tier3_admin:tier3squid
This is an old revision of the document!
Table of Contents
Installation instructions for SQUID proxy cache
If needed, the official CERN instructions for this installation are available.
After you login as root, follow these steps carefully:
- Create the squid user and squid group
groupadd squid useradd -g squid -d /var/cache/squid -s /sbin/nologin squid
- Mount the partition /var/cache/squid
- Make the partition owned by squid
chown squid:squid /var/cache/squid
- Install the yum repository from CERN
wget -O /etc/yum.repos.d/cern-frontier.repo http://frontier.cern.ch/dist/rpms/cern-frontier.repo
- Check to see if you can see the repository:
yum list frontier-squid
- Install the frontier-squid package
yum install frontier-squid
Local configuration steps
- The file: /etc/squid/customize.sh must be modified before the squid cache server is started.
- Change the line:
setoption("acl NET_LOCAL src", "10.0.0.0/8 172.16.0.0/12 192.168.0.0/16")
to be:
setoption("acl NET_LOCAL src", "146.139.52.0/24 146.139.180.0/25 146.139.30.0/25 146.139.116.0/25 130.202.8.0/24 130.202.237.0/25 130.202.173.0/25 146.139.33.0/25 130.202.96.0/22 130.202.24.0/22 130.202.134.0/24 130.202.131.0/24")
- The firewall for the squid server should have port 3128 opened :
- Add to file /etc/sysconfig/iptables the line:
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3128 -j ACCEPT
- Remember the squid server will only serve requests from network masks as listed in customize.sh
- Restart iptables
/sbin/service iptables restart
- Restart squid server
/sbin/service frontier-squid restart
Testing the squid server
Starting/ stopping Squid server
- Start the server
/sbin/service frontier-squid start
- Stop the server
/sbin/service frontier-squid stop
- Turn on runlevels 3, 4, and 5:
/sbin/chkconfig --levels 345 frontier-squid on
tier3_admin/tier3squid.1369940005.txt.gz · Last modified: 2015/04/13 16:49 (external edit)