SQUID Proxy Server Monitoring with MRTG

This short reference guide was made on request by a creature called 'Humans' living on planet earth  ;)
☻

This is a short reference guide to monitor SQUID various counters with the MRTG installed on Ubuntu. In this example I have configured SQUID and MRTG on same Ubuntu box.
Also I ahve showed howto install Apache, mrtg, scheduler to run after every 5 minutes, snmp services and its utilities, along with mibs.
If you have Freshly installed UBUNTU , You need to install Web Server (apache2)

apt-get install apache2

Now we will install MRTG

apt-get install mrtg

(Choose Yes to continue)
Now we will install SNMP Server and other SNMP utilities so that web can collect information for locahost and remote pcs via snmp.

apt-get install snmp snmpd

Now set your community string in /etc/snmp/snmpd.conf , Remove all Lines and add the following line only.

rocommunity public

syslocation "Karachi NOC, Paksitan"

syscontact  aacable@hotmail.com

Save and exit.
now edit /etc/default/snmpd
and change following

# snmpd options (use syslog, close stdin/out/err).

SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid'

To THIS:

# snmpd options (use syslog, close stdin/out/err).

#SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid '

SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid -c /etc/snmp/snmpd.conf'\

and restart snmpd

/etc/init.d/snmpd restart

OR

service snmpd restart

Now install MIB down loader,

sudo apt-get install snmp-mibs-downloader

Now copy all mibs in any single folder like /cfg/mibs/

mkdir /cfg

mkdir /cfg/mibs

cp /var/lib/mibs/ietf/*  /cfg/mibs

cd /cfg/mibs

wget http://wifismartzone.com/files/linux_related/squid.mib

MIBS are required if you want to use OID names instead of numeric values :D This was the issue for which I was stuck for many hours :(
Format that will be used in cfg file
E.g:

LoadMIBs: /cfg/mibs/squid.mib

↓

Testing SNMP Service for localhost.

Now snmp service have been installed, its better to do a snmpwalk test from localhost or another remote host to verify our new configuration is responding correctly. issue the following command from localhost terminal.

snmpwalk -v 1 -c public 127.0.0.1

and you will see lot of oids and information which confirms that snmp service is installed and responding OK.
As showed in the image below …

.
.
.
.

Adding MRTG to crontab to run after very 5 minutes

To add the schduler job, first edit crontab file
crontab -e
(if it asks for prefered text editor, go with nano, its much easier)
now add following line

*/5 * * * * env LANG=C mrtg /etc/mrtg.cfg --logging /var/log/mrtg.log

Some tips for INDEX MAKER and running MRTG manually …

Following is the command to create CFG file for remote pc.

cfgmaker public@192.168.2.1 > /cfg/proxy.cfg

Following is the command to check remote pc snmp info

snmpwalk -v 1 -c public /cfg/192.168.2.1

Following is the command to create index page for your cfg file.

indexmaker /etc/mrtg.cfg –output /var/www/mrtg/index.html –columns=1 -compact

Following is the command to stat MRTG to create your graph file manual. You haev to run this file after every 5 minutes in order to create graphs.

env LANG=C mrtg /etc/mrtg.cfg

.
.
.

Now LETS start with SQUID config…

SQUID CONFIGURATION FOR SNMP

Edit your squid.conf and add the following

acl snmppublic snmp_community public

snmp_port 3401

snmp_access allow snmppublic all

SAVE and EXIT.
Now use following proxy.cfg for the squid graphs
.
.

proxy.cfg

LoadMIBs: /cfg/mibs/squid.mib

Options[_]: growright,nobanner,logscale,pngdate,bits

Options[^]: growright,nobanner,logscale,pngdate,bits

WorkDir: /var/www/mrtg

EnableIPv6: no

### Interface 2 >> Descr: 'eth0' | Name: 'eth0' | Ip: '10.0.0.1' | Eth: '00-0c-29-2b-95-78' ###

Target[localhost_eth0]: #eth0:public@localhost:

SetEnv[localhost_eth0]: MRTG_INT_IP="10.0.0.1" MRTG_INT_DESCR="eth0"

MaxBytes[localhost_eth0]: 1250000

Title[localhost_eth0]: Traffic Analysis for eth0 -- ubuntu

PageTop[localhost_eth0]: <h1>Traffic Analysis for eth0 -- ubuntu</h1>

<div id="sysdetails">

<table>

<tr>

<td>System:</td>

<td>ubuntu in "Karachi NOC, Paksitan"</td>

</tr>

<tr>

<td>Maintainer:</td>

<td>aacable@hotmail.com</td>

</tr>

<tr>

<td>Description:</td>

<td>eth0  </td>

</tr>

<tr>

<td>ifType:</td>

<td>ethernetCsmacd (6)</td>

</tr>

<tr>

<td>ifName:</td>

<td>eth0</td>

</tr>

<tr>

<td>Max Speed:</td>

<td>1250.0 kBytes/s</td>

</tr>

<tr>

<td>Ip:</td>

<td>10.0.0.1 (ubuntu.local)</td>

</tr>

</table>

</div>

LoadMIBs: /cfg/mibs/squid.mib

PageFoot[^]: <i>Page managed by <a href="mailto:aacable@hotmail.com">Syed Jahanzaib</a></i>

Target[cacheServerRequests]: cacheServerRequests&cacheServerRequests:public@localhost:3401

MaxBytes[cacheServerRequests]: 10000000

Title[cacheServerRequests]: Server Requests @ zaib_squid_proxy_server

Options[cacheServerRequests]: growright, nopercent

PageTop[cacheServerRequests]: <h1>Server Requests @ zaib_squid_proxy_server</h1>

YLegend[cacheServerRequests]: requests/sec

ShortLegend[cacheServerRequests]: req/s

LegendI[cacheServerRequests]: Requests&nbsp;

LegendO[cacheServerRequests]:

Legend1[cacheServerRequests]: Requests

Legend2[cacheServerRequests]:

Target[cacheServerErrors]: cacheServerErrors&cacheServerErrors:public@localhost:3401

MaxBytes[cacheServerErrors]: 10000000

Title[cacheServerErrors]: Server Errors @ zaib_squid_proxy_server

Options[cacheServerErrors]: growright, nopercent

PageTop[cacheServerErrors]: <h1>Server Errors @ zaib_squid_proxy_server</h1>

YLegend[cacheServerErrors]: errors/sec

ShortLegend[cacheServerErrors]: err/s

LegendI[cacheServerErrors]: Errors&nbsp;

LegendO[cacheServerErrors]:

Legend1[cacheServerErrors]: Errors

Legend2[cacheServerErrors]:

Target[cacheServerInOutKb]: cacheServerInKb&cacheServerOutKb:public@localhost:3401 * 1024

MaxBytes[cacheServerInOutKb]: 1000000000

Title[cacheServerInOutKb]: Server In/Out Traffic @ zaib_squid_proxy_server

Options[cacheServerInOutKb]: growright, nopercent

PageTop[cacheServerInOutKb]: <h1>Server In/Out Traffic @ zaib_squid_proxy_server</h1>

YLegend[cacheServerInOutKb]: Bytes/sec

ShortLegend[cacheServerInOutKb]: Bytes/s

LegendI[cacheServerInOutKb]: Server In&nbsp;

LegendO[cacheServerInOutKb]: Server Out&nbsp;

Legend1[cacheServerInOutKb]: Server In

Legend2[cacheServerInOutKb]: Server Out

Target[cacheHttpHits]: cacheHttpHits&cacheHttpHits:public@localhost:3401

MaxBytes[cacheHttpHits]: 10000000

Title[cacheHttpHits]: HTTP Hits @ zaib_squid_proxy_server

Options[cacheHttpHits]: growright, nopercent

PageTop[cacheHttpHits]: <h1>HTTP Hits @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpHits]: hits/sec

ShortLegend[cacheHttpHits]: hits/s

LegendI[cacheHttpHits]: Hits&nbsp;

LegendO[cacheHttpHits]:

Legend1[cacheHttpHits]: Hits

Legend2[cacheHttpHits]:

Target[cacheHttpErrors]: cacheHttpErrors&cacheHttpErrors:public@localhost:3401

MaxBytes[cacheHttpErrors]: 10000000

Title[cacheHttpErrors]: HTTP Errors @ zaib_squid_proxy_server

Options[cacheHttpErrors]: growright, nopercent

PageTop[cacheHttpErrors]: <h1>HTTP Errors @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpErrors]: errors/sec

ShortLegend[cacheHttpErrors]: err/s

LegendI[cacheHttpErrors]: Errors&nbsp;

LegendO[cacheHttpErrors]:

Legend1[cacheHttpErrors]: Errors

Legend2[cacheHttpErrors]:

