Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Ga bisa ping …

    Scheduled Pinned Locked Moved Indonesian
    8 Posts 3 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      poscom
      last edited by

      mohon maaf mengganggu, ko kenapa dah berjalan beberapa hari jadi ga bisa ping yah…(remote/user) ke dns sendiri jg ga bisa. apa dari luscanya ....? tp browsing msh ok dan disk usage naek 5% ---> yg ini jg udah /*  run  dnsmasq  */

      squid_inc
      +++++++++

      Setup some default acls

      acl all src 0.0.0.0/0.0.0.0
      acl localhost src 127.0.0.1/255.255.255.255
      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 $webgui_port $port 1025-65535
      acl sslports port 443 563 $webgui_port
      acl manager proto cache_object
      acl purge method PURGE
      acl connect method CONNECT
      acl mallware url_regex "/usr/local/etc/squid/mallware"
      acl conficker url_regex "/usr/local/etc/squid/conficker"
      acl partialcontent_req req_header Range .*
      #acl dynamic urlpath_regex cgi-bin ?
      include /usr/local/etc/squid/include.conf

      EOD;

      squid_conf
      +++++++++++

      Do not edit manually !

      http_port 10.1.xx.x:3128 http11 transparent
      http_port 127.0.0.1:80 http11 transparent
      icp_port 0

      pid_filename /var/run/squid.pid
      cache_effective_user proxy
      cache_effective_group proxy
      error_directory /usr/local/etc/squid/errors/English
      icon_directory /usr/local/etc/squid/icons
      visible_hostname localhost
      cache_mgr admin@localhost
      access_log /var/squid/log/access.log
      cache_log /var/squid/log/cache.log
      cache_store_log none
      shutdown_lifetime 0 seconds

      Allow local network(s) on interface(s)

      acl localnet src  10.1.xx.x/255.255.255.224
      server_http11 on
      uri_whitespace allow
      dns_nameservers 127.0.0.1

      cache_mem 64 MB
      maximum_object_size_in_memory 32 KB
      memory_replacement_policy heap GDSF
      cache_replacement_policy heap LFUDA

      cache_dir aufs /var/squid/cache 20000 16 256
      minimum_object_size 0 KB
      maximum_object_size 64 MB
      offline_mode off
      cache_swap_low 98
      cache_swap_high 99

      No redirector configured

      Setup some default acls

      acl all src 0.0.0.0/0.0.0.0
      acl localhost src 127.0.0.1/255.255.255.255
      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 90 3128 1025-65535
      acl sslports port 443 563 90
      acl manager proto cache_object
      acl purge method PURGE
      acl connect method CONNECT
      acl mallware url_regex "/usr/local/etc/squid/mallware"
      acl conficker url_regex "/usr/local/etc/squid/conficker"
      acl partialcontent_req req_header Range .*
      #acl dynamic urlpath_regex cgi-bin ?
      include /usr/local/etc/squid/include.conf
      acl allowed_subnets src 10.1.xx.x/27
      #cache deny dynamic
      http_access allow manager localhost

      http_access deny manager
      http_access allow purge localhost
      http_access deny purge
      http_access deny !safeports
      http_access deny CONNECT !sslports
      http_access deny mallware
      http_access deny conficker

      Always allow localhost connections

      http_access allow localhost

      quick_abort_min 0 KB
      quick_abort_max 0 KB
      range_offset_limit 0 MB
      request_body_max_size 0 allow all
      reply_body_max_size 0 deny all

      delay_pools 1
      delay_class 1 2
      delay_parameters 1 -1/-1 -1/-1
      delay_initial_bucket_level 100
      delay_access 1 allow all

      Custom options

      redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
      redirector_bypass on
      redirect_children 3

      Allow local network(s) on interface(s)

      http_access allow localnet
      http_access allow allowed_subnets

      Default block all to be sure

      http_access deny all

      1 Reply Last reply Reply Quote 0
      • A
        anto_DIGIT
        last edited by

        ini hanya masalah rule utk protocol icmp yg belum dibuka ..

        1 Reply Last reply Reply Quote 0
        • P
          poscom
          last edited by

          @anto_DIGIT:

          ini hanya masalah rule utk protocol icmp yg belum dibuka ..

          thks pak anto yah bener

          1 Reply Last reply Reply Quote 0
          • P
            poscom
            last edited by

            @anto_DIGIT:

            ini hanya masalah rule utk protocol icmp yg belum dibuka ..

            pak anto toloong… banget, gmana oprek/seting loader config, file apa saja yg dipakai..? sy pake yg punya chudy, kayaknya lambat banget browsing. tp cache lumayan, trimakasih banyak.

            loader config
            ++++++++++
            autoboot_delay="3"
            vm.kmem_size="435544320"
            vm.kmem_size_max="535544320"
            #kern.ipc.nmbclusters=0

            dir config
            +++++++

            $Rev$

            #I'll try hack squid's webgui later for now use this
            #default
            cache_dir aufs /var/squid/cache
            #my personal configuration
            #cache_dir coss /cache1/coss 8000 max-size=32768
            #cache_dir coss /cache2/coss 8000 max-size=32768
            #cache_dir aufs /cache3 100000 16 256 min-size=32768  <–-
            #cache_dir aufs /cache4 100000 16 256 min-size=32768

            –-> apakah yg autoboot_delay="3" dibuka pagernya terus hd sy 80gb

            squid config
            +++++++++
            quick_abort_min 32 KB
            quick_abort_max 128 KB
            quick_abort_pct 75
            range_offset_limit 0 MB
            request_body_max_size 0 allow all
            reply_body_max_size 51200000 deny all

            delay_pools 1
            delay_class 1 2
            delay_parameters 1 -1/-1 -1/-1
            delay_initial_bucket_level 100

