Здравствуйте! Стоит сввязка squid3 + squidguard + с-icap + squidclamav. Настраивал долго, но не уверен что сквид работает верно. Так же наблюдается заметное снижение скорости интернета, когда запросы идут через прокси...а если еще clamav включаю с опцией:
icap_preview_enable on
icap_preview_size 1024
то вообще можно пол года ждать когда страница загрузиться...
Нагрузки на проц почти нету при этом (в данный момент эти строки закоментированы).
Прошу оказать поддуржку в оптимизации конфига, т.к. не достаточно опыта и знаний. В машине используется 2 интерфейса, 1 на вход, другой на выход. Ниже описан конфиг:
/etc/squid3/squid.conf:
#acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/24
#acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl SSL_ports port 443a
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
negative_ttl 1 seconds
redirect_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf
redirect_children 30
redirector_bypass on
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow localnet
http_access deny all
redirector_access deny localhost
redirector_access deny SSL_ports
http_port 3128 transparent
http_port 3129
tcp_outgoing_address 192.168.0.111
udp_outgoing_address 192.168.0.111
cache_effective_user squid
cache_effective_group squid
cache_dir ufs /etc/squid3/cache 2000 14 256
cache_mem 300 MB
maximum_object_size 100000 KB
coredump_dir /var/spool/squid3
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4320
icap_enable on
##icap_send_client_ip on
##icap_send_client_username on
##icap_client_username_encode off
#icap_client_username_header X-Authenticated-User
#icap_preview_enable on
#icap_preview_size 1024
icap_service service_req reqmod_precache bypass=0 icap://127.0.0.1:1344/squidclamav
adaptation_access service_req allow all
icap_service service_resp respmod_precache bypass=0 icap://127.0.0.1:1344/squidclamav
adaptation_access service_resp allow all
iptables -t nat -A PREROUTING -s 192.168.0.112 -p tcp --dport 80 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.0.112:3128
iptables -t nat -A POSTROUTING -j MASQUERADE
PidFile /var/run/c-icap/c-icap.pid
CommandsSocket /var/run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 30
MinSpareThreads 30
MaxSpareThreads 40
ThreadsPerChild 20
MaxRequestsPerChild 0
Port 1344
User c-icap
Group nogroup
ServerAdmin support@technoton.in
ServerName Anti-Virus-Proxy
TmpDir /tmp
MaxMemObject 1048576
DebugLevel 1
ModulesDir /usr/lib/x86_64-linux-gnu/c_icap
ServicesDir /usr/lib/x86_64-linux-gnu/c_icap
TemplateDir /usr/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Service echo srv_echo.so
Service squidclamav squidclamav.so
maxsize 2428800
redirect http://warn.ts/clwarn.cgi
#clamd_ip 127.0.0.1
clamd_local /var/run/clamav/clamd.ctl
#clamd_port 3310
#timeout 1
logredir 1
dnslookup 1
Заранее благодарен за помощь!