Target[cacheIcpPktsSentRecv]: cacheIcpPktsSent&cacheIcpPktsRecv:public@localhost:3401

MaxBytes[cacheIcpPktsSentRecv]: 10000000

Title[cacheIcpPktsSentRecv]: ICP Packets Sent/Received

Options[cacheIcpPktsSentRecv]: growright, nopercent

PageTop[cacheIcpPktsSentRecv]: <h1>ICP Packets Sent/Recieved @ zaib_squid_proxy_server</h1>

YLegend[cacheIcpPktsSentRecv]: packets/sec

ShortLegend[cacheIcpPktsSentRecv]: pkts/s

LegendI[cacheIcpPktsSentRecv]: Pkts Sent&nbsp;

LegendO[cacheIcpPktsSentRecv]: Pkts Received&nbsp;

Legend1[cacheIcpPktsSentRecv]: Pkts Sent

Legend2[cacheIcpPktsSentRecv]: Pkts Received

Target[cacheIcpKbSentRecv]: cacheIcpKbSent&cacheIcpKbRecv:public@localhost:3401 * 1024

MaxBytes[cacheIcpKbSentRecv]: 1000000000

Title[cacheIcpKbSentRecv]: ICP Bytes Sent/Received

Options[cacheIcpKbSentRecv]: growright, nopercent

PageTop[cacheIcpKbSentRecv]: <h1>ICP Bytes Sent/Received @ zaib_squid_proxy_server</h1>

YLegend[cacheIcpKbSentRecv]: Bytes/sec

ShortLegend[cacheIcpKbSentRecv]: Bytes/s

LegendI[cacheIcpKbSentRecv]: Sent&nbsp;

LegendO[cacheIcpKbSentRecv]: Received&nbsp;

Legend1[cacheIcpKbSentRecv]: Sent

Legend2[cacheIcpKbSentRecv]: Received

Target[cacheHttpInOutKb]: cacheHttpInKb&cacheHttpOutKb:public@localhost:3401 * 1024

MaxBytes[cacheHttpInOutKb]: 1000000000

Title[cacheHttpInOutKb]: HTTP In/Out Traffic @ zaib_squid_proxy_server

Options[cacheHttpInOutKb]: growright, nopercent

PageTop[cacheHttpInOutKb]: <h1>HTTP In/Out Traffic @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpInOutKb]: Bytes/second

ShortLegend[cacheHttpInOutKb]: Bytes/s

LegendI[cacheHttpInOutKb]: HTTP In&nbsp;

LegendO[cacheHttpInOutKb]: HTTP Out&nbsp;

Legend1[cacheHttpInOutKb]: HTTP In

Legend2[cacheHttpInOutKb]: HTTP Out

Target[cacheCurrentSwapSize]: cacheCurrentSwapSize&cacheCurrentSwapSize:public@localhost:3401

MaxBytes[cacheCurrentSwapSize]: 1000000000

Title[cacheCurrentSwapSize]: Current Swap Size @ zaib_squid_proxy_server

Options[cacheCurrentSwapSize]: gauge, growright, nopercent

PageTop[cacheCurrentSwapSize]: <h1>Current Swap Size @ zaib_squid_proxy_server</h1>

YLegend[cacheCurrentSwapSize]: swap size

ShortLegend[cacheCurrentSwapSize]: Bytes

LegendI[cacheCurrentSwapSize]: Swap Size&nbsp;

LegendO[cacheCurrentSwapSize]:

Legend1[cacheCurrentSwapSize]: Swap Size

Legend2[cacheCurrentSwapSize]:

Target[cacheNumObjCount]: cacheNumObjCount&cacheNumObjCount:public@localhost:3401

MaxBytes[cacheNumObjCount]: 10000000

Title[cacheNumObjCount]: Num Object Count @ zaib_squid_proxy_server

Options[cacheNumObjCount]: gauge, growright, nopercent

PageTop[cacheNumObjCount]: <h1>Num Object Count @ zaib_squid_proxy_server</h1>

YLegend[cacheNumObjCount]: # of objects

ShortLegend[cacheNumObjCount]: objects

LegendI[cacheNumObjCount]: Num Objects&nbsp;

LegendO[cacheNumObjCount]:

Legend1[cacheNumObjCount]: Num Objects

Legend2[cacheNumObjCount]:

Target[cacheCpuUsage]: cacheCpuUsage&cacheCpuUsage:public@localhost:3401

MaxBytes[cacheCpuUsage]: 100

AbsMax[cacheCpuUsage]: 100

Title[cacheCpuUsage]: CPU Usage @ zaib_squid_proxy_server

Options[cacheCpuUsage]: absolute, gauge, noinfo, growright, nopercent

Unscaled[cacheCpuUsage]: dwmy

PageTop[cacheCpuUsage]: <h1>CPU Usage @ zaib_squid_proxy_server</h1>

YLegend[cacheCpuUsage]: usage %

ShortLegend[cacheCpuUsage]:%

LegendI[cacheCpuUsage]: CPU Usage&nbsp;

LegendO[cacheCpuUsage]:

Legend1[cacheCpuUsage]: CPU Usage

Legend2[cacheCpuUsage]:

Target[cacheMemUsage]: cacheMemUsage&cacheMemUsage:public@localhost:3401 * 1024

MaxBytes[cacheMemUsage]: 2000000000

Title[cacheMemUsage]: Memory Usage

Options[cacheMemUsage]: gauge, growright, nopercent

PageTop[cacheMemUsage]: <h1>Total memory accounted for @ zaib_squid_proxy_server</h1>

YLegend[cacheMemUsage]: Bytes

ShortLegend[cacheMemUsage]: Bytes

LegendI[cacheMemUsage]: Mem Usage&nbsp;

LegendO[cacheMemUsage]:

Legend1[cacheMemUsage]: Mem Usage

Legend2[cacheMemUsage]:

Target[cacheSysPageFaults]: cacheSysPageFaults&cacheSysPageFaults:public@localhost:3401

MaxBytes[cacheSysPageFaults]: 10000000

Title[cacheSysPageFaults]: Sys Page Faults @ zaib_squid_proxy_server

Options[cacheSysPageFaults]: growright, nopercent

PageTop[cacheSysPageFaults]: <h1>Sys Page Faults @ zaib_squid_proxy_server</h1>

YLegend[cacheSysPageFaults]: page faults/sec

ShortLegend[cacheSysPageFaults]: PF/s

LegendI[cacheSysPageFaults]: Page Faults&nbsp;

LegendO[cacheSysPageFaults]:

Legend1[cacheSysPageFaults]: Page Faults

Legend2[cacheSysPageFaults]:

Target[cacheSysVMsize]: cacheSysVMsize&cacheSysVMsize:public@localhost:3401 * 1024

MaxBytes[cacheSysVMsize]: 1000000000

Title[cacheSysVMsize]: Storage Mem Size @ zaib_squid_proxy_server

Options[cacheSysVMsize]: gauge, growright, nopercent

PageTop[cacheSysVMsize]: <h1>Storage Mem Size @ zaib_squid_proxy_server</h1>

YLegend[cacheSysVMsize]: mem size

ShortLegend[cacheSysVMsize]: Bytes

LegendI[cacheSysVMsize]: Mem Size&nbsp;

LegendO[cacheSysVMsize]:

Legend1[cacheSysVMsize]: Mem Size

Legend2[cacheSysVMsize]:

Target[cacheSysStorage]: cacheSysStorage&cacheSysStorage:public@localhost:3401

MaxBytes[cacheSysStorage]: 1000000000

Title[cacheSysStorage]: Storage Swap Size @ zaib_squid_proxy_server

Options[cacheSysStorage]: gauge, growright, nopercent

PageTop[cacheSysStorage]: <h1>Storage Swap Size @ zaib_squid_proxy_server</h1>

YLegend[cacheSysStorage]: swap size (KB)

ShortLegend[cacheSysStorage]: KBytes

LegendI[cacheSysStorage]: Swap Size&nbsp;

LegendO[cacheSysStorage]:

Legend1[cacheSysStorage]: Swap Size

Legend2[cacheSysStorage]:

Target[cacheSysNumReads]: cacheSysNumReads&cacheSysNumReads:public@localhost:3401

MaxBytes[cacheSysNumReads]: 10000000

Title[cacheSysNumReads]: HTTP I/O number of reads @ zaib_squid_proxy_server

Options[cacheSysNumReads]: growright, nopercent

PageTop[cacheSysNumReads]: <h1>HTTP I/O number of reads @ zaib_squid_proxy_server</h1>

YLegend[cacheSysNumReads]: reads/sec

ShortLegend[cacheSysNumReads]: reads/s

LegendI[cacheSysNumReads]: I/O&nbsp;

LegendO[cacheSysNumReads]:

Legend1[cacheSysNumReads]: I/O

Legend2[cacheSysNumReads]:

Target[cacheCpuTime]: cacheCpuTime&cacheCpuTime:public@localhost:3401

MaxBytes[cacheCpuTime]: 1000000000

Title[cacheCpuTime]: Cpu Time

Options[cacheCpuTime]: gauge, growright, nopercent

PageTop[cacheCpuTime]: <h1>Amount of cpu seconds consumed @ zaib_squid_proxy_server</h1>

YLegend[cacheCpuTime]: cpu seconds

ShortLegend[cacheCpuTime]: cpu seconds

LegendI[cacheCpuTime]: Mem Time&nbsp;

LegendO[cacheCpuTime]:

Legend1[cacheCpuTime]: Mem Time

Legend2[cacheCpuTime]:

Target[cacheMaxResSize]: cacheMaxResSize&cacheMaxResSize:public@localhost:3401 * 1024

MaxBytes[cacheMaxResSize]: 1000000000

Title[cacheMaxResSize]: Max Resident Size

Options[cacheMaxResSize]: gauge, growright, nopercent

PageTop[cacheMaxResSize]: <h1>Maximum Resident Size @ zaib_squid_proxy_server</h1>

YLegend[cacheMaxResSize]: Bytes

ShortLegend[cacheMaxResSize]: Bytes

LegendI[cacheMaxResSize]: Size&nbsp;

LegendO[cacheMaxResSize]:

Legend1[cacheMaxResSize]: Size

Legend2[cacheMaxResSize]:

Target[cacheCurrentUnlinkRequests]: cacheCurrentUnlinkRequests&cacheCurrentUnlinkRequests:public@localhost:3401

MaxBytes[cacheCurrentUnlinkRequests]: 1000000000

Title[cacheCurrentUnlinkRequests]: Unlinkd Requests

Options[cacheCurrentUnlinkRequests]: growright, nopercent

PageTop[cacheCurrentUnlinkRequests]: <h1>Requests given to unlinkd @ zaib_squid_proxy_server</h1>

YLegend[cacheCurrentUnlinkRequests]: requests/sec

ShortLegend[cacheCurrentUnlinkRequests]: reqs/s

LegendI[cacheCurrentUnlinkRequests]: Unlinkd requests&nbsp;

LegendO[cacheCurrentUnlinkRequests]:

Legend1[cacheCurrentUnlinkRequests]: Unlinkd requests

Legend2[cacheCurrentUnlinkRequests]:

Target[cacheCurrentUnusedFileDescrCount]:
 
cacheCurrentUnusedFileDescrCount&cacheCurrentUnusedFileDescrCount:public@localhost:3401

MaxBytes[cacheCurrentUnusedFileDescrCount]: 1000000000

Title[cacheCurrentUnusedFileDescrCount]: Available File Descriptors

Options[cacheCurrentUnusedFileDescrCount]: gauge, growright, nopercent

PageTop[cacheCurrentUnusedFileDescrCount]: <h1>Available number of file descriptors @ zaib_squid_proxy_server</h1>

YLegend[cacheCurrentUnusedFileDescrCount]: # of FDs

ShortLegend[cacheCurrentUnusedFileDescrCount]: FDs

LegendI[cacheCurrentUnusedFileDescrCount]: File Descriptors&nbsp;

LegendO[cacheCurrentUnusedFileDescrCount]:

Legend1[cacheCurrentUnusedFileDescrCount]: File Descriptors

Legend2[cacheCurrentUnusedFileDescrCount]:

Target[cacheCurrentReservedFileDescrCount]:
 
cacheCurrentReservedFileDescrCount&cacheCurrentReservedFileDescrCount:public@localhost:3401

MaxBytes[cacheCurrentReservedFileDescrCount]: 1000000000

Title[cacheCurrentReservedFileDescrCount]: Reserved File Descriptors

Options[cacheCurrentReservedFileDescrCount]: gauge, growright, nopercent

PageTop[cacheCurrentReservedFileDescrCount]: <h1>Reserved number of file descriptors @ zaib_squid_proxy_server</h1>

YLegend[cacheCurrentReservedFileDescrCount]: # of FDs

ShortLegend[cacheCurrentReservedFileDescrCount]: FDs

LegendI[cacheCurrentReservedFileDescrCount]: File Descriptors&nbsp;

LegendO[cacheCurrentReservedFileDescrCount]:

Legend1[cacheCurrentReservedFileDescrCount]: File Descriptors

Legend2[cacheCurrentReservedFileDescrCount]:

Target[cacheClients]: cacheClients&cacheClients:public@localhost:3401

MaxBytes[cacheClients]: 1000000000

Title[cacheClients]: Number of Clients

Options[cacheClients]: gauge, growright, nopercent

PageTop[cacheClients]: <h1>Number of clients accessing cache @ zaib_squid_proxy_server</h1>

YLegend[cacheClients]: clients/sec

ShortLegend[cacheClients]: clients/s

LegendI[cacheClients]: Num Clients&nbsp;

LegendO[cacheClients]:

Legend1[cacheClients]: Num Clients

Legend2[cacheClients]:

Target[cacheHttpAllSvcTime]: cacheHttpAllSvcTime.5&cacheHttpAllSvcTime.60:public@localhost:3401

MaxBytes[cacheHttpAllSvcTime]: 1000000000

Title[cacheHttpAllSvcTime]: HTTP All Service Time

Options[cacheHttpAllSvcTime]: gauge, growright, nopercent

PageTop[cacheHttpAllSvcTime]: <h1>HTTP all service time @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpAllSvcTime]: svc time (ms)

ShortLegend[cacheHttpAllSvcTime]: ms

LegendI[cacheHttpAllSvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheHttpAllSvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheHttpAllSvcTime]: Median Svc Time

Legend2[cacheHttpAllSvcTime]: Median Svc Time

Target[cacheHttpMissSvcTime]: cacheHttpMissSvcTime.5&cacheHttpMissSvcTime.60:public@localhost:3401

MaxBytes[cacheHttpMissSvcTime]: 1000000000

Title[cacheHttpMissSvcTime]: HTTP Miss Service Time

Options[cacheHttpMissSvcTime]: gauge, growright, nopercent

PageTop[cacheHttpMissSvcTime]: <h1>HTTP miss service time @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpMissSvcTime]: svc time (ms)

ShortLegend[cacheHttpMissSvcTime]: ms

LegendI[cacheHttpMissSvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheHttpMissSvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheHttpMissSvcTime]: Median Svc Time

Legend2[cacheHttpMissSvcTime]: Median Svc Time

Target[cacheHttpNmSvcTime]: cacheHttpNmSvcTime.5&cacheHttpNmSvcTime.60:public@localhost:3401

MaxBytes[cacheHttpNmSvcTime]: 1000000000

Title[cacheHttpNmSvcTime]: HTTP Near Miss Service Time

Options[cacheHttpNmSvcTime]: gauge, growright, nopercent

PageTop[cacheHttpNmSvcTime]: <h1>HTTP near miss service time @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpNmSvcTime]: svc time (ms)

ShortLegend[cacheHttpNmSvcTime]: ms

LegendI[cacheHttpNmSvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheHttpNmSvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheHttpNmSvcTime]: Median Svc Time

Legend2[cacheHttpNmSvcTime]: Median Svc Time

Target[cacheHttpHitSvcTime]: cacheHttpHitSvcTime.5&cacheHttpHitSvcTime.60:public@localhost:3401

MaxBytes[cacheHttpHitSvcTime]: 1000000000

Title[cacheHttpHitSvcTime]: HTTP Hit Service Time

Options[cacheHttpHitSvcTime]: gauge, growright, nopercent

PageTop[cacheHttpHitSvcTime]: <h1>HTTP hit service time @ zaib_squid_proxy_server</h1>

YLegend[cacheHttpHitSvcTime]: svc time (ms)

ShortLegend[cacheHttpHitSvcTime]: ms

LegendI[cacheHttpHitSvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheHttpHitSvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheHttpHitSvcTime]: Median Svc Time

Legend2[cacheHttpHitSvcTime]: Median Svc Time

Target[cacheIcpQuerySvcTime]: cacheIcpQuerySvcTime.5&cacheIcpQuerySvcTime.60:public@localhost:3401

MaxBytes[cacheIcpQuerySvcTime]: 1000000000

Title[cacheIcpQuerySvcTime]: ICP Query Service Time

Options[cacheIcpQuerySvcTime]: gauge, growright, nopercent

PageTop[cacheIcpQuerySvcTime]: <h1>ICP query service time @ zaib_squid_proxy_server</h1>

YLegend[cacheIcpQuerySvcTime]: svc time (ms)

