看不懂的Squid配置

zhgypg

#accel listen port http_port 80 accel vhost vport #accel domain cache_peer 192.168.0.97 parent 80 0 no-query originserver no-digest name=www cache_peer_domain 192.168.0.97 #acl acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 8080 acl LanSrc src 192.168.0.0/24 acl LanDst dst 192.168.0.0/24 acl LanDstDM dstdomain 192.168.0.97 acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow LanSrc http_access allow LanDst http_access allow LanDstDM http_access deny all #base visible_hostname 192.168.0.97 cache_mgr kuliusheng@Yahoo.com.cn cache_effective_user squid cache_effective_group squid error_directory /usr/local/squid3/share/errors/Simplify_Chinese icon_directory /usr/local/squid3/share/icons mime_table /usr/local/squid3/etc/mime.conf cache_replacement_policy lru #cache_dir cache_dir aufs /data/cache1 32768 64 64 cache_dir aufs /data/cache2 32768 64 64 cache_mem 2048 MB max_open_disk_fds 0 #maximum_object_size 512 KB #maximum_object_size_in_memory 256 KB maximum_object_size 20 MB maximum_object_size_in_memory 8 MB #keepalived client_persistent_connections off server_persistent_connections on #persistent_request_timeout 60 seconds #memory_pools on #memory_pools_limit 64 MB forwarded_for on log_icp_queries off via off httpd_suppress_version_string off ie_refresh off tcp_recv_bufsize 32 KB #acl webservices rep_header Server -i ^linuxtoneWS ^Apache ^nginx #broken_vary_encoding allow webservices #hidden the squid header #reply_header_access Server deny all #reply_header_access X-Cache deny all #reply_header_access Warning deny all #reply_header_access Expires deny all #reply_header_access Cache-Control deny all #reply_header_access age deny all #reply_header_access All deny all ipcache_size 1024 ipcache_low 90 ipcache_high 95 memory_replacement_policy lru hosts_file /etc/hosts request_header_max_size 128 KB #deny cache hierarchy_stoplist cgi-bin ? .php acl QUERY urlpath_regex cgi-bin? .php acl DIRECT url_regex -i ^http://192.168.0.97/$ acl DIRECT url_regex -i ^http://192.168.0.193/$ acl DIRECT url_regex -i ^http://www.linuxtone.com/$ acl DIRECT url_regex -i ^http://photo.linuxtone.com/.*$ acl DIRECT url_regex -i ^http://www.linuxtone.com/index.html$ cache deny QUERY cache deny DIRECT #request_body_max_size 0 KB refresh_pattern ^ftp: 60    20%    10080 refresh_pattern ^gopher: 60    0%    1440 refresh_pattern . 0    20%    1440 refresh_pattern -i .css$    360     50%    2880    reload-into-ims refresh_pattern -i .js$    1440    50%    2880    reload-into-ims refresh_pattern -i .html$    720     50%    1440    reload-into-ims refresh_pattern -i .jpg$    1440    90%    2880    ignore-reload refresh_pattern -i .gif$    1440    90%    2880    ignore-reload refresh_pattern -i .swf$    1440    90%    2880    ignore-reload refresh_pattern -i .jpg$    1440    50%    2880    ignore-reload refresh_pattern -i .png$    1440    50%    2880    ignore-reload refresh_pattern -i .bmp$    1440    50%    2880    ignore-reload refresh_pattern -i .doc$    1440 50%    2880    ignore-reload refresh_pattern -i .ppt$    1440 50%    2880    ignore-reload refresh_pattern -i .xls$    1440 50%    2880    ignore-reload refresh_pattern -i .pdf$    1440 50%    2880    ignore-reload refresh_pattern -i .rar$    1440 50%    2880    ignore-reload refresh_pattern -i .zip$    1440 50%    2880    ignore-reload refresh_pattern -i .txt$    1440 50%    2880    ignore-reload quick_abort_min 20 KB quick_abort_max 20 KB quick_abort_pct 95 connect_timeout 1 minute negative_ttl 0 minutes read_timeout 30 seconds pconn_timeout 120 seconds shutdown_lifetime 5 seconds strip_query_terms off #snmp #snmp_port 3401 #acl snmppublic snmp_orgmunity snsimg #snmp_access allow snmppublic localhost #snmp_access deny all icp_port 0 # logfile emulate_httpd_log on #logformat combined %{X-Forwarded-For}>h %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh #access_log none #access_log /data/logs/access.log combined logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt access_log /data/logs/access.log squid #cache_store_log /var/log/squid/store.log cache_store_log /dev/null cache_log /data/logs/cache.log logfile_rotate 12 # MISCELLANEOUS store_objects_per_bucket 15 client_db off

其中的：
#deny cache
hierarchy_stoplist cgi-bin ? \.php
acl QUERY urlpath_regex cgi-bin\? \.php
acl DIRECT url_regex -i ^http:\/\/192.168.0.97\/$
acl DIRECT url_regex -i ^http:\/\/192.168.0.193\/$
acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/$
acl DIRECT url_regex -i ^http:\/\/photo\.linuxtone\.com\/.*$
acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/index\.html$
cache deny QUERY
cache deny DIRECT

是做什么用的呢？

ljily000

cache deny QUERY
cache deny DIRECT

不缓存cgi和php动态内容
限制访问http://192.168.0.97等网站

更详细
参看你的squid/etc/squid.conf.default