            Throttle extensions matched in the url

            acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
            delay_access 1 allow throttle_exts
            delay_access 1 deny all

            mgr:info
            ++++++
            HTTP/1.1 200 OK
            Server: Lusca/LUSCA r14809 patched: chudy r12.13
            Date: Sat, 30 Oct 2010 22:24:08 GMT
            Content-Type: text/plain
            Expires: Sat, 30 Oct 2010 22:24:08 GMT
            X-Cache: MISS from localhost
            Transfer-Encoding: chunked
            Via: 1.0 localhost:3128 (Lusca/LUSCA r14809 patched: chudy r12.13)
            Connection: close

            84b
            Squid Object Cache: Version LUSCA r14809 patched: chudy r12.13
            Start Time: Sat, 30 Oct 2010 22:15:23 GMT
            Current Time: Sat, 30 Oct 2010 22:24:08 GMT
            Connection information for squid:
            Number of clients accessing cache: 7
            Number of HTTP requests received: 802
            Number of ICP messages received: 0
            Number of ICP messages sent: 0
            Number of queued ICP replies: 0
            Request failure ratio: 0.00
            Average HTTP requests per minute since start: 91.7
            Average ICP messages per minute since start: 0.0
            Select loop called: 81004 times, 6.479 ms avg
            Cache information for squid:
            Request Hit Ratios: 5min: 36.5%, 60min: 29.5%
            Byte Hit Ratios: 5min: 52.2%, 60min: 47.2%
            Request Memory Hit Ratios: 5min: 1.8%, 60min: 0.9%
            Request Disk Hit Ratios: 5min: 93.8%, 60min: 97.0%
            Storage Swap size: 138860 KB
            Storage Mem size: 1948 KB
            Mean Object Size: 43.90 KB
            Requests given to unlinkd: 0
            Median Service Times (seconds)  5 min    60 min:
            HTTP Requests (All):  1.00114  0.52331
            Cache Misses:          0.80651  0.52331
            Cache Hits:            2.37608  0.44492
            Near Hits:            0.05331  0.05331
            Not-Modified Replies:  0.00091  0.00091
            DNS Lookups:          0.00000  0.00000
            ICP Queries:          0.00000  0.00000
            Resource usage for squid:
            UP Time: 524.801 seconds
            CPU Time: 4.353 seconds
            CPU Usage: 0.83%
            CPU Usage, 5 minute avg: 0.75%
            CPU Usage, 60 minute avg: 0.86%
            Process Data Segment Size via sbrk(): 0 KB
            Maximum Resident Size: 12852 KB
            Page faults with physical i/o: 7
            Memory accounted for:
            Total accounted:        2619 KB
            memPoolAlloc calls: 198782
            memPoolFree calls: 184201
            File descriptor usage for squid:
            Maximum number of file descriptors:  11095
            Largest file desc currently in use:    185
            Number of file desc currently in use:  54
            Files queued for open:                  0
            Available number of file descriptors: 11041
            Reserved number of file descriptors:  100
            Store Disk files open:                  1
            IO loop method:                    kqueue
            Internal Data Structures:
              3206 StoreEntries
              372 StoreEntries with MemObjects
              364 Hot Object Cache Items
              3163 on-disk objects

            1 Reply Last reply Reply Quote 0
            • A
              anto_DIGIT
              last edited by

              –> cache_dir aufs /var/squid/cache
              Utk proxy agresif, cache_dir jangan dicampur dng system.
              lambat ...

              1 Reply Last reply Reply Quote 0
              • S
                serangku
                last edited by

                salah satu cirinya adalah …

                Cache Hits:            2.37608  0.44492

                semua point2 diatas ketika sedang running jangan sampai menyentuh angka 1, kalau bisa max 0,5
                pake pf berapa, 123 atau 20

                saya perhatikan kl pake yg ver20, edun ... abis memori sama tuh lusca
                jadi jgn terlalu paksakan pake lusca kl memori cuma 1 gb atau kurang ...
                dan betul, baiknya di pisahkan cache di hadisk tersendiri ...

                ada yg pernah nanya gak ke dev pf ataupun lusca ttg pengalokasian memory supaya lbh efisien ...

                1 Reply Last reply Reply Quote 0
                • P
                  poscom
                  last edited by

                  @serangku:

                  salah satu cirinya adalah …

                  Cache Hits:            2.37608  0.44492

                  semua point2 diatas ketika sedang running jangan sampai menyentuh angka 1, kalau bisa max 0,5
                  pake pf berapa, 123 atau 20

                  saya perhatikan kl pake yg ver20, edun ... abis memori sama tuh lusca
                  jadi jgn terlalu paksakan pake lusca kl memori cuma 1 gb atau kurang ...
                  dan betul, baiknya di pisahkan cache di hadisk tersendiri ...

                  ada yg pernah nanya gak ke dev pf ataupun lusca ttg pengalokasian memory supaya lbh efisien ...

                  siiip trimakasih bpk anto dan bpk Desen seranku… spek yg diatas pke dualcore ram 2gb pake pf yg 123.

                  1 Reply Last reply Reply Quote 0
                  • P
                    poscom
                    last edited by

                    @anto_DIGIT:

                    –> cache_dir aufs /var/squid/cache
                    Utk proxy agresif, cache_dir jangan dicampur dng system.
                    lambat ...

                    yah.. itu raba2 saya asal kena. sekarang dah top om…. cuepet.....n agresif (hidup lusca !!!)
                    trimakasih juga post yg game online om..

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.