RF Inet: PROXY CACHE

Showing posts with label PROXY CACHE. Show all posts

Step by Step installation Proxy Mikrotik Cache

Winbox into the Router OS Hardware that you intend to install the webproxy onto, Click on IP \ Web proxy as shown below

Klik Gambar / iklan dibawah untukdapat update informasi tentang VPN dan settingan di blog ini, terima kasih .

Click on Settings as shown below

Fill in the following details as shown in the picture below
Port:-- select 3128 (standard Squid TCP Port) or 8080 (typically used Http proxy server TCP port) however any available port on the Router OS Appliance can be used (provided that the port is not already being used by another process)
Host name -- Select a host name that you desire (it is not crucial however it is useful for handing out a dns name such as proxy1.wirelessconnect.eu ... (Remember to update your DNS server with the Proxy IP address before issuing the name to clients
Transparent Proxy -- Tick this Box if the Proxy Server is to be Transparent, ie the user will not be required to configure their browser (note additional firewall configuration (redirect rule will need to be inserted to make this work see bottom of article for more details)
Cache Administrator-- Select an Administrative Email-address for receiving feedback on your Proxy Appliance Performance
Maximum Object Size -- Select a reasonable size (It should be large enough for most users uses ...e.g Service Pack 2 Download ... Patch CD ISO,) however it should not exceed the Size of the Caching Disk (We Recommend that the Maximum Object Cache be a tiny fraction of the total cache size i.e. Maximum Object Size should << 1% of Caching Disk)

Select the correct Drive (secondary-master) as the Cache Drive and then click Format as shown below (Note that Router OS wont Let you format the System Drive)

When prompted to confirm the formatting as shown below

While the cache drive is formatting , "formatting harddrive" will appear on the status bar on the bottom of the dialogue box as shown below

After the formatting process is complete the Cache will be created & "Creating Cache" will appear on the status bar at the bottom of the dialogue box as shown below.

Select the Maximum RAM Cache Size, this should be no greater than the result of the following formula -- (Total RAM on Proxy Appliance) - 64 MB Ram (For Router OS and Other Router OS Process) in this example one has an appliance with 1GB of Memory installed and one wishes to reserve 68 MB of RAM for system use therefore one should set the Maximum RAM Cache Size to 934MB as shown in the image below

Next Turn on the Proxy Server by clicking Enable as shown below

Once the Proxy Service is running the status bar will show "Running" on the bottom of the dialogue box as shown below

Proxy Running State will be displayed in the Status Bar

Menghapus cache squid secara manual/otomatis

ubay 9:07:00 PM 1 PROXY CACHE

KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

Jika anda ingin menghapus sebuah object pada cache squid proxy server, yang dapat anda lakukan adalah dengan cara manual dan otomatis menghapus cache squid proxy tersebut, berikut kita akan membahas cara dalam memaintenance mesin proxy kita, cara berikut dapat di jalankan manual atau otomatis dalam menghapus cache squid proxy anda.

Menghapus cache squid proxy secara manual

1. Hentikan/stop proses squid yang sedang berjalan

# /etc/init.d/squid stop

2. Membersihkan semua swap directory cache squid

# rm -rf /cache/*

3. Membuat/buil kembali directory swap cache squid

# squid -z

4. Menjalankan kembali squid proxy server

# /etc/init.d/squid start

Menghapus cache squid proxy secara otomatis
Jika anda ingin menghapus cache squid proxy secara otomatis berikut langkahnya :
1. Buat sebuat script yang akan digunakan untuk memeriksa dan menghapus cache squid proxy secara otomatis

# touch /root/clear-cache-squid.sh

# vim /root/clear-cache-squid.sh

Masukkan kode berikut, dimana dalam kode berikut pengaturan Hardisk squid proxy sebesar 80GB, direktory cache squid berada pada /cache dan script akan diletakkan pada /root

#!/bin/bash

#!/bin/bash

# direktori cache proxy

CACHEDIR=/cache

# kapasitas direktori cache proxy (80GB)

CACHEDIRSIZE=85899345920

ONEMB=1048576

ONEGB=1073741824

COUNTMB=`expr $CACHEDIRSIZE / $ONEMB`

COUNTGB=`expr $CACHEDIRSIZE / $ONEGB`

COUNTALOC=`expr $CACHEDIRSIZE / $ONEMB`

# mendapatkan besaran direktori cache saat ini

SIZE=`du -bc $CACHEDIR | grep total | awk '{print $1}'`

SIZEM=`du -bch $CACHEDIR | grep total | awk '{print $1}'`

# jika besaran direktori cache saat ini sama atau lebih besar dari 

# kapasitas direktori cache proxy maka hapus cache proxy

if [ $SIZE -ge $CACHEDIRSIZE ]

then

/usr/bin/clear

echo "=================================="

echo "=== Generate Clear Cache Squid ==="

echo "=================================="

echo "Cahce Squid Proxy      :" $CACHEDIR

echo "Jumlah cache tersimpan :" $SIZE Byte / $SIZEM

echo "Batas maximum cache    :" $CACHEDIRSIZE Byte / $COUNTALOC MB

echo " * Clear cache squid in proccess ..."

