安裝Squid：在Ubuntu/Debian上使用sudo apt install squid，在CentOS/RHEL上使用sudo dnf install squid，並啟動(dòng)服務(wù)。 2. 配置基本設(shè)置：編輯/etc/squid/squid.conf，可選更改http_port，添加acl定義允許的網(wǎng)絡(luò)如192.168.1.0/24，並確保http_access allow規(guī)則在deny all之前。 3. 重啟Squid並驗(yàn)證：使用sudo systemctl restart squid，並通過ss或netstat檢查端口監(jiān)聽。 4. 配置防火牆：在Ubuntu上用ufw allow 3128，在CentOS/RHEL上用firewall-cmd --add-port=3128/tcp。 5. 客戶端設(shè)置：在客戶端配置代理IP和端口3128，或設(shè)置http_proxy環(huán)境變量。 6. 啟用認(rèn)證（可選）：安裝apache2-utils或httpd-tools，創(chuàng)建密碼文件並在配置中添加認(rèn)證參數(shù)，重啟Squid。 7. 監(jiān)控與排查：查看/var/log/squid/access.log和cache.log，檢查ACL順序、配置語法和防火牆以解決常見問題。完成這些步驟後，您將成功部署一個(gè)基礎(chǔ)Squid代理服務(wù)器，並可根據(jù)需要進(jìn)一步增強(qiáng)功能。

Setting up a proxy server on Linux using Squid is a practical way to control and monitor web traffic, improve performance through caching, or restrict access in a network. Squid is one of the most widely used open-source proxy servers, especially for HTTP, HTTPS, and FTP. Here's how to configure a basic proxy server with Squid on a Linux system.

1. Install Squid on Your Linux System

Squid is available in the default repositories of most Linux distributions.

On Ubuntu/Debian:

 sudo apt update
sudo apt install squid -y

On CentOS/RHEL/Rocky Linux:

 sudo dnf install squid -y

After installation, start and enable the service:

 sudo systemctl enable squid
sudo systemctl start squid

Check status:

 sudo systemctl status squid

2. Configure Basic Proxy Settings

The main configuration file for Squid is /etc/squid/squid.conf . Before making changes, back it up:

 sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.bak

Open the config file:

 sudo nano /etc/squid/squid.conf

Key Configuration Options:

• Change the default port (optional):
  By default, Squid listens on port 3128. To change it:

   http_port 3128

  Replace 3128 with your desired port.

• Allow access from your network:
  By default, Squid only allows localhost. To allow a local network (eg, 192.168.1.0/24), add:

   acl localnet src 192.168.1.0/24
  http_access allow localnet

  You can add multiple acl lines for different subnets.

• Set visible hostname (optional but recommended):

   visible_hostname proxy.yourdomain.com

?? Always place http_access allow rules before the final http_access deny all line, or clients will be blocked.

Save and exit the file.

3. Restart and Test Squid

After making changes, restart Squid:

 sudo systemctl restart squid

Ensure the port is listening:

 sudo netstat -tulnp | grep :3128

If netstat is not installed:

 sudo apt install net-tools # Debian/Ubuntu
sudo dnf install net-tools # RHEL/CentOS

Or use:

 ss -tuln | grep 3128

4. Configure Firewall (if enabled)

Allow the Squid port through the firewall.

Using ufw (Ubuntu):

 sudo ufw allow 3128

Using firewalld (CentOS/RHEL):

 sudo firewall-cmd --permanent --add-port=3128/tcp
sudo firewall-cmd --reload

5. Client-Side Proxy Configuration

On client machines, configure the browser or system proxy settings:

• IP Address: Your Squid server's IP
• Port: 3128 (or your custom port)

For command-line tools like curl or wget , set environment variables:

 export http_proxy=http://squid-server-ip:3128
export https_proxy=http://squid-server-ip:3128

To make it permanent, add to ~/.bashrc or /etc/environment .

6. Enable Authentication (Optional)

To restrict access with username/password:

1. Install htpasswd (if not present):

    sudo apt install apache2-utils # Debian/Ubuntu
   sudo dnf install httpd-tools # RHEL/CentOS

2. Create a password file and user:

    sudo htpasswd -c /etc/squid/passwd username

3. In squid.conf , add:

    auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
   auth_param basic children 5
   auth_param basic realm Squid Basic Authentication
   auth_param basic credentialsttl 2 hours
   
   acl authenticated_users proxy_auth REQUIRED
   http_access allow authenticated_users

Restart Squid afterward.

7. Monitor and Troubleshoot

• Check logs:

   sudo tail -f /var/log/squid/access.log
  sudo tail -f /var/log/squid/cache.log

• Common issues:

  • Clients getting "Access Denied": Check ACL order and subnet definitions.
  • Squid not starting: Validate config with sudo squid -k parse .
  • Connection timeouts: Verify firewall and network settings.

---

That's it. You now have a working proxy server with Squid. From here, you can enhance it with SSL interception, bandwidth limits, or content filtering based on your needs. Just remember to keep security in mind—especially if exposing the proxy beyond your internal network.

以上是如何使用Squid在Linux上配置代理服務(wù)器的詳細(xì)內(nèi)容。更多資訊請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！