ShortLegend[cacheIcpQuerySvcTime]: ms

LegendI[cacheIcpQuerySvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheIcpQuerySvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheIcpQuerySvcTime]: Median Svc Time

Legend2[cacheIcpQuerySvcTime]: Median Svc Time

Target[cacheIcpReplySvcTime]: cacheIcpReplySvcTime.5&cacheIcpReplySvcTime.60:public@localhost:3401

MaxBytes[cacheIcpReplySvcTime]: 1000000000

Title[cacheIcpReplySvcTime]: ICP Reply Service Time

Options[cacheIcpReplySvcTime]: gauge, growright, nopercent

PageTop[cacheIcpReplySvcTime]: <h1>ICP reply service time @ zaib_squid_proxy_server</h1>

YLegend[cacheIcpReplySvcTime]: svc time (ms)

ShortLegend[cacheIcpReplySvcTime]: ms

LegendI[cacheIcpReplySvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheIcpReplySvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheIcpReplySvcTime]: Median Svc Time

Legend2[cacheIcpReplySvcTime]: Median Svc Time

Target[cacheDnsSvcTime]: cacheDnsSvcTime.5&cacheDnsSvcTime.60:public@localhost:3401

MaxBytes[cacheDnsSvcTime]: 1000000000

Title[cacheDnsSvcTime]: DNS Service Time

Options[cacheDnsSvcTime]: gauge, growright, nopercent

PageTop[cacheDnsSvcTime]: <h1>DNS service time @ zaib_squid_proxy_server</h1>

YLegend[cacheDnsSvcTime]: svc time (ms)

ShortLegend[cacheDnsSvcTime]: ms

LegendI[cacheDnsSvcTime]: Median Svc Time (5min)&nbsp;

LegendO[cacheDnsSvcTime]: Median Svc Time (60min)&nbsp;

Legend1[cacheDnsSvcTime]: Median Svc Time

Legend2[cacheDnsSvcTime]: Median Svc Time

Target[cacheRequestHitRatio]: cacheRequestHitRatio.5&cacheRequestHitRatio.60:public@localhost:3401

MaxBytes[cacheRequestHitRatio]: 100

AbsMax[cacheRequestHitRatio]: 100

Title[cacheRequestHitRatio]: Request Hit Ratio @ zaib_squid_proxy_server

Options[cacheRequestHitRatio]: absolute, gauge, noinfo, growright, nopercent

Unscaled[cacheRequestHitRatio]: dwmy

PageTop[cacheRequestHitRatio]: <h1>Request Hit Ratio @ zaib_squid_proxy_server</h1>

YLegend[cacheRequestHitRatio]: %

ShortLegend[cacheRequestHitRatio]: %

LegendI[cacheRequestHitRatio]: Median Hit Ratio (5min)&nbsp;

LegendO[cacheRequestHitRatio]: Median Hit Ratio (60min)&nbsp;

Legend1[cacheRequestHitRatio]: Median Hit Ratio

Legend2[cacheRequestHitRatio]: Median Hit Ratio

Target[cacheRequestByteRatio]: cacheRequestByteRatio.5&cacheRequestByteRatio.60:public@localhost:3401

MaxBytes[cacheRequestByteRatio]: 100

AbsMax[cacheRequestByteRatio]: 100

Title[cacheRequestByteRatio]: Byte Hit Ratio @ zaib_squid_proxy_server

Options[cacheRequestByteRatio]: absolute, gauge, noinfo, growright, nopercent

Unscaled[cacheRequestByteRatio]: dwmy

PageTop[cacheRequestByteRatio]: <h1>Byte Hit Ratio @ zaib_squid_proxy_server</h1>

YLegend[cacheRequestByteRatio]: %

ShortLegend[cacheRequestByteRatio]:%

LegendI[cacheRequestByteRatio]: Median Hit Ratio (5min)&nbsp;

LegendO[cacheRequestByteRatio]: Median Hit Ratio (60min)&nbsp;

Legend1[cacheRequestByteRatio]: Median Hit Ratio

Legend2[cacheRequestByteRatio]: Median Hit Ratio

Target[cacheBlockingGetHostByAddr]: cacheBlockingGetHostByAddr&cacheBlockingGetHostByAddr:public@localhost:3401

MaxBytes[cacheBlockingGetHostByAddr]: 1000000000

Title[cacheBlockingGetHostByAddr]: Blocking gethostbyaddr

Options[cacheBlockingGetHostByAddr]: growright, nopercent

PageTop[cacheBlockingGetHostByAddr]: <h1>Blocking gethostbyaddr count @ zaib_squid_proxy_server</h1>

YLegend[cacheBlockingGetHostByAddr]: blocks/sec

ShortLegend[cacheBlockingGetHostByAddr]: blocks/s

LegendI[cacheBlockingGetHostByAddr]: Blocking&nbsp;

LegendO[cacheBlockingGetHostByAddr]:

Legend1[cacheBlockingGetHostByAddr]: Blocking

Legend2[cacheBlockingGetHostByAddr]:

.
Then issue following command. To get graph from new file, you ahve to run the command 3 times.

env LANG=C mrtg /etc/mrtg.cfg

then create its index file so all graphs can be accesses via single index file

indexmaker /etc/mrtg.cfg –output /var/www/mrtg/index.html –columns=1 -compact

Now browse to your mrtg folder via browser

http://yourboxip/mrtg

and you will see your graphs in action. however it will take some time to get the data as MRTG updates its counters after very 5 minutes.

.
.
You can see more samples here…

http://chrismiles.info/unix/mrtg/squidsample/
http://chrismiles.info/unix/mrtg/mrtg-squid.cfg

.
Thank you
Syed Jahanzaib

Comments (1)

Howto connect Squid Proxy with Mikrotik with Single Interface

2 Votes

This short reference guide was made on request by a creature called 'Humans' living on planet earth ;)
☻

Scenario:

We want to connect Squid proxy server with mikrotik, and Squid server have only one interface.
Mikrotik is running PPPoE Server and have 3 interfaces as follows

MIKROTIK INTERFACE EXAMPLE:

MIKROTIK have 3 interfaces as follows…
LAN = 192.168.0.1/24
WAN = 1.1.1.1/24 (gw+dns pointing to wan link
proxy-interface = 192.168.2.1/24
PPPoE Users IP Pool = 172.16.0.1-172.16.0.255

SQUID INTERFACE EXAMPLE:

SQUID proxy have only one interface as follows…
LAN (eth0) = 192.168.2.2/24
Gateway = 192.168.2.1
DNS = 192.168.2.2
.
As showed in the image below …

.
To redirect traffic from the mikrotik to Squid proxy server, we have to create a redirect rule
As showed in the example below …

.
.

Mikrotik Configuration:

CLI Version:

/ip firewall nat

add
 action=dst-nat chain=dstnat comment="Redirect only PPPoE Users to Proxy
 Server 192.168.2.2" disabled=no dst-port=80 protocol=tcp 
src-address=172.16.0.1-172.16.0.255 to-addresses=192.168.2.2 
to-ports=8080

add action=masquerade chain=srcnat comment="Default NAT rule for Internet Access" disabled=no

Also showed in the image below …

.
.
.
No IPTABLES configuration is required at squid end :D
.
Now try to browse from your client end, and you will see it in squid access.log
As showed in the image below …

DONE :)

.
.
.

TIPs and Tricks !

Just for info purposes …

How to view client original ip in squid logs instead of creepy mikrotik ip

As you have noticed that using above redirect method, client traffic is successfully routed (actually natted) to Squid proxy server. But as you have noticed that squid proxy logs is showing Mikrotik IP only, so we have no idea which client is using proxy. To view client original ip address instead of mikrotik, you have to explicitly define the WAN interface in default NAT rule so that traffic send to Proxy interface should not be natted :)
Mikrotik Default NAT rule configuration
As showed in the image below …

.
Now you can see its effect at squid logs
As showed in the image below …

.
.
Regard’s
☺☻♥
SYED JAHANZAIB
SKYPE – aacable79

Comments (12)

April 21, 2014

Howto Cache Youtube with SQUID / LUSCA and bypass Cached Videos from Mikrotik Queue [April, 2014 , zaib]

Filed under: Linux Related, Mikrotik Related — Tags: aacable howto cache youtube, cache youtube with squid, cache youtube with squid lusca, howto cache youtube, Youtube, youtube pakistan — Syed Jahanzaib / Pinochio~:) @ 4:34 PM

63 Votes

LAST UPDATED: 22nd April, 2014 / 0800 hours pkst

Youtube caching is working as of 22nd april, 2014, tested and confirmed

[1st version > 11th January, 2011]

What is LUSCA / SQUID ?