sleep 10

 /etc/init.d/squid stop        # stop service squid

 rm -fdR $CACHEDIR/*           # hapus cache proxy

 squid -z                      # membuat cache direktori

 /etc/init.d/squid start       # start service squid

/usr/bin/clear

echo "===================================="

echo "=== Clear Cache Squid Success !! ==="

echo "=== http://hanpeace.blogspot.com ==="

echo "===================================="

else

/usr/bin/clear

echo "================================================"

echo "=== Status Directory Cache Squid Proxy  [OK] ==="

echo "===     http://hanpeace.blogspot.com         ==="

echo "================================================"

echo "Cahce directory squid :" $SIZE Byte / $SIZEM 

echo "Alokasi cahce squid   :" $CACHEDIRSIZE Byte / $COUNTMB MB / $COUNTGB GB

fi

Beri hak akses agar script clear-cache-squid.sh dapat dijalankan

# chmod ug+x /root/clear-cache-squid.sh

Setelah file sudah anda buat sekarang saatnya untuk meletakkannya pada cronjob system anda, agar script dapat dijalankan secara otomatis setiap hari tepat tengah malam.
Edit cronjob

# crontab -e

Masukkan code cronjob berikut

0 0 * * * /root/clear-cache-squid.sh

Untuk lebih mudah mengkonversi besaran GB to KB atau sebaliknya anda dapat menggunakan layanan website berikut KB,MB,GB Converter, script clear cache squid yang dapat anda download disini.

Penghematan Ruang System Squid3

ubay 1:10:00 PM PROXY CACHE

KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

Nah,, kali ini langsung saja tanpa basa-basi , saya tuliskan beberapa pengalaman kecil soal belajar server proxy, sebelum saya mengerti memang selalu mengganjal dalam hati, dan timbul pertanyaan, tapi otak memang dongo ya lama juga terjawabnya.

dalam HDD system squid sendiri itu membutuh ruang simpan yang cukup, nah jika dalam running squid itu sendiri membutuhkan tempat penyimpan data (access.log, cache.log, store-id product) maka tidak ada salahnya kita pantau prosentase HDD priority pada system, jika terjadi full,

Maka masalahnya squid tidak akan running dan akhirnya koneksi terhambat, jalan keluarnya kita ubah data log atau product id tersebut ke /tmp, supaya setiap squid restrat maka squid akan kembali fresh karena data tersebut akan secara otomatis hilang / terhapus.
mohon klo ada kesalahan materi dibenarkan, hehehehe

okey langsung saja kita menuju sedikit perl Store-ID squid 3 seperti dibawah

$fn = "/var/log/squid/@cpn";
                unless (-e $fn) {
                        open FH,">".$fn ;
                        print FH "$vid\n";
                        close FH;
                }
        $out = $x ;

script yang saya kasih BOLD dan ITALIC kita ganti kearah /tmp ibaratnya kotak sampah, hehehe seperti dibawah L

$fn = "/tmp/@cpn";
                unless (-e $fn) {
                        open FH,">".$fn ;
                        print FH "$vid\n";
                        close FH;
                }
        $out = $x ;

Sharing kali ini, dapet referensi dari temen tetua yang sudah banyak membantu di group maupun personal learning, hehehe .
saya ucapkan thanks for Om SJW dan Dhe Lutfi Ngadimins, om Kuli jaringan, om HDD corp, mas zoiken, dan banyak lagi temen yg tergabung di MSI    :D

Tuturial Configurasi Squid 3xx

ubay 8:23:00 PM PROXY CACHE

facebook group : https://www.facebook.com/groups/Mikrotik.Squid.Indonesia
================================================================================
(TELITI DULU SEBELUM DI COPAS MENTAH MENTAH)

1.siapkan proxy yang sudah di install ubuntu 12.04
untuk tut install ubuntu sy skipp dan tentunya
sudah tau..proses install ubuntu sebagai proxy..

2.siapkan kopi panas segelas serta rokok kalau perokok :D
buat teman kerja sj biar gk jenuh...

