Modelo do sistema:
+---------+ +----------+
| | sibling | |
| Squid 1 +----------+ Squid 2 |
| | Net | |
+----^----+ +-----^----+
| |
| |
+----+----+ +-----+----+
| Net 1 | | Net 2 |
| | | |
+---------+ +----------+
Eu corri o squid com as seguintes opções:
$ sbin/squid -v
--enable-cache-digests \
--enable-htcp \
--enable-icmp \
--enable-async-io
squid.conf arquivos:
acl localnet src 192.168.1.0/24 # LAN net
acl peernet src 192.168.55.0/24 # peer net
acl localhost src 127.0.0.1/32
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
#
# Recommended minimum Access Permission configuration:
#
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports
# Only allow cachemgr access from localhost
miss_access allow all
http_access allow localnet
http_access allow peernet
http_access allow localhost
# And finally deny all other access to this proxy
http_access deny all
# Squid normally listens to port 3128
http_port 3129
http_port 3128 intercept
# Uncomment and adjust the following to add a disk cache directory.
cache_dir aufs /usr/local/squid/var/cache/squid 100 16 256
# Leave coredumps in the first cache dir
coredump_dir /usr/local/squid/var/cache/squid
cache_effective_user proxy
cache_replacement_policy heap GDSF
digest_generation on
htcp_port 4827
htcp_access allow peernet
cache_peer 192.168.55.2 sibling 3128 4827 htcp
cache_peer_access 192.168.55.2 allow
#
# Add any of your own refresh_pattern entries above these.
#
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
Eu executei o squid com as opções -Nd1 e aqui está o cache.log.
2016/04/02 20:38:06| Set Current Directory to /usr/local/squid/var/cache/squid
2016/04/02 20:38:06| Starting Squid Cache version 3.5.12 for x86_64-unknown-linux-gnu...
2016/04/02 20:38:06| Service Name: squid
2016/04/02 20:38:06| Process ID 3077
2016/04/02 20:38:06| Process Roles: master worker
2016/04/02 20:38:06| With 65536 file descriptors available
2016/04/02 20:38:06| Initializing IP Cache...
2016/04/02 20:38:06| DNS Socket created at [::], FD 8
2016/04/02 20:38:06| DNS Socket created at 0.0.0.0, FD 9
2016/04/02 20:38:06| Adding nameserver 10.0.4.3 from /etc/resolv.conf
2016/04/02 20:38:06| Logfile: opening log daemon:/usr/local/squid/var/logs/access.log
2016/04/02 20:38:06| Logfile Daemon: opening log /usr/local/squid/var/logs/access.log
2016/04/02 20:38:06| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2016/04/02 20:38:06| Store logging disabled
2016/04/02 20:38:06| Swap maxSize 102400 + 262144 KB, estimated 28041 objects
2016/04/02 20:38:06| Target number of buckets: 1402
2016/04/02 20:38:06| Using 8192 Store buckets
2016/04/02 20:38:06| Max Mem size: 262144 KB
2016/04/02 20:38:06| Max Swap size: 102400 KB
2016/04/02 20:38:06| Rebuilding storage in /usr/local/squid/var/cache/squid (clean log)
2016/04/02 20:38:06| Using Least Load store dir selection
2016/04/02 20:38:06| Set Current Directory to /usr/local/squid/var/cache/squid
2016/04/02 20:38:06| Finished loading MIME types and icons.
2016/04/02 20:38:06| Pinger socket opened on FD 18
2016/04/02 20:38:06| Configuring Sibling 192.168.55.2/3128/4827
2016/04/02 20:38:06| Squid plugin modules loaded: 0
2016/04/02 20:38:06| Adaptation support is off.
2016/04/02 20:38:06| Accepting HTTP Socket connections at local=[::]:3129 remote=[::] FD 14 flags=9
2016/04/02 20:38:06| Accepting NAT intercepted HTTP Socket connections at local=[::]:3128 remote=[::] FD 15 flags=41
2016/04/02 20:38:06| Accepting HTCP messages on [::]:4827
2016/04/02 20:38:06| Sending HTCP messages from [::]:4827
2016/04/02 20:38:06| pinger: Initialising ICMP pinger ...
2016/04/02 20:38:06| icmp_sock: (1) Operation not permitted
2016/04/02 20:38:06| pinger: Unable to start ICMP pinger.
2016/04/02 20:38:06| icmp_sock: (1) Operation not permitted
2016/04/02 20:38:06| pinger: Unable to start ICMPv6 pinger.
2016/04/02 20:38:06| FATAL: pinger: Unable to open any ICMP sockets.
2016/04/02 20:38:06| Done reading /usr/local/squid/var/cache/squid swaplog (2857 entries)
2016/04/02 20:38:06| Finished rebuilding storage from disk.
2016/04/02 20:38:06| 2857 Entries scanned
2016/04/02 20:38:06| 0 Invalid entries.
2016/04/02 20:38:06| 0 With invalid flags.
2016/04/02 20:38:06| 2857 Objects loaded.
