squid反向代理-049

 

Squid反向代理 代理服务器的保存缓存提供给用户访问服务器资源。 正向代理是代理有用户访问网络的。   49-1 1.cache server 的配置 面向用户的端口是 80 [root@server ~]# vim /etc/squid/squid.conf 637 http_access allow all 919 http_port 10.106.42.171:80 vhost 1181 #       #          hostname             type     port   port  options 1182 #       #          -------------------- -------- ----- -----  ----------- 1185 cache_peer 192.168.2.2       parent    80    0    originserver --指定父cache server   初始化缓存 --手工初始化缓存 或者直接启动第一次也回初始化缓存 [root@server ~]# squid --help squid: invalid option -- - Usage: squid [-hvzCDFNRYX] [-d level] [-s | -l facility] [-f config-file] [-u port] [-k signal]        -d level  Write debugging to stderr also.        -f file   Use given config-file instead of                  /etc/squid/squid.conf        -h        Print help message.        -k reconfigure|rotate|shutdown|interrupt|kill|debug|check|parse                  Parse configuration file, then send signal to                  running copy (except -k parse) and exit.        -s | -l facility                  Enable logging to syslog.        -u port   Specify ICP port number (default: 3130), disable with 0.        -v        Print version.        -z        Create swap directories        -C        Do not catch fatal signals.        -D        Disable initial DNS tests.        -F        Don't serve any requests until store is rebuilt.        -N        No daemon mode.        -R        Do not set REUSEADDR on port.        -S        Double-check swap during rebuild.        -X        Force full debugging.        -Y        Only return UDP_HIT or UDP_MISS_NOFETCH during fast reload. [root@server ~]# squid -z 2011/10/10 17:43:42| Squid is already running!  Process ID 4374 [root@server ~]# [root@server ~]# service squid restart --不需要开启数据包转发的功能   2.web server 的配置   [root@web Server]# ifconfig eth0 192.168.2.2 [root@web Server]# [root@web ~]# mount /dev/cdrom /mnt/cdrom mount: block device /dev/cdrom is write-protected, mounting read-only [root@web ~]# cd /mnt/cdrom/Server/ [root@web Server]# rpm -ivh httpd- httpd-2.2.3-22.el5.i386.rpm         httpd-manual-2.2.3-22.el5.i386.rpm httpd-devel-2.2.3-22.el5.i386.rpm   [root@web Server]# rpm -ivh httpd-2.2.3-22.el5.i386.rpm warning: httpd-2.2.3-22.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186 Preparing...                ########################################### [100%]    1:httpd                  ########################################### [100%] [root@web Server]# [root@web Server]# vim /var/www/html/index.html squid cache server  test web!           [root@web Server]# service httpd start Starting httpd: httpd: apr_sockaddr_info_get() failed for client httpd: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName                                                            [  OK  ] [root@web Server]# links 127.0.0.1                                                               http://127.0.0.1/    squid cache server test web!                                                          3.压力测试    [root@client ~]# ll total 84 drwxr-xr-x 2 root root  4096 Oct  5 11:11 Desktop -rw------- 1 root root  1495 Sep 15 17:49 anaconda-ks.cfg -rw-r--r-- 1 root root 17033 Oct 11  2011 http_load-12mar2006.tar.gz -rw-r--r-- 1 root root 38101 Sep 15 17:49 install.log -rw-r--r-- 1 root root  3681 Sep 15 17:48 install.log.syslog [root@client ~]# tar -zxvf http_load-12mar2006.tar.gz http_load-12mar2006/ http_load-12mar2006/Makefile http_load-12mar2006/README http_load-12mar2006/http_load.1 http_load-12mar2006/http_load.c http_load-12mar2006/make_test_files http_load-12mar2006/port.h http_load-12mar2006/timers.c http_load-12mar2006/timers.h http_load-12mar2006/version.h http_load-12mar2006/FILES [root@client ~]# cd http_load-12mar2006 [root@client http_load-12mar2006]# ll total 92 -r--r--r-- 1 1544 80    97 Jul 15  2001 FILES -rw-r--r-- 1 1544 80  1640 Jan  4  2002 Makefile -rw-r--r-- 1 1544 80  1035 Mar 12  2006 README -r--r--r-- 1 1544 80  5414 May 20  2005 http_load.1 -rw-r--r-- 1 1544 80 47168 Mar 12  2006 http_load.c -r-xr-xr-x 