3.winscp+puty+mikrotik

sesudah siap dan jadi instal ubuntunya ganti dulu seperti di bawah ini
EDIT DI FOLDER /ETC/APT/SOURCES.LIST DULU
ATAU DENGAN KETIK DI TERMINAL
nano /etc/apt/sources.list hapus semua dan copas pilih lain web repositorinya
tekan ctrl o enter ctrl x done

Ubuntu Repository 12.04 LTS di KLJ
deb http://repo.linuxjambi.org/ precise main restricted universe multiverse

Ubuntu Repository 12.04 LTS di Kambing
deb http://kambing.ui.ac.id/ubuntu/ precise-proposed main restricted universe multiverse
deb http://kambing.ui.ac.id/ubuntu/ precise-security main restricted universe multiverse
deb http://kambing.ui.ac.id/ubuntu/ precise-updates main restricted universe multiverse
deb http://kambing.ui.ac.id/ubuntu/ precise main restricted universe multiverse

Ubuntu Repository 12.04 LTS di UKDW
deb http://repo.ukdw.ac.id/ubuntu precise main restricted universe multiverse
deb http://repo.ukdw.ac.id/ubuntu precise-updates main restricted universe multiverse
deb http://repo.ukdw.ac.id/ubuntu precise-security main restricted universe multiverse
deb http://repo.ukdw.ac.id/ubuntu precise-backports main restricted universe multiverse
deb http://repo.ukdw.ac.id/ubuntu precise-proposed main restricted universe multiverse

Ubuntu Repository 12.04 LTS di Komo
deb http://komo.padinet.com/ubuntu/ precise-proposed main restricted universe multiverse
deb http://komo.padinet.com/ubuntu/ precise-security main restricted universe multiverse
deb http://komo.padinet.com/ubuntu/ precise-updates main restricted universe multiverse
deb http://komo.padinet.com/ubuntu/ precise main restricted universe multiverse

Ubuntu Repository 12.04 LTS di ITB
deb ftp://ftp.itb.ac.id/pub/ubuntu/ precise-proposed main restricted universe multiverse
deb ftp://ftp.itb.ac.id/pub/ubuntu/ precise-security main restricted universe multiverse
deb ftp://ftp.itb.ac.id/pub/ubuntu/ precise-updates main restricted universe multiverse
deb ftp://ftp.itb.ac.id/pub/ubuntu/ precise main restricted universe multiverse

setelah selesai ganti sources.list
install paket update yg ada di bawah ini

apt-get update
apt-get install devscripts
apt-get install build-essential
apt-get install openssl
apt-get install libssl-dev
apt-get install fakeroot
apt-get install libcppunit-dev
apt-get install libsasl2-dev
apt-get install cdbs
apt-get install ccze
apt-get install libfile-readbackwards-perl
apt-get install libcap2
apt-get install libcap-dev
apt-get install libcap2-dev
apt-get install sysv-rc-conf

setelah selesai instal paket update lanjut ke bawah

1.buka putty di terminal dengan mengetik sebagai berikut...
mkdir squid3 [enter]
cd /squid3 [enter
file squid 3.4.2 yg sdh sy download bisa di copas di folder di buat tadi....file sudah sy sertakan jg

ataupun bisa melalu web aslinya langsung seperti di bawah ini
download file squid 3.4.2 yg mana sudah sy lampirkan link nya...
####copas di bawah ini ke terminal puty######
wget http://www.squid-cache.org/Versions/v3/3.4/squid-3.4.2-20131231-r13067.tar.gz

2.setelah proses downlaod selesai..
ketik di terminal sebagai berikut..
tar -xzvf squid-3.4.2-20131231-r13067.tar.gz [enter]

3.setelah proses extract selesai ketik lagi
cd squid-3.4.2-20131231-r13067 [enter]

4.setelah masuk directory squid-3.4.2-20131231-r13067
masukkan compile config di bawah ini copas semaunya ke terminal ....compile sy tandai garis dan
garis jgn di ikut sertakan juga.....

5.compile config bawah ini dari bang Syaifudin Jw silahkan di pakai...buat compile squid 3
======================================================================================================================
./configure --prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc --sysconfdir=/etc/squid \
--localstatedir=/var --includedir=/usr/include --datadir=/usr/share/squid --infodir=/usr/share/info --mandir=/usr/share/man --srcdir=. \
--disable-dependency-tracking --disable-strict-error-checking --enable-storeio=ufs,aufs,diskd --enable-removal-policies=lru,heap \
--enable-icmp --disable-wccp --disable-wccpv2 --enable-kill-parent-hack --disable-snmp --enable-cachemgr-hostname=proxy \
--enable-ssl --enable-cache-digests --disable-select --enable-http-violations --enable-linux-netfilter \
--enable-follow-x-forwarded-for --disable-ident-lookups --enable-ssl-crtd --disable-auth-basic --enable-x-accelerator-vary \
--enable-zph-qos --with-default-user=proxy --with-logdir=/var/log/squid --with-pidfile=/var/run/squid.pid \
--with-swapdir=/var/spool/squid --with-aufs-threads=100 --with-dl --with-large-files --with-filedescriptors=65536 \
CFLAGS="-march=native -O2 -pipe"CXXFLAGS="${CFLAGS}"--enable-ltdl-convenience
=======================================================================================================================
6.setelah proses compile selesai yg di atas kemudian ketik
make [tunggu dulu sampai selesai,setelah selesai] ketik lagi
make install

7.kemudian pasang squid.conf+store-id.pl yg sudah sy sertakan
copas ke etc/squid....terserah mau di pakai ap tidak...

