Cara mengatasi TCP_MISS pada Squid Ubuntu

[chibi]

Code:

1333707593.098   4543 192.168.0.7 TCP_MISS/200 161269 GET http://a1.sphotos.ak.fbcdn.net/hphotos-ak-ash4/377529_316063851758335_100000641675067_1082914_1552475054_n.jpg - DIRECT/65.197.197.194 image/jpeg
1333707593.569  25643 192.168.0.6 TCP_MISS/200 1374 GET http://1-264.channel.facebook.com/pull? - DIRECT/69.171.227.66 text/plain
1333707593.877    206 192.168.0.14 TCP_MISS/200 835 GET http://www.google.co.id/s? - DIRECT/74.125.128.94 application/json
1333707594.226   1337 192.168.0.14 TCP_MISS/200 14969 GET http://www.google.co.id/s? - DIRECT/74.125.128.94 application/json
1333707594.319   1066 192.168.0.7 TCP_MISS/200 15386 GET http://www.facebook.com/profile.php? - DIRECT/69.171.228.12 text/html
1333707594.907    280 192.168.0.14 TCP_MISS/204 345 GET http://www.google.co.id/gen_204? - DIRECT/74.125.128.94 text/html
^C
root@proxy:/usr/local/squid/etc# ^C
root@proxy:/usr/local/squid/etc# tail -f /var/log/squid/access.log
1333708311.701   1587 192.168.0.7 TCP_MISS/200 11888 GET http://www.facebook.com/ajax/profile/navigation.php? - DIRECT/66.220.149.66 text/html
1333708317.675    809 192.168.0.7 TCP_MISS/200 1576 POST http://www.facebook.com/ajax/photos/upload/overlay/? - DIRECT/66.220.149.66 application/x-javascript
1333708319.856   2205 192.168.0.7 TCP_MISS/200 39883 GET http://www.facebook.com/media/set/? - DIRECT/66.220.149.66 text/html
1333708319.927    833 192.168.0.254 TCP_MISS/200 771 POST http://fb-client-zc.empire.zynga.com/flashservices/gateway.php - DIRECT/184.75.160.15 application/x-amf
1333708319.961    404 192.168.0.20 TCP_MISS/200 590 GET http://www.chibi-cyber.com/xmlhttp.php? - DIRECT/111.221.40.169 text/html
1333708320.424    928 192.168.0.254 TCP_MISS/200 3237 GET http://fb-client-zc.empire.zynga.com/Zsc.json? - DIRECT/184.75.160.15 application/json
1333708320.461    594 192.168.0.7 TCP_MISS/200 3286 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/173775_100000603678853_1804678710_q.jpg - DIRECT/64.145.89.83 image/jpeg
1333708320.556    359 192.168.0.7 TCP_MISS/200 6047 GET http://www.facebook.com/editprofile.php? - DIRECT/66.220.149.66 text/html
1333708320.741    311 192.168.0.7 TCP_MISS/200 1579 GET http://www.facebook.com/ajax/chat/user_info.php? - DIRECT/66.220.149.67 application/x-javascript
1333708321.323    463 192.168.0.7 TCP_MISS/200 623 GET http://static.ak.facebook.com/common/redirectiframe.html - DIRECT/65.197.244.18 text/html
1333708321.436   1569 192.168.0.7 TCP_MISS/200 3054 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/276239_100000521627388_1500107726_q.jpg - DIRECT/64.145.89.83 image/jpeg
1333708321.800   1932 192.168.0.7 TCP_MISS/200 3162 GET http://profile.ak.fbcdn.net/hprofile-ak-snc4/161315_100000904914739_447545761_q.jpg - DIRECT/64.145.89.83 image/jpeg

ini untuk settingan squid.conf

Quote:### Konfigurasi Port
prefer_direct off

### Bypass javascript, perl website (jika perlu) dan situs2 yang dekat (satu network) deklarasikan disini
### Untuk caching Facebook, lebih efektif jika ini di comment (nonaktif)
#hierarchy_stoplist cgi-bin ? localhost
#acl QUERY urlpath_regex cgi-bin \? localhost
#no_cache deny QUERY