LUSCA is an advance version or Fork of SQUID 2. The Lusca project aims to fix the shortcomings in the Squid-2. It also supports a variety of clustering protocols. By Using it, you can cache some dynamic contents that you previously can’t do with the squid.

For example [jz]
# Video Cachingi.e Youtube / tube etc . . .
# Windows / Linux Updates / Anti-virus , Anti-Malware i.e. Avira/ Avast / MBAM etc . . .
# Well known sites i.e. facebook / google / yahoo etch. etch.
# Download caching mp3′s/mpeg/avi etc . . .

Advantages of Youtube Caching !!!

In most part of the world, bandwidth is very expensive, therefore it is (in some scenarios) very useful to Cache Youtube videos or any other flash videos, so if one of user downloads video / flash file , why again the same user or other user can’t download the same file from the CACHE, why he sucking the internet pipe for same content again n again?
Peoples on same LAN ,sometimes watch similar videos. If I put some youtube video link on on FACEBOOK, TWITTER or likewise , and all my friend will watch that video and that particular video gets viewed many times in few hours. Usually the videos are shared over facebook or other social networking sites so the chances are high for multiple hits per popular videos for my lan users / friends / zaib.
This is the reason why I wrote this article. I have implemented Ubuntu with LUSCA/ Squid on it and its working great, but to achieve some results you need to have some TB of storage drives in your proxy machine.

Disadvantages of Youtube Caching !!!

The chances, that another user will watch the same video, is really slim. if I search for something specific on youtube, i get more then hundreds of search results for same video. What is the chance that another user will search for the same thing, and will click on the same link / result? Youtube hosts more than 10 million videos. Which is too much to cache anyway. You need lot of space to cache videos. Also accordingly you will be needing ultra modern fast hardware with tons of RAM to handle such kind of cache giant. anyhow Try it
We will divide this article in following Sections
1# Installing SQUID / LUSCA in UBUNTU
2# Setting up SQUID / LUSCA Configuration files
3# Performing some Tests, testing your Cache HIT
4# Using ZPH TOS to deliver cached contents to clients vai mikrotik at full LAN speed, Bypassing the User Queue for cached contents.

.
.

1# Installing SQUID / LUSCA in UBUNTU

I assume your ubuntu box have 2 interfaces configured, one for LAN and second for WAN. You have internet sharing already configured. Now moving on to LUSCA / SQUID installation.
Here we go ….
Issue following command. Remember that its a one go command (which have multiple commands inside it so it may take a bit long to update, install and compile all required items)

apt-get update &&

apt-get install gcc -y &&

apt-get install build-essential -y &&

apt-get install libstdc++6 -y &&

apt-get install unzip -y &&

apt-get install bzip2 -y &&

apt-get install sharutils -y &&

apt-get install ccze -y &&

apt-get install libzip-dev -y &&

apt-get install automake1.9 -y &&

apt-get install acpid -y &&

apt-get install libfile-readbackwards-perl -y &&

apt-get install dnsmasq -y &&

cd /tmp &&

wget -c http://wifismartzone.com/files/linux_related/lusca/LUSCA_HEAD-r14942.tar.gz &&

tar -xvzf LUSCA_HEAD-r14942.tar.gz &&

cd /tmp/LUSCA_HEAD-r14942 &&

./configure \

--prefix=/usr \

--exec_prefix=/usr \

--bindir=/usr/sbin \

--sbindir=/usr/sbin \

--libexecdir=/usr/lib/squid \

--sysconfdir=/etc/squid \

--localstatedir=/var/spool/squid \

--datadir=/usr/share/squid \

--enable-async-io=24 \

--with-aufs-threads=24 \

--with-pthreads \

--enable-storeio=aufs \

--enable-linux-netfilter \

--enable-arp-acl \

--enable-epoll \

--enable-removal-policies=heap \

--with-aio \

--with-dl \

--enable-snmp \

--enable-delay-pools \

--enable-htcp \

--enable-cache-digests \

--disable-unlinkd \

--enable-large-cache-files \

--with-large-files \

--enable-err-languages=English \

--enable-default-err-language=English \

--enable-referer-log \

--with-maxfd=65536 &&

make &&

make install

EDIT SQUID.CONF FILE

Now edit SQUID.CONF file by using following command

nano /etc/squid/squid.conf

and Delete all previously lines , and paste the following lines.
Remember following squid.conf is not very neat and clean , you will find many un necessary junk entries in it, but as I didn’t had time to clean them all, so you may clean them as per your targets and goals.
Now Paste the following data … (in squid.conf)

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

#######################################################

## Squid_LUSCA configuration Starts from Here ...     #

## Thanks to Mr. Safatah [INDO] for sharing Configs   #

## Syed.Jahanzaib / 22nd April, 2014                  #

## http://aacable.wordpress.com / aacable@hotmail.com #

#######################################################

# HTTP Port for SQUID Service

http_port 8080 transparent

server_http11 on

# Cache Pee, for parent proxy if you ahve any, or ignore it.

#cache_peer x.x.x.x parent 8080 0

# Various Logs/files location

pid_filename /var/run/squid.pid

coredump_dir /var/spool/squid/

error_directory /usr/share/squid/errors/English

icon_directory /usr/share/squid/icons

mime_table /etc/squid/mime.conf

access_log daemon:/var/log/squid/access.log squid

cache_log none

#debug_options ALL,1 22,3 11,2 #84,9

referer_log /var/log/squid/referer.log

cache_store_log none

store_dir_select_algorithm  round-robin

logfile_daemon /usr/lib/squid/logfile-daemon

logfile_rotate 1

# Cache Policy

cache_mem 6 MB

maximum_object_size_in_memory 0 KB

memory_replacement_policy heap GDSF

cache_replacement_policy heap LFUDA

minimum_object_size 0 KB

maximum_object_size 10 GB

cache_swap_low 98

cache_swap_high 99

# Cache Folder Path, using 5GB for test

cache_dir aufs /cache-1 5000 16 256

# ACL Section

acl all src all

acl manager proto cache_object

acl localhost src 127.0.0.1/32

acl to_localhost dst 127.0.0.0/8

acl localnet src 10.0.0.0/8            # RFC1918 possible internal network

acl localnet src 172.16.0.0/12        # RFC1918 possible internal network

acl localnet src 192.168.0.0/16        # RFC1918 possible internal network

acl localnet src 125.165.92.1        # RFC1918 possible internal network

acl SSL_ports port 443

acl Safe_ports port 80                # http

acl Safe_ports port 21                # ftp

acl Safe_ports port 443                # https

acl Safe_ports port 70                # gopher

acl Safe_ports port 210                # wais

acl Safe_ports port 1025-65535        # unregistered ports

acl Safe_ports port 280                # http-mgmt

acl Safe_ports port 488                # gss-http

acl Safe_ports port 591                # filemaker

acl Safe_ports port 777                # multiling http

acl CONNECT method CONNECT

acl purge method PURGE

acl snmppublic snmp_community public

acl range dstdomain .windowsupdate.com

range_offset_limit -1 KB range

#===========================================================================

#    Loading Patch

acl DENYCACHE urlpath_regex \.(ini|ui|lst|inf|pak|ver|patch|md5|cfg|lst|list|rsc|log|conf|dbd|db)$

acl DENYCACHE urlpath_regex (notice.html|afs.dat|dat.asp|patchinfo.xml|version.list|iepngfix.htc|updates.txt|patchlist.txt)

acl DENYCACHE urlpath_regex (pointblank.css|login_form.css|form.css|noupdate.ui|ahn.ui|3n.mh)$

acl DENYCACHE urlpath_regex (Loader|gamenotice|sources|captcha|notice|reset)

no_cache deny DENYCACHE

range_offset_limit 1 MB !DENYCACHE

uri_whitespace strip

#===========================================================================

#    Rules to block few Advertising sites

acl ads url_regex -i .youtube\.com\/ad_frame?

acl ads url_regex -i .(s|s[0-90-9])\.youtube\.com

acl ads url_regex -i .googlesyndication\.com

acl ads url_regex -i .doubleclick\.net

acl ads url_regex -i ^http:\/\/googleads\.*

acl ads url_regex -i ^http:\/\/(ad|ads|ads[0-90-9]|ads\d|kad|a[b|d]|ad\d|adserver|adsbox)\.[a-z0-9]*\.[a-z][a-z]*

acl ads url_regex -i ^http:\/\/openx\.[a-z0-9]*\.[a-z][a-z]*

acl ads url_regex -i ^http:\/\/[a-z0-9]*\.openx\.net\/

acl ads url_regex -i ^http:\/\/[a-z0-9]*\.u-ad\.info\/

acl ads url_regex -i ^http:\/\/adserver\.bs\/

acl ads url_regex -i !^http:\/\/adf\.ly

http_access deny ads

http_reply_access deny ads

#deny_info http://yoursite/yourad,htm ads

#==== End Rules: Advertising ====

strip_query_terms off

acl yutub url_regex -i .*youtube\.com\/.*$

acl yutub url_regex -i .*youtu\.be\/.*$

logformat squid1 %{Referer}>h %ru

access_log /var/log/squid/yt.log squid1 yutub

# ==== Custom Option REWRITE ====

acl store_rewrite_list urlpath_regex \/(get_video\?|videodownload\?|videoplayback.*id)

acl store_rewrite_list urlpath_regex \.(mp2|mp3|mid|midi|mp[234]|wav|ram|ra|rm|au|3gp|m4r|m4a)\?