1 1544 80  1178 Sep 13  2000 make_test_files -r--r--r-- 1 1544 80  2274 Jun  4  2004 port.h -r--r--r-- 1 1544 80  7389 May 20  2005 timers.c -r--r--r-- 1 1544 80  3895 May 20  2005 timers.h -rw-r--r-- 1 1544 80   153 Mar 12  2006 version.h [root@client http_load-12mar2006]# make install gcc -Wall -O    -c http_load.c http_load.c: In function 'main': http_load.c:413: warning: implicit declaration of function 'time' http_load.c: In function 'handle_connect': http_load.c:937: warning: pointer targets in passing argument 5 of 'getsockopt' differ in signedness gcc -Wall -O    -c timers.c gcc -Wall -O    http_load.o timers.o -s   -o http_load rm -f /usr/local/bin/http_load cp http_load /usr/local/bin rm -f /usr/local/man/man1/http_load.1 cp http_load.1 /usr/local/man/man1 cp: cannot create regular file `/usr/local/man/man1': No such file or directory make: *** [install] Error 1 编辑测试的文件：准备URL文件：文件格式是每行一个URL，URL最好超过50－100个测试效果比较好.文件格式 [root@client ~]# vim urltest.txt http://10.106.42.171/index.html     [root@client http_load-12mar2006]# http_load usage:  http_load [-checksum] [-throttle] [-proxy host:port] [-verbose] [-timeout secs] [-sip sip_file]             -parallel N | -rate N [-jitter]             -fetches N | -seconds N             url_file One start specifier, either -parallel or -rate, is required. One end specifier, either -fetches or -seconds, is required. [root@client http_load-12mar2006]# cd  -parallel 简写-p ：含义是并发的用户进程数。 -fetches 简写-f ：含义是总计的访问次数 -rate    简写-r：含义是每秒的访问频率 -seconds简写-s ：含义是总计的访问时间   "urltest.txt" [New] 1L, 30C written                             [root@client ~]# http_load -p 20 -f 100 urltest.txt 100 fetches, 20 max parallel, 3000 bytes, in 0.112525 seconds 30 mean bytes/connection 888.691 fetches/sec, 26660.7 bytes/sec msecs/connect: 2.99549 mean, 9.898 max, 0.318 min msecs/first-response: 15.6888 mean, 26.967 max, 5.058 min HTTP response codes:   code 200 -- 100 [root@client ~]# http_load -p 20 -f 100 urltest.txt 100 fetches, 20 max parallel, 3000 bytes, in 0.119666 seconds 30 mean bytes/connection 835.659 fetches/sec, 25069.8 bytes/sec msecs/connect: 5.73962 mean, 15.986 max, 0.602 min msecs/first-response: 13.709 mean, 33.941 max, 5.871 min HTTP response codes:   code 200 -- 100 [root@client ~]#            不用cache server访问压力测试 [root@server ~]# vim /etc/sysctl.conf net.ipv4.ip_forward = 1                     [root@server ~]# sysctl -p    [root@server ~]# service squid stop Stopping squid:                                            [  OK  ] [root@server ~]# service iptables start Flushing firewall rules:                                   [  OK  ] Setting chains to policy ACCEPT: filter                    [  OK  ] Unloading iptables modules:                                [  OK  ] [root@server ~]# iptables -t nat -A PREROUTING -d 10.106.42.171 -p tcp --dport 80 -j DNAT --to 192.168.2.2                      [root@web~]route add default gw 192.168.2.1     [root@client ~]# links http://10.106.42.171                                                           http://10.106.42.171/    squid cache server test web!                                                                                                                                                                                                                OK                                                                     [------] [root@client ~]# [root@client ~]# http_load -p 20 -f 100 urltest.txt 100 fetches, 20 max parallel, 3000 bytes, in 0.246648 seconds 30 mean bytes/connection 405.436 fetches/sec, 12163.1 bytes/sec msecs/connect: 18.0242 mean, 97.304 max, 2.21 min msecs/first-response: 21.9964 mean, 97.304 max, 3.219 min HTTP response codes:   code 200 -- 100 [root@client ~]# http_load -p 20 -f 100 urltest.txt 100 fetches, 20 max parallel, 3000 bytes, in 0.316376 seconds 30 mean bytes/connection 316.08 fetches/sec, 9482.39 bytes/sec msecs/connect: 27.401 mean, 64.675 max, 4.463 min msecs/first-response: 28.0475 mean, 62.881 max, 2.972 min HTTP response codes:   code 200 -- 100 [root@client ~]#