Re: [squid-users] not caching enough

ant2ne wrote:
>
> Thanks for all of the great replies. There is lots of information to
> digest. I appreciate all of the suggestions.
>
> But, Before I got any of these replies, I went ahead and made
> modifications to my squid.conf to match an example I found on the internet
> here is my current running squid.conf
>
> http_port 3128
> icp_port 0
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> cache_mem 16 MB
> cache_dir ufs /cache 500000 256 256
> redirect_rewrites_host_header off
> cache_replacement_policy lru
> acl localnet src 10.60.0.0/255.255.0.0
> acl localhost src 127.0.0.1/255.255.255.255
> acl Safe_ports port 80 443 210 119 70 21 1025-65535
> acl CONNECT method CONNECT
> acl all src 0.0.0.0/0.0.0.0
> http_access allow localnet
> http_access allow localhost
> http_access deny !Safe_ports
> http_access deny CONNECT
> http_access deny all
> log_icp_queries off
>
> This one seems to be caching. I can refresh webmin system info every few
> hours and see that /cache is growing in space used. Although, very slowly.
>
> Amos Jeffries & tookers; I've taken the working squid.conf (above), and
> applied your suggestions to it (below). Please review this squid.conf
> (below) and make suggestions to it before I put it into production.
>
> http_port 3128
> icp_port 0
> no_cache deny QUERY
> cache_mem 512 MB
> maximum_object_size_in_memory 2048 KB
> maximum_object_size 1 GB
> cache_dir ufs /cache 500000 256 256
> redirect_rewrites_host_header off
> cache_replacement_policy lru
> acl QUERY urlpath_regex cgi-bin \?
> acl all src all
> acl localnet src 10.60.0.0/255.255.0.0
> acl localhost src 127.0.0.1
> acl to_localhost dst 127.0.0.0/8 0.0.0.0/8
> acl Safe_ports port 80 443 210 119 70 21 1025-65535
> acl CONNECT method CONNECT
> http_access allow localnet
> http_access allow localhost
> http_access deny !Safe_ports
> http_access deny CONNECT
> http_access deny all
> icp_access allow our_networks
> icp_access allow localhost
> icp_access deny all
> refresh_pattern \.jpg$ 3600 50% 60 ignore-reload
> refresh_pattern \.gif$ 3600 50% 60 ignore-reload
> refresh_pattern \.css$ 3600 50% 60 ignore-reload
> refresh_pattern \.js$ 3600 50% 60 ignore-reload
> refresh_pattern ^ftp: 1440 20% 10080
> refresh_pattern ^gopher: 1440 0% 1440
> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
> refresh_pattern \.html$ 300 50% 10 ignore-reload
>
> THANKS!!
>

Hey there,
I don't think you need to include...
icp_access allow our_networks
icp_access allow localhost
icp_access deny all

As icp_port 0, icp is essentially disabled, you shouldn't need to specify
the icp_access lines.

After your Acl CONNECT you need to add
http_access deny CONNECT !Safe_Ports

You might also want a 'catch-all' refresh_pattern... cache all for 60
seconds if not already matched above. Stick this right at the end of your
config.
refresh_pattern . 60 50% 10 ignore-reload

-- 
View this message in context: http://www.nabble.com/not-caching-enough-tp25530445p25669291.html
Sent from the Squid - Users mailing list archive at Nabble.com.