项目笔记：4.引入CDN内容分发网络，实现网站静态元素加速 squid
1、在192.168.0.6和192.168.0.7上安装squid
开两台虚拟机ip为0.6，0.7 只需搭建本地系统的yum源
# yum -y install squid
一台父squid和一台子squid多重缓存加速访问。如果访问子squid，子squid没有就会访问父squid，层层上去，父squid没有才去访问原始地址。
2、在父squid192.168.0.6上配置
<pre name="code" class="html"># vim /etc/squid/squid.confacl manager proto cache_objectacl localhost src 127.0.0.1/32 ::1acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1acl localnet src 10.0.0.0/8# RFC1918 possible internal networkacl localnet src 172.16.0.0/12# RFC1918 possible internal networkacl localnet src 192.168.0.0/16# RFC1918 possible internal networkacl localnet src fc00::/7 # RFC 4193 local private network rangeacl localnet src fe80::/10# RFC 4291 link-local (directly plugged) machinesacl SSL_ports port 443acl Safe_ports port 80# httpacl Safe_ports port 21# ftpacl Safe_ports port 443# httpsacl Safe_ports port 70# gopheracl Safe_ports port 210# waisacl Safe_ports port 1025-65535# unregistered portsacl Safe_ports port 280# http-mgmtacl Safe_ports port 488# gss-httpacl Safe_ports port 591# filemakeracl Safe_ports port 777# multiling httpacl Safe_ports port 3130#icpacl CONNECT method CONNECThttp_access allow manager localhosthttp_access deny managerhttp_access deny !Safe_portshttp_access deny CONNECT !SSL_portshttp_access allow localnethttp_access allow localhosthttp_access deny allhttp_port 3128 vhost vporticp_port 3130hierarchy_stoplist cgi-bin ?cache_mem 100 MBcache_dir ufs /var/spool/squid 100 16 256coredump_dir /var/spool/squidrefresh_pattern ^ftp:144020%10080refresh_pattern ^gopher:14400%1440refresh_pattern -i (/cgi-bin/|\?) 00%0refresh_pattern .020%4320cache_peer 192.168.0.2 parent 80 0 no-query originserver no-digest name=w1cache_peer 192.168.0.2 parent 80 0 no-query originserver no-digest name=w2cache_peer 192.168.0.3 parent 80 0 no-query originserver no-digest name=w3cache_peer 192.168.0.3 parent 80 0 no-query originserver no-digest name=w4cache_peer 192.168.0.6 sibling 3128 3130 name=cache0 --父squidcache_peer 192.168.0.7 sibling 3128 3130 name=cache1 <span style="font-family: Arial, Helvetica, sans-serif;">-子squid</span>cache_peer_domain cache_peer_domain cache_peer_domain cache_peer_domain
3、在子squid192.168.0.7配置
# vim /etc/squid/squid.confacl manager proto cache_objectacl localhost src 127.0.0.1/32 ::1acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1acl localnet src 10.0.0.0/8# RFC1918 possible internal networkacl localnet src 172.16.0.0/12# RFC1918 possible internal networkacl localnet src 192.168.0.0/16# RFC1918 possible internal networkacl localnet src fc00::/7 # RFC 4193 local private network rangeacl localnet src fe80::/10# RFC 4291 link-local (directly plugged) machinesacl SSL_ports port 443acl Safe_ports port 80# httpacl Safe_ports port 21# ftpacl Safe_ports port 443# httpsacl Safe_ports port 70# gopheracl Safe_ports port 210# waisacl Safe_ports port 1025-65535# unregistered portsacl Safe_ports port 280# http-mgmtacl Safe_ports port 488# gss-httpacl Safe_ports port 591# filemakeracl Safe_ports port 777# multiling httpacl Safe_ports port 3130#icpacl CONNECT method CONNECThttp_access allow manager localhosthttp_access deny managerhttp_access deny !Safe_portshttp_access deny CONNECT !SSL_portshttp_access allow localnethttp_access allow localhosthttp_access deny allhttp_port 3128 vhost vporticp_port 3130hierarchy_stoplist cgi-bin ?cache_mem 100 MBcache_dir ufs /var/spool/squid 100 16 256coredump_dir /var/spool/squidrefresh_pattern ^ftp:144020%10080refresh_pattern ^gopher:14400%1440refresh_pattern -i (/cgi-bin/|\?) 00%0refresh_pattern .020%4320cache_peer 192.168.0.6 parent 3128 0 no-query originserver no-digest name=w1cache_peer 192.168.0.6 parent 3128 0 no-query originserver no-digest name=w2cache_peer 192.168.0.7 sibling 3128 3130 name=cache1 <span style="font-family: Arial, Helvetica, sans-serif;">--子squid</span>cache_peer 192.168.0.6 sibling 3128 3130 name=cache0 <span style="font-family: Arial, Helvetica, sans-serif;">--父squid</span>cache_peer_domain cache_peer_domain
做测试一级squid