8 untuk file yg ada di etc/init.d....ganti yg sudah sy sertakan
copas ke /etc/init.d/......
plus file squid berada di usr/sbin....ganti yg sdh sy sertakan

9.untuk squid.conf sesuaikan dengan keaadaan memory ram serta cache dir hd dan tuning tuning lainnya
setelah semua sesuai..baru buat certificate dulu....
usahakan kalau buat certificate kasih nama seperti ktp
biar mudah kalau kita mau menghapusnya...di mozila maupun di google crome..
KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

10.buat cert SSL Bump

cd /etc/squid
mkdir ssl_cert
cd ssl_cert
openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout myCA.pem -out myCA.pem
openssl x509 -in myCA.pem -outform DER -out myCA.der
cd
mkdir /var/squid
cd /var/squid
mkdir ssl_db
cd
chown -R nobody /var/squid/ssl_db
/usr/lib/squid/ssl_crtd -c -s /var/squid/ssl_db/certs
chown -R proxy:proxy /var/squid/ssl_db

NB: CERTIFICATE YG DIBUAT TADI NANTI DI IMPORT KE MOZILA/CROME

11.setelah membuat certificate selesai tinggal semua di beri hak permission
buat jaga jaga sj :D
chown proxy:proxy /etc/squid/squid.conf
chown proxy:proxy /etc/squid/store-id.pl
chown proxy:proxy /etc/squid/ssl_cert/myCA.der
chown proxy:proxy /etc/squid/ssl_cert/myCA.pem

chmod 777 /etc/squid/squid.conf
chmod 777 /etc/squid/store-id.pl
chmod 777 /etc/squid/ssl_cert
chmod 777 /etc/squid/ssl_cert/myCA.der
chmod 777 /etc/squid/ssl_cert/myCA.pem
chmod 777 /etc/init.d/squid
chmod 777 /usr/sbin/squid

12.mumbuat cache dir swap
squid -z atau squid -f /etc/squid/squid.conf -z

13.setelah semuanya selesai..cek squid proxy dgn mengetik..
squid -k parse...[bila terjadi ada error teliti notica eerror tersebut]
squid -k reconfigure lalu lanjut ke bawah

14.kemudian...
squid -NDd1 atau squid -D
setelah berjalan lancar dan sukses dan tidak ada yg error sm sekali lanjut ke bawah

tambah iptable berada di /etc/rc.local (teliti dl sebelum di copas)
=========================================
modprobe xt_TPROXY
modprobe xt_socket
modprobe nf_tproxy_core
modprobe xt_mark
modprobe nf_nat
modprobe nf_conntrack_ipv4
modprobe nf_conntrack
modprobe nf_defrag_ipv4
modprobe ipt_REDIRECT
modprobe iptable_nat

iptables -t mangle -F
iptables -t mangle -X

iptables -t mangle -N DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
iptables -t mangle -A INPUT -j ACCEPT
#######Ganti XXX dengan ip si proxy##########
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A PREROUTING ! -d XXX.XXX.XXX.X/24 -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3129
iptables -t mangle -A PREROUTING ! -d XXX.XXX.XXX.X/24 -p tcp --dport 443 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3127

/sbin/ip rule add fwmark 1 lookup 100
/sbin/ip route add local 0.0.0.0/0 dev lo table 100

echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter
echo 1 > /proc/sys/net/ipv4/ip_forward
====================================================================================================================
restart proxy

bawah ini di tambahkan di mikrotik

15. script tproxy di mikrotik
ganti xxx dgn ip proxy

Mangle dan Routing TPROXY
=========================
/ip firewall mangle
add action=mark-routing chain=prerouting comment="TPROXY" disabled=no dst-port=80,443 in-interface=local new-routing-mark=proxy passthrough=no
protocol=tcp dst-address=!xxx.xxx.xxx.x
add action=mark-connection chain=prerouting disabled=no dst-port=80,443 in-interface=proxy new-connection-mark=tproxy passthrough=yes protocol=tcp
src-address=!xxx.xxx.xxx.x
add action=mark-routing chain=prerouting connection-mark=tproxy disabled=yes in-interface=!proxy new-routing-mark=tproxy passthrough=no

/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=xxx.xxx.xxx.xxx routing-mark=tproxy scope=30 target-scope=10
=====================================================================================================================
terakhir cek log access bekerja atau tidaknya sambil membuka web..

tail -f /var/log/squid/access.log | grep HIT | ccze
tail -f /var/log/squid/access.log | grep TCP_HIT
tail -f /var/log/squid/access.log | grep HIT
tail -f /var/log/squid/access.log | ccze
tail -f /var/log/squid/access.log | grep HIT

jika sudah ada tanda tanda log access berjalan...
saya ucapkan selamat dan sukses....

