679 74%
TCP_REFRESH_HIT 107 1%
TCP_REFRESH_MISS 12 0%
TCP_IMS_HIT 1014 9%
TCP_NEGATIVE_HIT 11 0%
TCP_MEM_HIT 280 2%
TCP_DENIED 1 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 366
TCP_HIT 11 3%
TCP_MISS 312 85%
TCP_REFRESH_HIT 20 5%
TCP_REFRESH_MISS 13 4%
TCP_IMS_HIT 4 1%
TCP_MEM_HIT 6 2%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 27687
TCP_HIT 2286 8%
TCP_MISS 21644 78%
TCP_REFRESH_HIT 172 1%
TCP_REFRESH_MISS 104 0%
TCP_IMS_HIT 2928 11%
TCP_NEGATIVE_HIT 26 0%
TCP_MEM_HIT 527 2%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 285220
TCP_HIT 45121 16%
TCP_MISS 182350 64%
TCP_REFRESH_HIT 11190 4%
TCP_REFRESH_FAIL_HIT 1 0%
TCP_REFRESH_MISS 1413 0%
TCP_IMS_HIT 36074 13%
TCP_NEGATIVE_HIT 841 0%
TCP_MEM_HIT 8168 3%
TCP_DENIED 62 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 10905
TCP_HIT 748 7%
TCP_MISS 9315 85%
TCP_REFRESH_HIT 40 0%
TCP_REFRESH_MISS 12 0%
TCP_IMS_HIT 505 5%
TCP_NEGATIVE_HIT 54 0%
TCP_MEM_HIT 231 2%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 2113
TCP_HIT 498 24%
TCP_MISS 1029 49%
TCP_IMS_HIT 255 12%
TCP_MEM_HIT 331 16%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 7547
TCP_HIT 941 12%
TCP_MISS 4563 60%
TCP_REFRESH_HIT 72 1%
TCP_REFRESH_MISS 102 1%
TCP_IMS_HIT 1506 20%
TCP_NEGATIVE_HIT 2 0%
TCP_MEM_HIT 361 5%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 59944
TCP_HIT 4483 7%
TCP_MISS 48782 81%
TCP_REFRESH_HIT 1386 2%
TCP_REFRESH_MISS 149 0%
TCP_IMS_HIT 4560 8%
TCP_NEGATIVE_HIT 3 0%
TCP_MEM_HIT 581 1%Address: 192.168.
Name: 192.168.
Currently established connections: 17
ICP Requests 0
HTTP Requests 220281
TCP_HIT 27540 13%
TCP_MISS 172120 78%
TCP_REFRESH_HIT 852 0%
TCP_REFRESH_MISS 2102 1%
TCP_IMS_HIT 14931 7%
TCP_NEGATIVE_HIT 109 0%
TCP_MEM_HIT 2623 1%
TCP_DENIED 4 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 222808
TCP_HIT 19603 9%
TCP_MISS 169219 76%
TCP_REFRESH_HIT 11222 5%
TCP_REFRESH_MISS 1181 1%
TCP_IMS_HIT 18659 8%
TCP_NEGATIVE_HIT 121 0%
TCP_MEM_HIT 2790 1%
TCP_DENIED 13 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 18914
TCP_HIT 3019 16%
TCP_MISS 8660 46%
TCP_REFRESH_HIT 186 1%
TCP_REFRESH_MISS 181 1%
TCP_IMS_HIT 6487 34%
TCP_NEGATIVE_HIT 32 0%
TCP_MEM_HIT 349 2%Address: 192.168.
Name: 192.168
Currently established connections: 0
ICP Requests 0
HTTP Requests 16814
TCP_HIT 960 6%
TCP_MISS 13111 78%
TCP_REFRESH_HIT 194 1%
TCP_REFRESH_MISS 21 0%
TCP_IMS_HIT 2374 14%
TCP_NEGATIVE_HIT 22 0%
TCP_MEM_HIT 132 1%Address: 192.168.
Name: 192.168
Currently established connections: 0
ICP Requests 0
HTTP Requests 2114184
TCP_HIT 144853 7%
TCP_MISS 434564 21%
TCP_REFRESH_HIT 115049 5%
TCP_REFRESH_FAIL_HIT 1 0%
TCP_REFRESH_MISS 908 0%
TCP_IMS_HIT 1406172 67%
TCP_SWAPFAIL_MISS 10 0%
TCP_NEGATIVE_HIT 219 0%
TCP_MEM_HIT 12363 1%
TCP_DENIED 45 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 491639
TCP_HIT 67737 14%
TCP_MISS 264672 54%
TCP_REFRESH_HIT 20857 4%
TCP_REFRESH_MISS 3376 1%
TCP_IMS_HIT 126074 26%
TCP_NEGATIVE_HIT 2966 1%
TCP_MEM_HIT 5957 1%Address: 192.168.
Name: 192.168
Currently established connections: 0
ICP Requests 0
HTTP Requests 127022
TCP_HIT 20155 16%
TCP_MISS 83410 66%
TCP_REFRESH_HIT 7568 6%
TCP_REFRESH_FAIL_HIT 5 0%
TCP_REFRESH_MISS 443 0%
TCP_IMS_HIT 12176 10%
TCP_NEGATIVE_HIT 78 0%
TCP_MEM_HIT 3121 2%
TCP_DENIED 66 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 28216
TCP_HIT 5060 18%
TCP_MISS 18515 66%
TCP_REFRESH_HIT 565 2%
TCP_REFRESH_MISS 53 0%
TCP_IMS_HIT 3093 11%
TCP_NEGATIVE_HIT 8 0%
TCP_MEM_HIT 914 3%
TCP_OFFLINE_HIT 8 0%Address: 192.168.