# vim /etc/hosts --记得修改访问端的hosts文件啊，不然什么都别谈了192.168.0.6
先访问下:3128 3128是squid的端口<span style="font-family: Arial, Helvetica, sans-serif; background-color: rgb(240, 240, 240);"></span>
# curl -I :3128/template/default/image/guest_bg.jpgHTTP/1.0 200 OKServer: nginx/1.4.7Date: Fri, 06 Feb 08:04:35 GMTContent-Type: image/jpegContent-Length: 37373Last-Modified: Wed, 23 Mar 06:33:46 GMTETag: "4d89944a-91fd"Accept-Ranges: bytesX-Cache: MISS from －－第一次是missX-Cache-Lookup: MISS from :3128Via: 1.0 (squid/3.1.10)Connection: keep-alive# curl -I :3128/template/default/image/guest_bg.jpgHTTP/1.0 200 OKServer: nginx/1.4.7Date: Fri, 06 Feb 08:04:35 GMTContent-Type: image/jpegContent-Length: 37373Last-Modified: Wed, 23 Mar 06:33:46 GMTETag: "4d89944a-91fd"Accept-Ranges: bytesAge: 50X-Cache: HIT from －－第二次以后都是hitX-Cache-Lookup: HIT from :3128Via: 1.0 (squid/3.1.10)Connection: keep-alive
测试二级squid
# vim /etc/hosts --记得修改访问端的hosts文件啊，不然什么都别谈了192.168.0.7
先访问下:3128 3128是squid的端口
# curl -I :3128/template/default/image/guest_bg.jpgHTTP/1.0 200 OKServer: nginx/1.4.7Date: Fri, 06 Feb 08:04:35 GMTContent-Type: image/jpegContent-Length: 37373Last-Modified: Wed, 23 Mar 06:33:46 GMTETag: "4d89944a-91fd"Accept-Ranges: bytesAge: 230X-Cache: HIT from --hit来时父squidX-Cache-Lookup: HIT from :3128X-Cache: MISS from X-Cache-Lookup: MISS from :3128Via: 1.0 (squid/3.1.10), 1.0 (squid/3.1.10)Connection: keep-alive# curl -I :3128/template/default/image/guest_bg.jpgHTTP/1.0 200 OKServer: nginx/1.4.7Date: Fri, 06 Feb 08:04:35 GMTContent-Type: image/jpegContent-Length: 37373Last-Modified: Wed, 23 Mar 06:33:46 GMTETag: "4d89944a-91fd"Accept-Ranges: bytesX-Cache: HIT from --hit来时父squidX-Cache-Lookup: HIT from :3128Age: 265X-Cache: HIT from X-Cache-Lookup: HIT from :3128Via: 1.0 (squid/3.1.10), 1.0 (squid/3.1.10)Connection: keep-alive
</pre><p></p><pre>
4、在192.168.0.1上的nginx增加squid的分发
# vim /etc/nginx/nginx.confuser nobody nobody;worker_processes 4;error_log /var/log/nginx/error.log info;pid /var/run/nginx.pid;events {worker_connections 15000;}http {include mime.types;default_type application/octet-stream;log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log /var/log/nginx/access.log main;sendfile on;tcp_nopushon;keepalive_timeout 30;gzip on;upstream squid_upstream {server 192.168.0.6:3128;server 192.168.0.7:3128;hash $request_uri;hash_again 10;}upstream tomcat_upstream {server 192.168.0.2:8080 weight=10;server 192.168.0.3:8080 weight=10;}server {listen 80;server_name localhost;charset utf8;location / {index index.html index.htm index.jsp;proxy_pass http://squid_upstream;proxy_set_header Host $host;proxy_set_header X-Forward-For $remote_addr;}location ~ \.jsp$ {proxy_pass http://tomcat_upstream;proxy_set_header Host $host;proxy_set_header X-Forward-For $remote_addr;}location ~ ^/forum-[0-9]-[0-9]-[0-9]\.html$ {proxy_pass http://tomcat_upstream;proxy_set_header Host $host;proxy_set_header X-Forward-For $remote_addr;}}}# service nginx reload
最后修改hosts 指向192.168.0.1