NB :
sedikit tambahan supaya youtube setelah di putar ke 2 x full bar atau no range..
mozila bisa makai ver 18.0.2 serta addon mozila smart video atau youtube center atau magic action youtube
serta addon ads block yooutube

Script Youtube Store.pl Squid 2.7

ubay 9:54:00 AM Linux , PROXY CACHE , SQUID

Kalo ngomongin si yusuf kadang bikin menarik juga, tapi klo si yusuf lagi kram dan kesemutan bikin tegang juga, usut punya usut harus oprek-oprek script yang buat cache biar bisa hit lagi.

Nah, ini ada sedikit script tambahan yang mungkin bisa sobat-sobat tambahkan di storeurl.pl sobat, biar si yusuf gak galau lagi.

} elsif ($X[1] =~ m/^http(|s)\:\/\/.*youtube.*(ptracking|stream_204|player_204|gen_204).*(video_id|docid|v)\=([^\&\s]*).*/){
        $vid = $4 ;
        @cpn = m/[&?]cpn\=([^\&\s]*)/;
        if (defined($vid )) {
                $fn = "/var/log/squid/@cpn";
                unless (-e $fn) {
                        open FH,">".$fn ;
                        print FH "$vid\n";
                        close FH;
                }
    }
        print $x . $X[1] . "\n";
KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

} elsif ($X[1] =~ m/^http:\/\/.*(youtube|googlevideo).*videoplayback.*/){
        @itag = m/[&?](itag=[\d]*)/;
        @ids = m/[&?]id\=([^\&\s]*)/;
        @mime = m/[&?](mime\=[^\&\s]*)/;
        @cpn = m/[&?]cpn\=([^\&\s]*)/;
        if (defined($cpn[0])) {
            $fn = "/var/log/squid/@cpn";
            if (-e $fn) {
                open FH,"<".$fn ;
                $id = <FH>;
                chomp $id ;
                close FH ;
            } else {
                $id = $ids[0] ;
            }
        } else {
          $id = $ids[0] ;
        }
        @range = m/[&?](range=[^\&\s]*)/;
        print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/id=" . $id . "&@range@mime\n";

Script diatas sudah tested dan hit, semoga bermanfaat dan menjadikan semangat kita untuk semakin giat menimba ilmu. thanks ...

Installasi Graph Monitoring Squid

ubay 9:57:00 PM Linux , PROXY CACHE , SQUID

Install The Package

apt-get install libgd-gd2-perl -y

Download The File
cd /tmp
wget http://nchc.dl.sourceforge.net/project/squid-graph/squid-graph/3.2/squid-graph-3.2.tar.gz
KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

Extract and Copied to Directory of init.d
tar xzvf squid-graph-3.2.tar.gz -C /etc/init.d/

Change Mode
chmod +x /etc/init.d/squid-graph/*

cd /var/www
mkdir squid-graph
cd /etc/init.d/squid-graph
./squid-graph --tcp-only -n -o=/var/www/squid-graph/ --title="proxy" < /var/log/squid/access.log

Make a Scheduler
crontab -e

And Added The Rules Like This One
1 * * * * /etc/init.d/squid-graph/squid-graph --tcp-only -n -o=/var/www/squid-graph/

Finally
You Can Open on Your URL Browser with http://IP-Proxy/squid-graph

Installasi squid 2.7 STABLE9 di Ubuntu Server 12.04

ubay 9:49:00 PM Linux , PROXY CACHE , SQUID

Asumsi router pada ubuntu server berjalan dengan baik

buka Putty kemudian masuk sebagai root
kemudian ketikan perintah-perintah dibawah ini atau copas aja biar ga ribet

KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

install paket yg di butuhkan
sudo apt-get update
sudo apt-get install gcc
sudo apt-get install ccze
sudo apt-get install iptraf
sudo apt-get install build-essential
sudo apt-get install sharutils
sudo apt-get install libzip-dev
sudo apt-get install automake1.9

wget https://dl.dropbox.com/s/7tkdooexrrbr596/squid-2.7.STABLE9.tar.gz
tar -zxvf squid-2.7.STABLE9.tar.gz

cd squid-2.7.STABLE9

kemudian compile, contoh menggunakan proc intel pentium4

CHOST="i686-pc-linux-gnu" CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"

