Squid反向代理
代理服务器的保存缓存提供给用户访问服务器资源。
正向代理是代理有用户访问网络的。
49-1
1.cache server 的配置
面向用户的端口是 80
[root@server ~]# vim /etc/squid/squid.conf
637 http_access allow all
919 http_port 10.106.42.171:80 vhost
1181 # # hostname type port port options
1182 # # -------------------- -------- ----- ----- -----------
1185 cache_peer 192.168.2.2 parent 80 0 originserver
--指定父cache server
初始化缓存
--手工初始化缓存 或者直接启动第一次也回初始化缓存
[root@server ~]# squid --help
squid: invalid option -- -
Usage: squid [-hvzCDFNRYX] [-d level] [-s | -l facility] [-f config-file] [-u port] [-k signal]
-d level Write debugging to stderr also.
-f file Use given config-file instead of
/etc/squid/squid.conf
-h Print help message.
-k reconfigure|rotate|shutdown|interrupt|kill|debug|check|parse
Parse configuration file, then send signal to
running copy (except -k parse) and exit.
-s | -l facility
Enable logging to syslog.
-u port Specify ICP port number (default: 3130), disable with 0.
-v Print version.
-z Create swap directories
-C Do not catch fatal signals.
-D Disable initial DNS tests.
-F Don't serve any requests until store is rebuilt.
-N No daemon mode.
-R Do not set REUSEADDR on port.
-S Double-check swap during rebuild.
-X Force full debugging.
-Y Only return UDP_HIT or UDP_MISS_NOFETCH during fast reload.
[root@server ~]# squid -z
2011/10/10 17:43:42| Squid is already running! Process ID 4374
[root@server ~]#
[root@server ~]# service squid restart
--不需要开启数据包转发的功能
2.web server 的配置
[root@web Server]# ifconfig eth0 192.168.2.2
[root@web Server]#
[root@web ~]# mount /dev/cdrom /mnt/cdrom
mount: block device /dev/cdrom is write-protected, mounting read-only
[root@web ~]# cd /mnt/cdrom/Server/
[root@web Server]# rpm -ivh httpd-
httpd-2.2.3-22.el5.i386.rpm httpd-manual-2.2.3-22.el5.i386.rpm
httpd-devel-2.2.3-22.el5.i386.rpm
[root@web Server]# rpm -ivh httpd-2.2.3-22.el5.i386.rpm
warning: httpd-2.2.3-22.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186
Preparing... ########################################### [100%]
1:httpd ########################################### [100%] [root@web Server]#
[root@web Server]# vim /var/www/html/index.html
squid cache server test web!
[root@web Server]# service httpd start
Starting httpd: httpd: apr_sockaddr_info_get() failed for client
httpd: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[ OK ]
[root@web Server]# links 127.0.0.1
http://127.0.0.1/
squid cache server test web!
3.压力测试
[root@client ~]# ll
total 84
drwxr-xr-x 2 root root 4096 Oct 5 11:11 Desktop
-rw------- 1 root root 1495 Sep 15 17:49 anaconda-ks.cfg
-rw-r--r-- 1 root root 17033 Oct 11 2011 http_load-12mar2006.tar.gz
-rw-r--r-- 1 root root 38101 Sep 15 17:49 install.log
-rw-r--r-- 1 root root 3681 Sep 15 17:48 install.log.syslog
[root@client ~]# tar -zxvf http_load-12mar2006.tar.gz
http_load-12mar2006/
http_load-12mar2006/Makefile
http_load-12mar2006/README
http_load-12mar2006/http_load.1
http_load-12mar2006/http_load.c
http_load-12mar2006/make_test_files
http_load-12mar2006/port.h
http_load-12mar2006/timers.c
http_load-12mar2006/timers.h
http_load-12mar2006/version.h
http_load-12mar2006/FILES
[root@client ~]# cd http_load-12mar2006
[root@client http_load-12mar2006]# ll
total 92
-r--r--r-- 1 1544 80 97 Jul 15 2001 FILES
-rw-r--r-- 1 1544 80 1640 Jan 4 2002 Makefile
-rw-r--r-- 1 1544 80 1035 Mar 12 2006 README
-r--r--r-- 1 1544 80 5414 May 20 2005 http_load.1
-rw-r--r-- 1 1544 80 47168 Mar 12 2006 http_load.c