### Tuning Cache & Objek
cache_mem 8 MB
cache_swap_low 95
cache_swap_high 97
#max_filedesc 8192
#server_http11 on
maximum_object_size 256 MB
minimum_object_size 0 bytes
maximum_object_size_in_memory 24 bytes
ipcache_size 4096
ipcache_low 95
ipcache_high 97
fqdncache_size 4096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

### Lokasi Cache
cache_dir aufs /cache1 50000 117 256
cache_dir aufs /cache2 50000 117 256
cache_dir aufs /cache3 50000 117 256
cache_dir aufs /cache4 50000 117 256

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
cache_swap_log /var/log/squid/swap.state

### DNS Server & Cache Queries
#dns_nameservers 203.34.118.10 203.34.118.12
#dns_nameservers 127.0.0.1

### Cache Options
emulate_httpd_log off
hosts_file /etc/hosts

#images facebook
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(jpg|png|gif) 129600 999999% 129600 ignore-reload ignore-no-cache
refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|mp3) 129600 999999% 129600 ignore-reload ignore-no-cache
refresh_pattern static\.ak\.fbcdn\.net*\.(jpg|gif|png) 129600 999999% 129600 ignore-reload ignore-no-cache
refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 129600 999999% 129600 ignore-reload ignore-no-cache
refresh_pattern ^http://*.google.*/.* 720 100% 4320

####
refresh_pattern ^http://*.*.*.facebook.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^http://*.*.facebook.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^http://*.facebook.*/.* 720 100% 4320
refresh_pattern ^http://*.texas_holdem.*/.* 720 100% 4320
refresh_pattern ^http://*.zynga.com.*/.* 720 100% 4320

###
refresh_pattern ^http://patch.crossfire.web.id/.* 129600 999999% 129600 ignore-reload ignore-no-cache
refresh_pattern ^http://*.crossfire.*.*/.* 129600 999999% 129600 ignore-reload ignore-no-cache

###
refresh_pattern -i \.(class|css|js|tif)(\?.*)?$ 1440 95% 100000080 reload-into-ims override-lastmod
refresh_pattern -i \.(jpe|jpg|jpeg|png|bmp|gif)(\?.*)?$ 0 95% 1000000080 reload-into-ims override-lastmod
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg|3gp)(\?.*)?$ 0 95% 201600000 reload-into-ims override-lastmod
refresh_pattern -i \.(mpg|mpe|wav|au|mid|flv)(\?.*)?$ 0 95% 2016000 reload-into-ims override-lastmod
refresh_pattern -i \.(zip|gz|i3Pack|i3AnimPack|arj|lha|lzh|mp3)(\?.*) ?$ 0 95% 2016000 reload-into-ims override-lastmod
refresh_pattern -i \.(rar|tgz|tar|exe|bin|nar|nrg|rez)(\?.*)?$ 0 95% 2016000 reload-into-ims override-lastmod
refresh_pattern -i \.(cab|psf|part|0*|swf|gz|grf|gpf|nup)(\?.*)?$ 0 95% 2000160 reload-into-ims override-lastmod
refresh_pattern -i \.(pdf|rtf|doc|swf|txt|inf)(\?.*)?$ 1 95% 2016000 reload-into-ims override-lastmod
refresh_pattern -i \.(inc|cab|ad|hqx|dll)(\?.*)?$ 10080 95% 4320000 reload-into-ims override-lastmod
refresh_pattern -i \.(asp|acgi|pl|shtml|php3|php)(\?.*)?$ 2 20% 432000 reload-into-ims override-lastmod
refresh_pattern -i \.(ini)(\?.*)?$ 2 5% 10800 reload-into-ims override-lastmod
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 1440 90% 10080
#half_closed_clients off