./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --datadir=/etc/squid --libexecdir=/usr/libexec --sysconfdir=/etc/squid --localstatedir=/var/spool/squid --enable-async-io --with-pthreads --enable-storeio=aufs,coss,null --enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=lru,heap --enable-snmp --enable-delay-pools --enable-htcp --enable-cache-digests --enable-referer-log --enable-useragent-log --enable-follow-x-forwarded-for --with-large-files --enable-large-cache-files --enable-truncate --disable-ident-lookups --with-maxfd=65536

hapus file squid.conf dan penambahan file storeurl.pl
rm /etc/squid/squid.conf
cd /etc/squid
wget https://dl.dropbox.com/s/s9k2ssw3osp367j/squid.conf
wget https://dl.dropbox.com/s/ws5nd3lnnlr9j3w/storeurl.pl
catatan : sesuaikan direktori cache_dir dan ip local yg berada di squid.conf sesuai dengan kebutuhan anda

buat direktori & file log
mkdir /var/log/squid
touch /var/log/squid/access.log
touch /var/log/squid/store.log
touch /var/log/squid/cache.log

berikan hak akses pada dir cache, file log & storeurl.pl
chown proxy:proxy /cache
chown proxy:proxy /etc/squid/storeurl.pl
chown proxy:proxy /var/log/squid/access.log
chown proxy:proxy /var/log/squid/store.log
chown proxy:proxy /var/log/squid/cache.log
chmod +x /cache
chmod +x /etc/squid/storeurl.pl
chmod +x /var/log/squid/access.log
chmod +x /var/log/squid/store.log
chmod +x /var/log/squid/cache.log

agar squid bisa menggunakan perintah service (start|restart|stop)
cd /etc/init.d
wget https://dl.dropbox.com/s/f8z2c68keniu3ii/squid
chown proxy:proxy /etc/init.d/squid
chmod +x /etc/init.d/squid

pengalihan port 80 ke port default squid 3128
nano /etc/rc.local
tambahkan baris di bawah sebelum baris exit 0 yg berada di baris paling bawah
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128
catatan : jika squid tidak auto start up, bisa menambahkan baris
"squid start" di bawah-nya tanpa kutip

cek konfigurasi pada squid.conf
squid -k parse
jika tidak ada pemberitahuan lanjutkan membuat dir swap cache
squid -z
jika tidak ada pemberitahuan cek + jalankan squid
squid -d1

perintah-perintah pada squid
squid -k shutdown atau service squid stop    "stop squid"
squid -d1 atau service squid start            "start squid"
tail -f /var/log/squid/access.log|ccze        "cek log akses"
tail -f /var/log/squid/cache.log|ccze        "cek log cache"
tail -f /var/log/squid/store.log|ccze        "cek log store"
tail -f /var/log/squid/access.log|grep HIT "cek HIT log saja"

untuk catatan download tutor installasi squid 2.7 STABLE9 manual yg telah saya buat di sini

ok sampai disini mudah-mudahan bisa membantu

Install Squid 3 Tproxy

ubay 9:40:00 PM Linux , PROXY CACHE , SQUID

Sumber : https://www.facebook.com/belajar.jaringan

konfigurasi Jaringan
====================

                        port ethernet no.3 ------- SQUID
Klien ---- Switch ---- port ethernet no.2
                    port ethernet no.1-------Modem
KLIK iklan dibawah untuk langganan Materi Jaringan di web ini !!

Konfigurasi di MikroTik
=======================

#copy paste command dibawah ini menggunakan menu New Terminal di Winbox#
--------------------------------------------------------------------------
kasi nama interface dan IP address
----------------------------------
/interface ethernet
set 2 name=ether3-proxy

/ip address
add address=192.168.5.1/24 interface=ether3-proxy

Instalasi pada PC Proxy
=======================

--Instalasi Web Proxy di Ubuntu Server 12.04 part 1 - Instalasi Ubuntu Server 12.04---

Hardware (silahkan disesuaikan)
========
- Proc Core 2 Duo
- HDD 40 GB
- RAM 1 GB
- CD/DVD RW

Software
========
- Download Ubuntu Server ver 12.04 (iso)
- Download & Install Putty Installer
- Download & Install WinSCP Installer

Persiapan
=========
- Install NIAT terlebih dahulu :-)
- Burn iso file ke CD /DVD
- Set BIOS PC untuk First Boot melalui CD/DVD

Instalasi Ubuntu Server ver 12.04 Lts
=====================================

Silahkan ikuti petunjuk instalasi dibawah ini. Jumlah cache dan besaran cache sila disesuaikan

---- Configure Language, Location, locales ----
- English [ Tekan Enter ]
- Install Ubuntu Server [ Tekan Enter ]
- English [ Tekan Enter ]
- Other [ Tekan Enter ]
- Asia [ Tekan Enter ]
- Indonesia [ Tekan Enter ]
- United States [ Tekan Enter ]