2016/04/02 20:38:06| 0 Objects expired.
2016/04/02 20:38:06| 0 Objects cancelled.
2016/04/02 20:38:06| 0 Duplicate URLs purged.
2016/04/02 20:38:06| 0 Swapfile clashes avoided.
2016/04/02 20:38:06| Took 0.04 seconds (74196.23 objects/sec).
2016/04/02 20:38:06| Beginning Validation Procedure
2016/04/02 20:38:06| Completed Validation Procedure
2016/04/02 20:38:06| Validated 2857 Entries
2016/04/02 20:38:06| store_swap_size = 91872.00 KB
2016/04/02 20:38:07| storeLateRelease: released 0 objects
access.log file quando procurar stackoverflow.com:
1459597205.479 37432 192.168.1.2 TCP_MISS/200 41999 GET http://stackoverflow.com/ - ORIGINAL_DST/104.16.34.249 text/html
1459597210.495 0 192.168.55.2 TCP_DENIED/403 4046 GET http://192.168.55.1:3128/squid-internal-dynamic/netdb - HIER_NONE/- text/html
1459597240.228 35029 192.168.1.2 TCP_MISS/200 1729 GET http://cdn.sstatic.net/Sites/stackoverflow/img/favicon.ico? - ORIGINAL_DST/104.16.106.204 image/x-icon
1459597240.235 35036 192.168.1.2 TCP_MISS/200 13373 GET http://cdn.sstatic.net/Js/stub.en.js? - ORIGINAL_DST/104.16.106.204 application/javascript
1459597240.252 35053 192.168.1.2 TCP_MISS/200 86771 GET http://cdn.sstatic.net/Sites/stackoverflow/all.css? - ORIGINAL_DST/104.16.106.204 text/css
1459597245.368 40159 192.168.1.2 TCP_MISS/200 33742 GET http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js - ORIGINAL_DST/216.58.221.234 text/javascript
1459597245.644 9 192.168.1.2 TCP_MISS/200 3089 GET http://cdn.sstatic.net/Sites/stackoverflow/img/sprites.svg? - ORIGINAL_DST/104.16.106.204 image/svg+xml
1459597245.648 13 192.168.1.2 TCP_MISS/200 10060 GET http://cdn.sstatic.net/img/share-sprite-new.svg? - ORIGINAL_DST/104.16.106.204 image/svg+xml
1459597245.663 20 192.168.1.2 TCP_MISS/200 58777 GET http://cdn.sstatic.net/img/favicons-sprite16.png? - ORIGINAL_DST/104.16.106.204 image/png
1459597245.682 11 192.168.1.2 TCP_MISS/200 36085 GET http://cdn.sstatic.net/Js/full-anon.en.js? - ORIGINAL_DST/104.16.106.204 application/javascript
1459597246.094 65 192.168.1.2 TCP_MISS/200 1053 GET http://cdn.sstatic.net/Js/unikong/unikong.js? - ORIGINAL_DST/104.16.106.204 application/javascript
1459597246.122 18 192.168.1.2 TCP_MISS/200 854 GET http://cdn.sstatic.net/shared/unikong.css? - ORIGINAL_DST/104.16.106.204 text/css
1459597246.224 8 192.168.1.2 TCP_MISS/200 15691 GET http://cdn.sstatic.net/img/unikong/banner.png? - ORIGINAL_DST/104.16.106.204 image/png
1459597246.553 522 192.168.1.2 TCP_MISS/204 367 POST http://stackoverflow.com/gps/event - ORIGINAL_DST/104.16.34.249 -
1459597285.276 39900 192.168.1.2 TCP_MISS/200 1476 GET http://i.stack.imgur.com/sawHl.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.276 39901 192.168.1.2 TCP_MISS/200 957 GET http://i.stack.imgur.com/WVlkK.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.277 39901 192.168.1.2 TCP_MISS/200 918 GET http://i.stack.imgur.com/tKsDb.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.278 39903 192.168.1.2 TCP_MISS/200 4172 GET http://i.stack.imgur.com/vobok.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.279 39903 192.168.1.2 TCP_MISS/200 1683 GET http://i.stack.imgur.com/xqoqk.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.308 31 192.168.1.2 TCP_MISS/200 1001 GET http://i.stack.imgur.com/PVepA.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.308 31 192.168.1.2 TCP_MISS/200 4172 GET http://i.stack.imgur.com/2NOCA.png - ORIGINAL_DST/104.16.110.18 image/png
1459597285.471 40093 192.168.1.2 TCP_MISS/200 4323 GET http://i.stack.imgur.com/EdUwb.png - ORIGINAL_DST/104.16.110.18 image/png
1459597388.905 1855 192.168.1.2 TAG_NONE_ABORTED/000 0 POST http://clients1.google.com/ocsp - HIER_NONE/- -
1459597413.092 1792 192.168.1.2 TAG_NONE_ABORTED/000 0 POST http://ocsp.digicert.com/ - HIER_NONE/- -
Você pode ver que foram necessários 37s para carregar totalmente, o que não posso explicar.