Name: 192.168
Currently established connections: 0
ICP Requests 0
HTTP Requests 61976
TCP_HIT 7160 12%
TCP_MISS 28986 47%
TCP_REFRESH_HIT 6319 10%
TCP_REFRESH_MISS 48 0%
TCP_IMS_HIT 18828 30%
TCP_NEGATIVE_HIT 1 0%
TCP_MEM_HIT 634 1%Address: 192.168.
Name: 192.168.
Currently established connections: 1
ICP Requests 0
HTTP Requests 469853
TCP_HIT 36509 8%
TCP_MISS 355613 76%
TCP_REFRESH_HIT 19971 4%
TCP_REFRESH_FAIL_HIT 13 0%
TCP_REFRESH_MISS 2571 1%
TCP_IMS_HIT 49344 11%
TCP_NEGATIVE_HIT 1018 0%
TCP_MEM_HIT 4793 1%
TCP_DENIED 21 0%Address: 192.168.
Name: 192.168.63.153
Currently established connections: 0
ICP Requests 0
HTTP Requests 8735
TCP_HIT 2006 23%
TCP_MISS 5483 63%
TCP_REFRESH_HIT 79 1%
TCP_REFRESH_MISS 26 0%
TCP_IMS_HIT 798 9%
TCP_NEGATIVE_HIT 8 0%
TCP_MEM_HIT 333 4%
TCP_DENIED 2 0%Address: 192.168.
Name: 192.168.
Currently established connections: 2
ICP Requests 0
HTTP Requests 606006
TCP_HIT 134778 22%
TCP_MISS 402238 66%
TCP_REFRESH_HIT 3592 1%
TCP_REFRESH_MISS 4130 1%
TCP_IMS_HIT 49112 8%
TCP_NEGATIVE_HIT 1677 0%
TCP_MEM_HIT 10337 2%
TCP_DENIED 142 0%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 107253
TCP_HIT 21025 20%
TCP_MISS 66546 62%
TCP_REFRESH_HIT 2186 2%
TCP_REFRESH_MISS 841 1%
TCP_IMS_HIT 13476 13%
TCP_NEGATIVE_HIT 201 0%
TCP_MEM_HIT 2973 3%
TCP_DENIED 5 0%Address: 192.168.
Name: 192.168
Currently established connections: 0
ICP Requests 0
HTTP Requests 410046
TCP_HIT 60891 15%
TCP_MISS 297037 72%
TCP_REFRESH_HIT 7229 2%
TCP_REFRESH_FAIL_HIT 1 0%
TCP_REFRESH_MISS 845 0%
TCP_IMS_HIT 31418 8%
TCP_NEGATIVE_HIT 259 0%
TCP_MEM_HIT 12363 3%
TCP_DENIED 3 0%Address: 192.168.
Name: 192.168.
Currently established connections: 2
ICP Requests 0
HTTP Requests 654616
TCP_HIT 115949 18%
TCP_MISS 396119 61%
TCP_REFRESH_HIT 21376 3%
TCP_REFRESH_MISS 1416 0%
TCP_IMS_HIT 99474 15%
TCP_NEGATIVE_HIT 715 0%
TCP_MEM_HIT 19555 3%
TCP_DENIED 12 0%Address: 192.168.
Name: 192.168.
Currently established connections: 1
ICP Requests 0
HTTP Requests 26179
TCP_HIT 2297 9%
TCP_MISS 14162 54%
TCP_REFRESH_HIT 3672 14%
TCP_REFRESH_MISS 37 0%
TCP_IMS_HIT 5369 21%
TCP_MEM_HIT 642 2%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 13960
TCP_HIT 1157 8%
TCP_MISS 9814 70%
TCP_REFRESH_HIT 66 0%
TCP_REFRESH_MISS 45 0%
TCP_IMS_HIT 2649 19%
TCP_NEGATIVE_HIT 9 0%
TCP_MEM_HIT 220 2%Address: 192.168.
Name: 192.168.
Currently established connections: 0
ICP Requests 0
HTTP Requests 16709
TCP_HIT 2203 13%
TCP_MISS 11299 68%
TCP_REFRESH_HIT 117 1%
TCP_REFRESH_FAIL_HIT 1 0%
TCP_REFRESH_MISS 115 1%
TCP_IMS_HIT 2639 16%
TCP_NEGATIVE_HIT 7 0%
TCP_MEM_HIT 326 2%
TCP_DENIED 2 0%Address: 192.168.
Name: 192.168.
Currently established connections: 1
ICP Requests 0
HTTP Requests 8333
TCP_HIT 2825 34%
TCP_MISS 3670 44%
TCP_REFRESH_HIT 69 1%
TCP_REFRESH_MISS 3 0%
TCP_IMS_HIT 1660 20%
TCP_NEGATIVE_HIT 1 0%
TCP_MEM_HIT 105 1%TOTALS
ICP : 0 Queries, 0 Hits ( 0%)
HTTP: 6048509 Requests, 2976624 Hits ( 49%)
Generated Thu, 11 Nov 2010 00:31:15 GMT, -
cache_mem 32 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDAinclude /usr/local/etc/squid/dir.conf <–------- yg ini berbeda ?
pak config yg di atas berbeda, emang yang cudy bgitu ? rubah confignya di squid.inc yah? trims banyak