### Access Control
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl inputIP url_regex ^http://[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/$
acl inputIP url_regex ^http://[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
#http_access deny inputIP
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

### ACL Akses
##bagian ini yg anda sesuaikan dengan IP NEtwork anda
acl mikrotik src 192.168.3.0/24
acl chibi src 192.168.0.0/24
http_access allow localhost
http_access allow chibi
http_access allow mikrotik
http_access deny all

### Administratif Squid
#cache_mgr mattnux
#cachemgr_passwd mattnux
visible_hostname proxy.chibi
cache_effective_user proxy
cache_effective_group proxy
coredump_dir /var/spool/squid
pid_filename /var/run/squid.pid
shutdown_lifetime 5 seconds
logfile_rotate 7

### Monitoring SNMP
#snmp_port 3401
#acl snmpsquid snmp_community public
#snmp_access allow snmpsquid localhost
#snmp_access deny all

# NETWORK OPTIONS
# -----------------------------------------------------------------------------

http_port 3128 transparent
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

# bloking UltraSurf/Skype
acl numeric_IPs url_regex ^[0-9]+.[0-9]+.[0-9]+.[0-9]+
http_access deny CONNECT numeric_IPs all

ane udah mutar2 di forum2 lain juga ga bisa2 gan, mohon pencerahannya

[nobodyknowme]

coba di squidclient mgr:info keterangannya apa mas?

[cr0c0dil3]

Ini Squid only apa plus lusca juga om??

umur proxynya berapa? biasanya kl baru 1 atau 2 hari baru on, masih banyak yang miss.. tapi kl udah lama banyak yang TCP_HIT kok...

[chibi]

(04-06-2012 07:06 PM)nobodyknowme Wrote:  coba di squidclient mgr:info keterangannya apa mas?

di mana lihatny ?

(04-06-2012 09:03 PM)cr0c0dil3 Wrote:  Ini Squid only apa plus lusca juga om??

umur proxynya berapa? biasanya kl baru 1 atau 2 hari baru on, masih banyak yang miss.. tapi kl udah lama banyak yang TCP_HIT kok...

squid 2.7 stable9 proxy ubuntu 10.10
udah lama kok om, 1 bulan ada, ada yg bilang settingan di mikrotik, dan ada juga bilang settingan di squid.conf

[Super Moderator]

### Lokasi Cache
cache_dir aufs /cache1 50000 117 256
cache_dir aufs /cache2 50000 117 256
cache_dir aufs /cache3 50000 117 256
cache_dir aufs /cache4 50000 117 256

buset,banyak banget sizenya gede2
lebih baik dkumpulin jadi satu aja,biar access time HD lebih cepet pas nyari

coba nte ganti squid.conf nya,udah banyak kok yang share squid high performance di sini

demen gue kalo ada yang pake squid

[luthfi_dc]

(04-06-2012 06:39 PM)chibi Wrote:  ini untuk settingan squid.conf

[quote]### Konfigurasi Port
prefer_direct off

http_port 3128 transparent
#server_http11 on <-- ini di on kan, ntar facebook blank page

### Lokasi Cache
cache_dir aufs /cache 50000 117 256 <--dibikin 1 saja, kayak kata agan linuxer46, 75% dari partisi cache gan,

### Administratif Squid
#cache_mgr mattnux <-- ini tau keknya siapa deh ?

zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136
di mikrotik, natnya udah sesuai belum gan ?

(04-06-2012 11:05 PM)linuxer46 Wrote:  demen gue kalo ada yang pake squid

cumi goren mau gan?

@chibi,
itu settingan nat n mangle peroksi di mikrotik gmn gan?
udah sesuai belum sama diatas?

[traktor]

nyobain ah om

[ghosttransparentexceptnofixed]

setting/checking ur refresh_pattern