----Configure the keyboard----
- No [ Tekan Enter ]
- English (US) [ Tekan Enter ]
- English (US) [ Tekan Enter ]

---- Configure the network ----
- Continue [ Tekan Enter ]
- Configure Network Manually [ Tekan Enter ]
- IP Address : 192.168.5.2 [ Tekan Enter ]
- Netmask : 255.255.255.0 [ Tekan Enter ]
- Gateway : 192.168.5.1 [ Tekan Enter ]
- Name Server address : 192.168.5.1 [ Tekan Enter ]
- Hostname : BelajarJaringan [ Tekan Enter ]
- Domain name : [ Tekan Enter ]
- Full name for new user : Belajar Jaringan [ Tekan Enter ]
- username for your account : belajar [ Tekan Enter ]
- choose a password for the new user : passwordku [ Tekan Enter ]
- Re-enter password to verify : passwordku [ Tekan Enter ]
- Encrypt your home directory? : No [ Tekan Enter ]

---- Configure the clock ----
- Jakarta

---- Partition disk ----
- Manual
- SCSI1 (0,0,0) (sda) - 42.9 GB [ Tekan Enter ]
- Create New Partition table on this device ? Yes [ Tekan Enter ]

- pri/log 42.9 GB FREE SPACE [ Tekan Enter ]
- Create a New Partition
- New Partition size : 1 GB [ Tekan Enter ]
- Type for the new partition : Primary [ Tekan Enter ]
- Location for the new partition : Beginning [ Tekan Enter ]
- Pilih Mount point [ Tekan Enter ]
- Pilih /boot - static files of the boot loader [ Tekan Enter ]
- Pilih Mount options [ Tekan Enter ]
- Pilih Noatime [Tekan Tombol Spacebar] [ Tekan Enter ]
- Pilih Bootable flag [ Tekan Enter ]
- Pilih Done setting up the partition [ Tekan Enter ]

- pri/log 41.9 GB FREE SPACE [ Tekan Enter ]
- Create a New Partition
- New Partition size : 2 GB [ Tekan Enter ]
- Type for the new partition : Primary [ Tekan Enter ]
- Location for the new partition : Beginning [ Tekan Enter ]
- Pilih Use [ Tekan Enter ]
- Pilih swap area [ Tekan Enter ]
- Pilih Done setting up the partition [ Tekan Enter ]

- pri/log 39.9 GB FREE SPACE [ Tekan Enter ]
- Create a New Partition
- New Partition size : 19.9 GB [ Tekan Enter ] ------------------> Saya sisakan 20 GB untuk cache dir
- Type for the new partition : Primary [ Tekan Enter ]
- Location for the new partition : Beginning [ Tekan Enter ]
- Pilih Mount point [ Tekan Enter ]
- Pilih / - the root file system [ Tekan Enter ]
- Pilih Mount options [ Tekan Enter ]
- Pilih Noatime [Tekan Tombol Spacebar] [ Tekan Enter ]
- Pilih Done setting up the partition [ Tekan Enter ]

- pri/log 20 GB FREE SPACE [ Tekan Enter ]
- Create a New Partition
- New Partition size : 20 GB [ Tekan Enter ]
- Type for the new partition : Logical [ Tekan Enter ]
- Location for the new partition : Beginning [ Tekan Enter ]
- Pilih Use [ Tekan Enter ]
- Pilih ReiserFS journaling file system
- Pilih Mount point [ Tekan Enter ]
- Pilih Enter manually [ Tekan Enter ]
- Hapus /Home ganti menjadi /cache1 [ Tekan Enter ]
- Pilih Mount options [ Tekan Enter ]
- Pilih Noatime [Tekan Tombol Spacebar], Pilih Notail [Tekan Tombol Spacebar] [ Tekan Enter ]
- Pilih Done setting up the partition [ Tekan Enter ]

- Pilih Finish partitioning and write changes to disk [ Tekan Enter ]
- Write the changes to disks : Yes [ Tekan Enter ]

--- Configure the package manager ----
- HTTP proxy information (blank for none) : [ Tekan Enter ]

--- Configure tasksel ---
- How do you want to manage upgrade on this system? : No automatic updates [ Tekan Enter ]

--- Software selection ---
- Pilih OpenSSH Server [Tekan Tombol Spacebar] [ Tekan Enter ]

--- Install the GRUB boot loader on a hard disk---
- Install the GRUB boot loader to the master boot record? : Yes [ Tekan Enter ]

--- [!!] Finish the installation ---
- Pilih Continue [ Tekan Enter ]
- keluarkan CD Installer

