Walkthrough Installasi Squid di Debian Squeeze 64 bit

---

feature

• squid 2.7.STABLE9 with store-stale patch, capable of  dinamic contents caching, e.g youtube/video  caching

RIG

• Intel Atom D510
• RAM DDR2 2GB
• HDD WDC Blue 320GB
• Ethernet Card Intel pro 100+

installer

bisa diambil netinstall iso image including non-free firmware dari sini

• http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/current/amd64/iso-cd/

beberapa NIC, terutama intel, driver-nya tidak ada di installer official

diasumsikan

• Debian Squeeze fresh install
• Partition layout manual, dengan 6 buah partisi  /cache
• Software package yg dipilih saat install debian squeeze adalah DNS server, SSH server dan Standard System Utilities
• Topologi yg digunakan adalah squid sejajar mikrotik, dan mikrotik sudah di seting agar PC proxy dapat terkoneksi dengan internet

Login remotely, gw prefer lewat tunellier

update

 please login or register. simple registration is needed to see the content

fstab

 please login or register. simple registration is needed to see the content

Contoh fstab yg gw pake:

 please login or register. simple registration is needed to see the content

NOTE : di debian, selama bukan partisi root ( / ) tidak perlu tune2fs untuk penggunaan option data=writeback

sysctl

 please login or register. simple registration is needed to see the content

contoh sysctl :

 please login or register. simple registration is needed to see the content

limits

 please login or register. simple registration is needed to see the content

tambahkan baris berikut :

 please login or register. simple registration is needed to see the content

bind dns server

 please login or register. simple registration is needed to see the content

contoh yg gw pakai :

 please login or register. simple registration is needed to see the content

restart bind

 please login or register. simple registration is needed to see the content

networking

 please login or register. simple registration is needed to see the content

ubah allow-hotplug eth0 menjadi auto eth0

edit resolv.conf

 please login or register. simple registration is needed to see the content

ubah nameserver xxxxx menjadi nameserver 127.0.0.1

restart networking

 please login or register. simple registration is needed to see the content

jalankan dig facebook.com 3x, liat di query time apakah sudah sekitar 1 msec (kadang malah 0 msec)  kalo sudah berarti dns cache sudah jalan dan bind dah bisa digunakan sebagai dns resolver

fstab, sysctl, bind, networking dah diconfig, sekarang reboot

 please login or register. simple registration is needed to see the content

compile squid

 please login or register. simple registration is needed to see the content

2 step diatas (install dan autoremove squid) adalah cara paling mudah membuat start-up, add service, dan file init squid

untuk squid yg akan kita pakai meng-compile dari source

 please login or register. simple registration is needed to see the content

Note : CHOST=”x86_64-pc-linux-gnu” CFLAGS=”-march=core2 -O2 -mtune=generic -pipe” CXXFLAGS=”${CFLAGS}” adalah cflags buat proc yg gw gunakan. sesuaikan safe cflags dengan proc yg anda gunakan

untuk melihat procinfo, gcc version dan safe cflag yang sesuai, lihat disini : http://en.gentoo-wiki.com/wiki/Safe_Cflags

block.lst

 please login or register. simple registration is needed to see the content

 please login or register. simple registration is needed to see the content

tambahkan sendiri keyword yang hendak di block

Note: keyword yang diblock adalah yang tampil di URL, bukan kontent.

contoh : htttp://xxxxx.com/deepfreeze/xxxx akan diblok, tetapi sebuah post di kaskus misalnya yang ada kata deepfreeze tidak akan di block

storeurl.pl

 please login or register. simple registration is needed to see the content

ambil storeurl.pl dari sini : http://pastebin.com/L28WvWL0

running squid

 please login or register. simple registration is needed to see the content

contoh squid.conf yg gw pakai :

 please login or register. simple registration is needed to see the content

initialize cache

 please login or register. simple registration is needed to see the content

edit init.d squid

 please login or register. simple registration is needed to see the content

cari string /var/spool/$NAME ganti dengan /cache1

jalankan squid :

 please login or register. simple registration is needed to see the content

reboot PC untuk test apakah start-up squid dah jalan. jalankan htop setelah PC hidup untuk melihat prosses squid dah jalan atau belum

 please login or register. simple registration is needed to see the content

PC Proxy dah bisa digunakan, silahkan aktifkan NAT redirect di mikrotik

webmin

 please login or register. simple registration is needed to see the content

follow on screen instruction

buka http://[ip-address]:10000

 

lighttpd + php-cgi

 please login or register. simple registration is needed to see the content

edit lighttpd.conf

 please login or register. simple registration is needed to see the content

lighttpd.conf :

 please login or register. simple registration is needed to see the content

homedir di /var/www, listen on port 81

test buka di broser http://[ip-address]:81

edit php.ini

 please login or register. simple registration is needed to see the content

tambahkan cgi.fix_pathinfo = 1 di akhir file php.ini

restart lighttpd

 please login or register. simple registration is needed to see the content

buat file php untuk tes apakah php dah jalan

 please login or register. simple registration is needed to see the content

isi dengan <?php phpinfo(); ?>

buka di broser : http://[ip-address]:81/info.php

sqstat

 please login or register. simple registration is needed to see the content

buka di browser : http://[ip-address]:81/sqstat

mrtg

baca disini : mrtg without snmp di Debian Squeeze

 Credit

credit to all warneter communnity

spesiallly to imer for his remarkable squid config

i’m nothing w/out them