acl store_rewrite_list urlpath_regex \.(mpg|mpeg|mp4|m4v|mov|avi|asf|wmv|wma|dat|flv|swf)\?

acl store_rewrite_list urlpath_regex \.(jpeg|jpg|jpe|jp2|gif|tiff?|pcx|png|bmp|pic|ico)\?

acl store_rewrite_list urlpath_regex \.(chm|dll|doc|docx|xls|xlsx|ppt|pptx|pps|ppsx|mdb|mdbx)\?

acl store_rewrite_list urlpath_regex \.(txt|conf|cfm|psd|wmf|emf|vsd|pdf|rtf|odt)\?

acl store_rewrite_list urlpath_regex \.(class|jar|exe|gz|bz|bz2|tar|tgz|zip|gzip|arj|ace|bin|cab|msi|rar)\?

acl store_rewrite_list urlpath_regex \.(htm|html|mhtml|css|js)\?

acl store_rewrite_list_web url_regex ^http:\/\/([A-Za-z-]+[0-9]+)*\.[A-Za-z]*\.[A-Za-z]*

acl store_rewrite_list_web_CDN url_regex ^http:\/\/[a-z]+[0-9]\.google\.com doubleclick\.net

acl store_rewrite_list_path urlpath_regex \.(mp2|mp3|mid|midi|mp[234]|wav|ram|ra|rm|au|3gp|m4r|m4a)$

acl store_rewrite_list_path urlpath_regex \.(mpg|mpeg|mp4|m4v|mov|avi|asf|wmv|wma|dat|flv|swf)$

acl store_rewrite_list_path urlpath_regex \.(jpeg|jpg|jpe|jp2|gif|tiff?|pcx|png|bmp|pic|ico)$

acl store_rewrite_list_path urlpath_regex \.(chm|dll|doc|docx|xls|xlsx|ppt|pptx|pps|ppsx|mdb|mdbx)$

acl store_rewrite_list_path urlpath_regex \.(txt|conf|cfm|psd|wmf|emf|vsd|pdf|rtf|odt)$

acl store_rewrite_list_path urlpath_regex \.(class|jar|exe|gz|bz|bz2|tar|tgz|zip|gzip|arj|ace|bin|cab|msi|rar)$

acl store_rewrite_list_path urlpath_regex \.(htm|html|mhtml|css|js)$

acl getmethod method GET

storeurl_access deny !getmethod

#this is not related to youtube video its only for CDN pictures

storeurl_access allow store_rewrite_list_web_CDN

storeurl_access allow store_rewrite_list_web store_rewrite_list_path

storeurl_access allow store_rewrite_list

storeurl_access deny all

storeurl_rewrite_program /etc/squid/storeurl.pl

storeurl_rewrite_children 10

storeurl_rewrite_concurrency 40

# ==== End Custom Option REWRITE ====

#===========================================================================

#    Custom Option REFRESH PATTERN

#===========================================================================

refresh_pattern
 (get_video\?|videoplayback\?|videodownload\?|\.flv\?|\.fid\?) 43200 99%
 43200 override-expire ignore-reload ignore-must-revalidate 
ignore-private

refresh_pattern
 -i (get_video\?|videoplayback\?|videodownload\?) 5259487 999% 5259487 
override-expire ignore-reload reload-into-ims ignore-no-cache 
ignore-private

# -- refresh pattern for specific sites -- #

refresh_pattern ^http://*.jobstreet.com.*/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache

refresh_pattern ^http://*.indowebster.com.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth

refresh_pattern ^http://*.21cineplex.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth

refresh_pattern ^http://*.atmajaya.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth

refresh_pattern ^http://*.kompas.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.theinquirer.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth

refresh_pattern ^http://*.blogspot.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.wordpress.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache

refresh_pattern ^http://*.photobucket.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.tinypic.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.imageshack.us/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.kaskus.*/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://www.kaskus.com/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.detik.*/.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.detiknews.*/*.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://video.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://static.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.friendster.com/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache ignore-auth

refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://apps.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://static.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://cooking.game.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern -i http://[^a-z\.]*onemanga\.com/? 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://media?.onemanga.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.google.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.forummikrotik.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

refresh_pattern ^http://*.linux.or.id/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

# -- refresh pattern for extension -- #

refresh_pattern
 -i \.(mp2|mp3|mid|midi|mp[234]|wav|ram|ra|rm|au|3gp|m4r|m4a)(\?.*|$) 
5259487 999% 5259487 override-expire ignore-reload reload-into-ims 
ignore-no-cache ignore-private

refresh_pattern
 -i \.(mpg|mpeg|mp4|m4v|mov|avi|asf|wmv|wma|dat|flv|swf)(\?.*|$) 5259487
 999% 5259487 override-expire ignore-reload reload-into-ims 
ignore-no-cache ignore-private

refresh_pattern
 -i \.(jpeg|jpg|jpe|jp2|gif|tiff?|pcx|png|bmp|pic|ico)(\?.*|$) 5259487 
999% 5259487 override-expire ignore-reload reload-into-ims 
ignore-no-cache ignore-private

refresh_pattern
 -i \.(chm|dll|doc|docx|xls|xlsx|ppt|pptx|pps|ppsx|mdb|mdbx)(\?.*|$) 
5259487 999% 5259487 override-expire ignore-reload reload-into-ims 
ignore-no-cache ignore-private

refresh_pattern
 -i \.(txt|conf|cfm|psd|wmf|emf|vsd|pdf|rtf|odt)(\?.*|$) 5259487 999% 
5259487 override-expire ignore-reload reload-into-ims ignore-no-cache 
ignore-private

refresh_pattern
 -i 
\.(class|jar|exe|gz|bz|bz2|tar|tgz|zip|gzip|arj|ace|bin|cab|msi|rar)(\?.*|$)
 5259487 999% 5259487 override-expire ignore-reload reload-into-ims 
ignore-no-cache ignore-private

refresh_pattern -i \.(htm|html|mhtml|css|js)(\?.*|$) 1440 90% 86400 override-expire ignore-reload reload-into-ims

#===========================================================================

refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

refresh_pattern ^gopher: 1440 0% 1440

refresh_pattern ^ftp: 10080 95% 10080 override-lastmod reload-into-ims

refresh_pattern . 0 20% 10080 override-lastmod reload-into-ims

http_access allow manager localhost

http_access deny manager

http_access allow purge localhost

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localnet

http_access allow all

http_access deny all

icp_access allow localnet

icp_access deny all

icp_port 0

buffered_logs on

acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]

upgrade_http0.9 deny shoutcast

acl apache rep_header Server ^Apache

broken_vary_encoding allow apache

forwarded_for off

header_access From deny all

header_access Server deny all

header_access Link deny all

header_access Via deny all

header_access X-Forwarded-For deny all

httpd_suppress_version_string on

shutdown_lifetime 10 seconds

snmp_port 3401

snmp_access allow snmppublic all

dns_timeout 1 minutes

dns_nameservers 8.8.8.8 8.8.4.4

fqdncache_size 5000    #16384

ipcache_size 5000    #16384

ipcache_low 98

ipcache_high 99

log_fqdn off

log_icp_queries off

memory_pools off

maximum_single_addr_tries 2

retry_on_error on

icp_hit_stale on

strip_query_terms off

query_icmp on

reload_into_ims on

emulate_httpd_log off

negative_ttl 0 seconds

pipeline_prefetch on

vary_ignore_expire on

half_closed_clients off

high_page_fault_warning 2

nonhierarchical_direct on

prefer_direct off

cache_mgr aacable@hotmail.com

cache_effective_user proxy

cache_effective_group proxy

visible_hostname proxy.zaib

unique_hostname syed_jahanzaib

cachemgr_passwd none all

client_db on

max_filedescriptors 8192

# ZPH config Marking Cache Hit, so cached contents can be delivered at full lan speed via MT

zph_mode tos

zph_local 0x30

zph_parent 0

zph_option 136

.
.