Mengganti Password root
=======================
1. Login ke Proxy melalui WinSCP/ Putty dengan login yg Anda buat sewaktu install
2. ketik perintah dibawah ini
sudo su [tekan ENTER]
(masukkan password user yang anda buat sewaktu install)
3. ketik lagi
passwd root [tekan ENTER]
ENTER new UNIX password : (masukkan password baru untuk root)
Retype new UNIX password : (masukkan kembali password yang sama)

pastikan muncul tulisan : passwd : password updated successfully

Instalasi Squid 3 HEAD
======================
Petunjuk:
--------------
- Login ke Program WinSCP menggunakan user root
- Copy Paste Perintah-Perintah dibawah ini melalui Putty (Copy lalu Klik kanan pada putty tekan Enter) :

apt-get update
apt-get install devscripts build-essential openssl libssl-dev fakeroot libcppunit-dev libsasl2-dev cdbs ccze libfile-readbackwards-perl libcap2 libcap-dev libcap2-dev
apt-get install sysv-rc-conf

wget http://www.squid-cache.org/Versions/v3/3.4/squid-3.4.0.2.tar.gz
tar xzvf squid-3.4.0.2.tar.gz

cd squid-3.4.0.2

./configure --prefix=/usr \
--bindir=/usr/bin --sbindir=/usr/sbin \
--libexecdir=/usr/lib/squid --sysconfdir=/etc/squid \
--localstatedir=/var --libdir=/usr/lib --includedir=/usr/include --datadir=/usr/share/squid \
--infodir=/usr/share/info --mandir=/usr/share/man \
--disable-dependency-tracking --enable-storeio=ufs,aufs,diskd --enable-removal-policies=lru,heap --enable-icmp --enable-esi --enable-icap-client \
--disable-wccp --disable-wccpv2 \
--enable-kill-parent-hack --enable-cache-digests --enable-follow-x-forwarded-for --enable-x-accelerator-vary --enable-zph-qos \
--with-default-user=proxy --with-logdir=/var/log/squid --with-pidfile=/var/run/squid.pid --with-large-files --enable-ltdl-convenience --with-filedescriptors=65536 \
--enable-ssl --enable-ssl-crtd --disable-auth --build=i486-linux-gnu build_alias=i486-linux-gnu
make && make install

chown -R proxy:proxy /cache
chown -R proxy:proxy /var/log/squid

## Copy 2 file berikut menggunakan Program WinSCP
=================================================
- File "squid.conf" (sila download di http://pastebin.com/PKZkLfpD) yang telah diubah dan disesuaikan dengan kebutuhan ke folder: /etc/squid/
- File "squid" (sila download di http://pastebin.com/8xLYXZQC)ke folder: /etc/init.d/

ijin execute squid
==========================
chmod +x /etc/init.d/squid

Setup SSL Bump
==============
cd /etc/squid
mkdir ssl_cert
cd ssl_cert
openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout myCA.pem -out myCA.pem
openssl x509 -in myCA.pem -outform DER -out myCA.der
cd
mkdir /var/squid
cd /var/squid
mkdir ssl_db
cd
chown -R nobody /var/squid/ssl_db/
/usr/lib/squid/ssl_crtd -c -s /var/squid/ssl_db/certs
chown -R proxy:proxy /var/squid/ssl_db/

swap dir
========
squid -z

Copy Paste Perintah-Perintah dibawah ini pada file /etc/rc.local
================================================================
modprobe xt_TPROXY
modprobe xt_socket
modprobe nf_tproxy_core
modprobe xt_mark
modprobe nf_nat
modprobe nf_conntrack_ipv4
modprobe nf_conntrack
modprobe nf_defrag_ipv4
modprobe ipt_REDIRECT
modprobe iptable_nat

iptables -t mangle -F
iptables -t mangle -X

iptables -t mangle -N DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
iptables -t mangle -A INPUT -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A PREROUTING ! -d 192.168.5.2/32 -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3129
iptables -t mangle -A PREROUTING ! -d 192.168.5.2/32 -p tcp --dport 443 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3127

/sbin/ip rule add fwmark 1 lookup 100
/sbin/ip route add local 0.0.0.0/0 dev lo table 100

echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter
echo 1 > /proc/sys/net/ipv4/ip_forward
exit 0

Mangle dan Routing TPROXY
-------------------------
/ip firewall mangle
add action=mark-routing chain=prerouting comment="TPROXY ROUTING" disabled=no dst-port=80,443 in-interface=ether2-local new-routing-mark=tproxy_rm passthrough=no \
    protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-port=80,443 in-interface=ether3-proxy new-connection-mark=tproxy_cm passthrough=yes protocol=tcp \
    src-address=!192.168.5.2
add action=mark-routing chain=prerouting connection-mark=tproxy_cm disabled=yes in-interface=!ether3-proxy new-routing-mark=tproxy_rm passthrough=no

/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.5.2 routing-mark=tproxy_rm scope=30 target-scope=10