-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathserver-setup.readme
More file actions
32 lines (22 loc) · 844 Bytes
/
Copy pathserver-setup.readme
File metadata and controls
32 lines (22 loc) · 844 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
sudo apt install squid
open sudo nano /etc/squid/squid.conf
add http_port [port-number]
modify http_access deny all to http_access allow all
save and done
```terminal
sudo ulimit -n 65536
you can set persistent connections
```squid config
client_persistent_connections on
server_persistent_connections on
You can optimize OS open files
```term
hard nofile 65536
soft nofile 65536
sudo mkdir /etc/squid/ssl_cert
sudo chmod 700 /etc/squid/ssl_cert
sudo openssl genrsa -out /etc/squid/ssl_cert/myCA.key 2048
sudo openssl req -new -x509 -days 365 -key /etc/squid/ssl_cert/myCA.key -out /etc/squid/ssl_cert/myCA.pem -subj "/C=US/ST=State/L=City/O=Organization/OU=Department/CN=ProxyCA"
sudo chown -R proxy:proxy /etc/squid/ssl_cert
sudo cp /etc/squid/ssl_cert/myCA.pem /usr/local/share/ca-certificates/myCA.crt
sudo update-ca-certificates