关于squid配置文件的讨论。希望厉害能支持一下。

由 lanmaster 在 09-17-2003 16:58 发表:

关于squid配置文件的讨论。希望厉害能支持一下。

本人最近配置了一个squid服务,现在已经可以使用。

但在配置当中也遇到不少的问题。这次发现来大家讨论一下。希望大家能多多的参预。我在这儿先谢谢各位!

我的问题是这样的:下面这段内容的意思有谁能给解释一下。

TAG: https_port

Note: This option is only available if Squid is rebuilt with the

--enable-ssl option

Usage: [ip:]port cert=certificate.pem [key=key.pem] [options...]

The socket address where Squid will listen for HTTPS client

requests.

This is really only useful for situations where you are running

squid in accelerator mode and you want to do the SSL work at the

accelerator level.

You may specify multiple socket addresses on multiple lines,

each with their own SSL certificate and/or options.

Options:

cert= Path to SSL certificate (PEM format)

key= Path to SSL private key file (PEM format)

if not specified, the certificate file is

assumed to be a combined certificate and

key file

version= The version of SSL/TLS supported

1 automatic (default)

2 SSLv2 only

3 SSLv3 only

4 TLSv1 only

cipher= Colon separated list of supported ciphers

options= Varions SSL engine options. The most important

being:

NO_SSLv2 Disallow the use of SSLv2

NO_SSLv3 Disallow the use of SSLv3

NO_TLSv1 Disallow the use of TLSv1

See src/ssl_support.c or OpenSSL documentation

for a more complete list.

#Default:

none


成长中的菜鸟!

E-Mail:qcy_[email protected]

QQ :7118899


由 wallace888 在 09-17-2003 17:02 发表:


up up up up 顶一下!希望大家都来参与。解答!!!!!!!!!


由 Glue 在 09-17-2003 17:11 发表:


squid 有两种功能 Cache 和 Accelerator

Cache 是放在客户端,也就是你有一批用户要上网。

Accelerator 是放在服务器端,是你有一个web服务器希望通过squid加速,外面是通过squid服务器来访问你的web。

你提的这段就是关于加速的,是说如果你要加速的web服务器要支持https,就要把服务器的Certificate放在squid-加速器上。


-_-


由 lanmaster 在 09-17-2003 17:13 发表:


下面这些配置是就可以使你的squid运行了。

httpd_accel_host virtual

http_port 3128

httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

visible_hostname qcy

acl mynet src 192.168.0.0/24

http_access allow mynet

如果还想实现一些其它的功能,我们可以一起讨论。


成长中的菜鸟!

E-Mail:qcy_[email protected]

QQ :7118899


由 lanmaster 在 09-17-2003 17:15 发表:


> quote: > > * * * > > 最初由 Glue 发表
>
> **squid 有两种功能 Cache 和 Accelerator
>
> Cache 是放在客户端,也就是你有一批用户要上网。
>
> Accelerator 是放在服务器端,是你有一个web服务器希望通过squid加速,外面是通过squid服务器来访问你的web。
>
>
>
> 你提的这段就是关于加速的,是说如果你要加速的web服务器要支持https,就要把服务器的Certificate放在squid-加速器上。 ** > > * * *

好的!谢谢 Glue 我还有很多的问题希望你能帮着解答一下。


成长中的菜鸟!

E-Mail:qcy_[email protected]

QQ :7118899


由 lanmaster 在 09-17-2003 17:17 发表:


这一段又怎么解释呢

TAG: mcast_groups

This tag specifies a list of multicast groups which your server

should join to receive multicasted ICP queries.

NOTE! Be very careful what you put here! Be sure you

understand the difference between an ICP query and an ICP

reply. This option is to be set only if you want to RECEIVE

multicast queries. Do NOT set this option to SEND multicast

ICP (use cache_peer for that). ICP replies are always sent via

unicast, so this option does not affect whether or not you will

receive replies from multicast group members.

You must be very careful to NOT use a

Published At
Categories with 服务器类
Tagged with
comments powered by Disqus