SOTEURL.PL

Now We have to create an important file name storeurl.pl , which is very important and actually it does the
main job to redirect and pull video from cache.

touch /etc/squid/storeurl.pl

chmod +x /etc/squid/storeurl.pl

nano /etc/squid/storeurl.pl

Now paste the following lines, then Save and exit.

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

#!/usr/bin/perl

#######################################################

## Squid_LUSCA storeurl.pl starts from Here ...     #

## Thanks to Mr. Safatah [INDO] for sharing Configs  #

## Syed.Jahanzaib / 22nd April, 2014 #

## http://aacable.wordpress.com / aacable@hotmail.com #

#######################################################

$|=1;

while (<>) {

@X = split;

$x = $X[0] . " ";

##=================

## Encoding YOUTUBE

##=================

if ($X[1] =~ m/^http\:\/\/.*(youtube|google).*videoplayback.*/){

@itag = m/[&?](itag=[0-9]*)/;

@CPN = m/[&?]cpn\=([a-zA-Z0-9\-\_]*)/;

@IDS = m/[&?]id\=([a-zA-Z0-9\-\_]*)/;

$id = &GetID($CPN[0], $IDS[0]);

@range = m/[&?](range=[^\&\s]*)/;

print $x . "http://fathayu/" . $id . "&@itag@range\n";

} elsif ($X[1] =~ m/(youtube|google).*videoplayback\?/ ){

@itag = m/[&?](itag=[0-9]*)/;

@id = m/[&?](id=[^\&]*)/;

@redirect = m/[&?](redirect_counter=[^\&]*)/;

print $x . "http://fathayu/";

# ==========================================================================

#    VIMEO

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/av\.vimeo\.com\/\d+\/\d+\/(.*)\?/) {

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/pdl\.vimeocdn\.com\/\d+\/\d+\/(.*)\?/) {

print $x . "http://fathayu/" . $1 . "\n";

# ==========================================================================

#    DAILYMOTION

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/proxy-[0-9]{1}\.dailymotion\.com\/(.*)\/(.*)\/video\/\d{3}\/\d{3}\/(.*.flv)/) {

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/vid[0-9]\.ak\.dmcdn\.net\/(.*)\/(.*)\/video\/\d{3}\/\d{3}\/(.*.flv)/) {

print $x . "http://fathayu/" . $1 . "\n";

# ==========================================================================

#   YIMG

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/(.*yimg.com)\/\/(.*)\/([^\/\?\&]*\/[^\/\?\&]*\.[^\/\?\&]{3,4})(\?.*)?$/) {

print $x . "http://fathayu/" . $3 . "\n";

# ==========================================================================

#   YIMG DOUBLE

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/(.*?)\.yimg\.com\/(.*?)\.yimg\.com\/(.*?)\?(.*)/) {

print $x . "http://fathayu/" . $3 . "\n";

# ==========================================================================

#   YIMG WITH &sig=

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/(.*?)\.yimg\.com\/(.*)/) {

@y = ($1,$2);

$y[0] =~ s/[a-z]+[0-9]+/cdn/;

$y[1] =~ s/&sig=.*//;

print $x . "http://fathayu/" . $y[0] . ".yimg.com/" . $y[1] . "\n";

# ==========================================================================

#    YTIMG

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/i[1-4]\.ytimg\.com(.*)/) {

print $x . "http://fathayu/" . $1  . "\n";

# ==========================================================================

#   PORN Movies

# ==========================================================================

} elsif (($X[1] =~ /maxporn/) && (m/^http:\/\/([^\/]*?)\/(.*?)\/([^\/]*?)(\?.*)?$/)) {

print $x . "http://" . $1 . "/SQUIDINTERNAL/" . $3 . "\n";

#   Domain/path/.*/path/filename

}
 elsif (($X[1] =~ /fucktube/) && 
(m/^http:\/\/(.*?)(\.[^\.\-]*?[^\/]*\/[^\/]*)\/(.*)\/([^\/]*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/))
 {

@y = ($1,$2,$4,$5,$6);

$y[0] =~ s/(([a-zA-A]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;

print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "." . $y[4] . "\n";

#   Like porn hub variables url and center part of the path, filename etention 3 or 4 with or without ? at the end

}
 elsif (($X[1] =~ /tube8|pornhub|xvideos/) && 
(m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?(\.[a-z]*)?)\.([a-z]*[0-9]?\.[^\/]{3}\/[a-z]*)(.*?)((\/[a-z]*)?(\/[^\/]*){4}\.[^\/\?]{3,4})(\?.*)?$/))
 {

print $x . "http://cdn." . $4 . $6 . "\n";

}
 elsif (($u =~ 
/tube8|redtube|hardcore-teen|pornhub|tubegalore|xvideos|hostedtube|pornotube|redtubefiles/)
 && 
(m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?(\.[a-z]*)?)\.([a-z]*[0-9]?\.[^\/]{3}\/[a-z]*)(.*?)((\/[a-z]*)?(\/[^\/]*){4}\.[^\/\?]{3,4})(\?.*)?$/))
 {

print $x . "http://cdn." . $4 . $6 . "\n";

#   acl store_rewrite_list url_regex -i \.xvideos\.com\/.*(3gp|mpg|flv|mp4)

#  
 refresh_pattern -i \.xvideos\.com\/.*(3gp|mpg|flv|mp4) 1440 99% 14400 
override-expire override-lastmod ignore-no-cache ignore-private 
reload-into-ims ignore-must-revalidate ignore-reload store-stale

# ==========================================================================

} elsif ($X[1] =~ m/^http:\/\/.*\.xvideos\.com\/.*\/([\w\d\-\.\%]*\.(3gp|mpg|flv|mp4))\?.*/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\d]+\.[\d]+\.[\d]+\.[\d]+\/.*\/xh.*\/([\w\d\-\.\%]*\.flv)/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\d]+\.[\d]+\.[\d]+\.[\d]+.*\/([\w\d\-\.\%]*\.flv)\?start=0/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/.*\.youjizz\.com.*\/([\w\d\-\.\%]*\.(mp4|flv|3gp))\?.*/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\.\%]*\.keezmovies[\w\d\-\.\%]*\.com.*\/([\w\d\-\.\%]*\.(mp4|flv|3gp|mpg|wmv))\?.*/){

print $x . "http://fathayu/" . $1 . $2 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\.\%]*\.tube8[\w\d\-\.\%]*\.com.*\/([\w\d\-\.\%]*\.(mp4|flv|3gp|mpg|wmv))\?.*/) {

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\.\%]*\.youporn[\w\d\-\.\%]*\.com.*\/([\w\d\-\.\%]*\.(mp4|flv|3gp|mpg|wmv))\?.*/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\.\%]*\.spankwire[\w\d\-\.\%]*\.com.*\/([\w\d\-\.\%]*\.(mp4|flv|3gp|mpg|wmv))\?.*/) {

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\.\%]*\.pornhub[\w\d\-\.\%]*\.com.*\/([[\w\d\-\.\%]*\.(mp4|flv|3gp|mpg|wmv))\?.*/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif ($X[1] =~ m/^http:\/\/[\w\d\-\_\.\%\/]*.*\/([\w\d\-\_\.]+\.(flv|mp3|mp4|3gp|wmv))\?.*cdn\_hash.*/){

print $x . "http://fathayu/" . $1 . "\n";

} elsif (($X[1] =~ /maxporn/) && (m/^http:\/\/([^\/]*?)\/(.*?)\/([^\/]*?)(\?.*)?$/)) {

print $x . "http://fathayu/" . $1 . "/SQUIDINTERNAL/" . $3 . "\n";

}
 elsif (($X[1] =~ /fucktube/) && 
(m/^http:\/\/(.*?)(\.[^\.\-]*?[^\/]*\/[^\/]*)\/(.*)\/([^\/]*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/))
 {

@y = ($1,$2,$4,$5,$6);

$y[0] =~ s/(([a-zA-Z]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;

print $x . "http://fathayu/" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "." . $y[4] . "\n";

}
 elsif (($X[1] =~ /media[0-9]{1,5}\.youjizz/) && 
(m/^http:\/\/(.*?)(\.[^\.\-]*?\.[^\/]*)\/(.*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/))
 {

@y = ($1,$2,$4,$5);

$y[0] =~ s/(([a-zA-Z]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;

print $x . "http://fathayu/" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# ==========================================================================

#   Filehippo

# ==========================================================================

} elsif (($X[1] =~ /filehippo/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-z0-9]{3,4})(\?.*)?/)) {

@y = ($1,$2,$4,$5);

$y[0] =~ s/[a-z0-9]{2,5}/cdn./;

print $x . "http://fathayu/" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

} elsif (($X[1] =~ /filehippo/) && (m/^http:\/\/(.*?)(\.[^\/]*?)\/(.*?)\/([^\?\&\=]*)\.([\w\d]{2,4})\??.*$/)) {