-r-xr-xr-x 1 1544 80 1178 Sep 13 2000 make_test_files
-r--r--r-- 1 1544 80 2274 Jun 4 2004 port.h
-r--r--r-- 1 1544 80 7389 May 20 2005 timers.c
-r--r--r-- 1 1544 80 3895 May 20 2005 timers.h
-rw-r--r-- 1 1544 80 153 Mar 12 2006 version.h
[root@client http_load-12mar2006]# make install
gcc -Wall -O -c http_load.c
http_load.c: In function 'main':
http_load.c:413: warning: implicit declaration of function 'time'
http_load.c: In function 'handle_connect':
http_load.c:937: warning: pointer targets in passing argument 5 of 'getsockopt' differ in signedness
gcc -Wall -O -c timers.c
gcc -Wall -O http_load.o timers.o -s -o http_load
rm -f /usr/local/bin/http_load
cp http_load /usr/local/bin
rm -f /usr/local/man/man1/http_load.1
cp http_load.1 /usr/local/man/man1
cp: cannot create regular file `/usr/local/man/man1': No such file or directory
make: *** [install] Error 1
编辑测试的文件：准备URL文件：文件格式是每行一个URL，URL最好超过50－100个测试效果比较好.文件格式
[root@client ~]# vim urltest.txt
http://10.106.42.171/index.html
[root@client http_load-12mar2006]# http_load
usage: http_load [-checksum] [-throttle] [-proxy host:port] [-verbose] [-timeout secs] [-sip sip_file]
-parallel N | -rate N [-jitter]
-fetches N | -seconds N
url_file
One start specifier, either -parallel or -rate, is required.
One end specifier, either -fetches or -seconds, is required.
[root@client http_load-12mar2006]# cd
-parallel 简写-p ：含义是并发的用户进程数。
-fetches 简写-f ：含义是总计的访问次数
-rate 简写-r：含义是每秒的访问频率
-seconds简写-s ：含义是总计的访问时间
"urltest.txt" [New] 1L, 30C written
[root@client ~]# http_load -p 20 -f 100 urltest.txt
100 fetches, 20 max parallel, 3000 bytes, in 0.112525 seconds
30 mean bytes/connection
888.691 fetches/sec, 26660.7 bytes/sec
msecs/connect: 2.99549 mean, 9.898 max, 0.318 min
msecs/first-response: 15.6888 mean, 26.967 max, 5.058 min
HTTP response codes:
code 200 -- 100
[root@client ~]# http_load -p 20 -f 100 urltest.txt
100 fetches, 20 max parallel, 3000 bytes, in 0.119666 seconds
30 mean bytes/connection
835.659 fetches/sec, 25069.8 bytes/sec
msecs/connect: 5.73962 mean, 15.986 max, 0.602 min
msecs/first-response: 13.709 mean, 33.941 max, 5.871 min
HTTP response codes:
code 200 -- 100
[root@client ~]#
不用cache server访问压力测试
[root@server ~]# vim /etc/sysctl.conf
net.ipv4.ip_forward = 1
[root@server ~]# sysctl -p
[root@server ~]# service squid stop
Stopping squid: [ OK ]
[root@server ~]# service iptables start
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: filter [ OK ]
Unloading iptables modules: [ OK ]
[root@server ~]# iptables -t nat -A PREROUTING -d 10.106.42.171 -p tcp --dport 80 -j DNAT --to 192.168.2.2
[root@web~]route add default gw 192.168.2.1
[root@client ~]# links http://10.106.42.171
http://10.106.42.171/
squid cache server test web!
OK [------]
[root@client ~]#
[root@client ~]# http_load -p 20 -f 100 urltest.txt
100 fetches, 20 max parallel, 3000 bytes, in 0.246648 seconds
30 mean bytes/connection
405.436 fetches/sec, 12163.1 bytes/sec
msecs/connect: 18.0242 mean, 97.304 max, 2.21 min
msecs/first-response: 21.9964 mean, 97.304 max, 3.219 min
HTTP response codes:
code 200 -- 100
[root@client ~]# http_load -p 20 -f 100 urltest.txt
100 fetches, 20 max parallel, 3000 bytes, in 0.316376 seconds
30 mean bytes/connection
316.08 fetches/sec, 9482.39 bytes/sec
msecs/connect: 27.401 mean, 64.675 max, 4.463 min
msecs/first-response: 28.0475 mean, 62.881 max, 2.972 min
HTTP response codes:
code 200 -- 100
[root@client ~]#
