Ubuntu 23.04 Proxy サーバーSquidを構築する手順

環境

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 23.04
Release: 23.04
Codename: lunar
# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 23.04 Release: 23.04 Codename: lunar
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 23.04
Release: 23.04
Codename: lunar

操作方法
1.Squid をインストールします

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
# apt -y install squid
# apt -y install squid
# apt -y install squid

 

2.一般的なフォワードプロキシとして設定します。
1).1341行目 内部用 ACL を定義する

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged)) machines
acl ark_localnet src 10.0.0.0/24 #追記
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged)) machines acl ark_localnet src 10.0.0.0/24 #追記
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged)) machines
acl ark_localnet src 10.0.0.0/24 #追記

2).1541行目 コメントを解除する
修正前
#http_access deny to_localhost

修正後
http_access deny to_localhost

3) 1552行目 コメント化して自身の内部用 ACL を追記する
修正前
http_access allow localhost
修正後
#http_access allow localhost

ACLを追記
http_access allow ark_localnet

4).5943行目 リクエストを追記する

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
request_header_access Referer deny all
request_header_access X-Forwarded-For deny all
request_header_access Via deny all
request_header_access Cache-Control deny all
request_header_access Referer deny all request_header_access X-Forwarded-For deny all request_header_access Via deny all request_header_access Cache-Control deny all
request_header_access Referer deny all
request_header_access X-Forwarded-For deny all
request_header_access Via deny all
request_header_access Cache-Control deny all

5).下記を修正する
修正前
# forwarded_for on

修正後
forwarded_for off

3.squildを再起動する

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
# systemctl restart squid
# systemctl restart squid
# systemctl restart squid

 

Ubuntu 23.04

Posted by arkgame