@y = ($1,$2,$4,$5);

$y[0] =~ s/([a-z][0-9][a-z]dlod[\d]{3})|((cache|cdn)[-\d]*)|([a-zA-Z]+-?[0-9]+(-[a-zA-Z]*)?)/cdn/;

print $x . "http://fathayu/" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

} elsif ($X[1] =~ m/^http:\/\/.*filehippo\.com\/.*\/([\d\w\%\.\_\-]+\.(exe|zip|cab|msi|mru|mri|bz2|gzip|tgz|rar|pdf))/){

$y=$1;

for ($y) {

s/%20//g;

}

print $x . "http://fathayu//" . $y . "\n";

} elsif (($X[1] =~ /filehippo/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-z0-9]{3,4})(\?.*)?/)) {

@y = ($1,$2,$4,$5);

$y[0] =~ s/[a-z0-9]{2,5}/cdn./;

print $x . "http://fathayu/" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# ==========================================================================

#   4shared preview

# ==========================================================================

}
 elsif ($X[1] =~ 
m/^http:\/\/[a-z]{2}\d{3}\.4shared\.com\/img\/\d+\/\w+\/dlink__2Fdownload_2F.*_3Ftsid_(\w+)-\d+-\w+_26lgfp_3D1000_26sbsr_\w+\/preview.mp3/)
 {

print $x . "http://fathayu/" . $3 . "\n";

} else {

print $x . $X[1] . "\n";

}

}

sub GetID

{

$id = "";

use File::ReadBackwards;

my $lim = 200 ;

my $ref_log = File::ReadBackwards->new('/var/log/squid/referer.log');

while (defined($line = $ref_log->readline))

{

if ($line =~ m/.*youtube.*\/watch\?.*v=([a-zA-Z0-9\-\_]*).*\s.*id=$IDS[0].*/){

$id = $1;

last;

}

if ($line =~ m/.*youtube.*\/.*cpn=$CPN[0].*[&](video_id|docid|v)=([a-zA-Z0-9\-\_]*).*/){

$id = $2;

last;

}

if ($line =~ m/.*youtube.*\/.*[&?](video_id|docid|v)=([a-zA-Z0-9\-\_]*).*cpn=$CPN[0].*/){

$id = $2;

last;

}

last if --$lim <= 0;

}

if ($id eq ""){

$id = $IDS[0];

}

$ref_log->close();

return $id;

}

### STOREURL.PL ENDS HERE ###

INITIALIZE CACHE and LOG FOLDER …

Now create CACHE folder (here I used test in local drive)

# Log Folder and assign permissions

mkdir /var/log/squid

chown proxy:proxy /var/log/squid/

# Cache Folder

mkdir /cache-1

chown proxy:proxy /cache-1

#Now initialize cache dir by

squid -z

START SQUID SERVICE

Now start SQUID service by following command

squid

and look for any error or termination it may get. If all ok, just press enter few times and you will be back to command prompt.
to verify if squid is running ok issue following command and look for squid instance, there should be 10+ instance for the squid process

ps aux |grep squid

Something like below …

TIP:

To start SQUID Server in Debug mode, to check any erros, use following

squid -d1N

TEST time ….

It’s time to hit the ROAD and do some tests….

YOUTUBE TEST

Open Youtube and watch any Video. After complete download, Check the same video from another client. You will notice that it download very quickly (youtueb video is saved in chunks of 1.7mb each, so after completing first chunk, it will stop, if a user continue to watch the same video, it will serve second chunk and so on , you can watch the bar moving fast without using internet data.
As Shown in the example Below . . .

.

.

FILEHIPPO TEST [ZAIB]

As Shown in the example Below . . .

MUSIC DOWNLOAD TEST

Now test any music download. For example Go to
http://www.apniisp.com/songs/indian-movie-songs/ladies-vs-ricky-bahl/690/1.html
As Shown in the example Below . . .

and download any song , after its downloaded, goto 2nd client pc, and download the same song, and monitor the Squid access LOG. You will see cache hit TPC_HIT for this song.
As Shown in the example Below . . .

EXE / PROGRAM DOWNLOAD TEST

Now test any .exe file download.
Goto http://www.rarlabs.com and download any package. After Download completes, goto 2nd client pc , and download the same file again. and monitor the Squid access LOG. You will see cache hit TPC_HIT for this file.
As Shown in the example Below . . .

SQUID LOGS

Other methods are as follow (I will update following (squid 2.7) article soon)
http://aacable.wordpress.com/2012/01/19/youtube-caching-with-squid-2-7-using-storeurl-pl/
http://aacable.wordpress.com/2012/08/13/youtube-caching-with-squid-nginx/
.
.
.

MIKROTIK with SQUID/ZPH: how to bypass Squid Cache HIT object with Queues Tree in RouterOS 5.x and 6.x

aacable@hotmail.com

Using Mikrotik, we can redirect HTTP traffic to SQUID proxy Server, We can also control user bandwidth, but its a good idea to deliver the already cached content to user at full lan speed, that’s why we setup cache server for, to save bandwidth and have fast browsing experience , right :p , So how can we do it in mikrotik that cache content should be delivered to users at unlimited speed, no queue on cache content. Here we go.

By using ZPH directives , we will mark cache content, so that it can later pick by Mikrotik.

Basic requirement is that Squid must be running in transparent mode, can be done via iptables and squid.conf directives.
I am using UBUNTU squid 2.7 , (in ubuntu , apt-get install squid will install squid 2.7 by default which is gr8 for our work)
Add these lines in SQUID.CONF

#===============================================================================

#ZPH for SQUID 2.7 (Default in ubuntu 10.4) / Syed Jahanzaib aacable@hotmail.com

#===============================================================================

tcp_outgoing_tos 0x30 lanuser [lanuser is ACL for local network, change it to match your's]

zph_mode tos

zph_local 0x30

zph_parent 0

zph_option 136

Use following if you have squid 3.1.19

#======================================================

#ZPH for SQUID 3.1.19 (Default in ubuntu 12.4) / Syed Jahanzaib aacable@hotmail.com

#======================================================

# ZPH for Squid 3.1.19

qos_flows local-hit=0x30

That’s it for SQUID, Now moving on to Mikrotik box ,
Add following rules,
↓
↓

# Marking packets with DSCP (for MT 5.x) for cache hit content coming from SQUID Proxy

/ip
 firewall mangle add action=mark-packet chain=prerouting disabled=no 
dscp=12 new-packet-mark=proxy-hit passthrough=no comment="Mark Cache Hit
 Packets / aacable@hotmail.com"

/queue
 tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no 
limit-at=0 max-limit=0 name=pmark packet-mark=proxy-hit 
parent=global-out priority=8 queue=default

↓
↓

# Marking packets with DSCP (for MT 6.x) for cache hit content coming from SQUID Proxy

/ip
 firewall mangle add action=mark-packet chain=prerouting 
comment="MARK_CACHE_HIT_FROM_PROXY_ZAIB" disabled=no dscp=12 
new-packet-mark=proxy passthrough=no

/queue simple

add
 max-limit=100M/100M name="ZPH-Proxy Cache Hit Simple Queue / Syed 
Jahanzaib >aacable@hotmail.com" packet-marks=zph-hit priority=1/1 
target="" total-priority=1

MAKE SURE YOU MOVE THE SIMPLE QUEUE ABOVE ALL OTHER QUEUES :D
.

Now every packet which is marked by SQUID CACHE_HIT, will be delivered to user at Full lan speed, rest of traffic will be restricted by user Queue.
↓
↓

TROUBLESHOOTING:

the above config is fully tested with UBUNTU SQUID 2.7 and FEDORA 10 with LUSCA
Make sure your squid is marking TOS for cache hit packets. You can check it via TCPDUMP

tcpdump -vni eth0 | grep ‘tos 0×30′

↓
(eht0 = LAN connected interface)
Can you see something like ???
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
20:25:07.961722 IP (tos 0×30, ttl 64, id 45167, offset 0, flags [DF], proto TCP (6), length 409)
20:25:07.962059 IP (tos 0×30, ttl 64, id 45168, offset 0, flags [DF], proto TCP (6), length 1480)
192 packets captured
195 packets received by filter
0 packets dropped by kernel
_________________________________
↓
↓
Regard’s

Waseem Raaj

Regard’s
Waseem Raaj

Search This Blog

Networking Origination

SQUID Proxy Server Monitoring with MRTG

April 21, 2014

Comments

Post a Comment

Popular posts from this blog

How to Ubiquiti M5 / M2 devices Enable compliance test option (unlock all frequencies)

DMASOFTLAB RADIUS MANAGER BILLING SYSTEM v 4.1 Finally Released

How To Configure Nano Station M2 As Access point