summaryrefslogtreecommitdiffstats
path: root/host_setup/etc/squid/squid.conf
blob: 081564d801941ba15db4a2dcbad50e7d7331bc5c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# this is a basic squid config to allow the virtual nodes
# to connect to the install server via a cache

http_port 3128
hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

# we need to allow caching of large objects (for ISOs, RPMs etc)
maximum_object_size 4096 MB

# a nice big cache - 50G in this case
cache_dir ufs /var/spool/squid 50000 16 256

access_log /var/log/squid/access.log squid
hosts_file /etc/hosts
refresh_pattern .		0	20%	4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255

acl our_networks src 10.0.0.0/8
http_access allow our_networks
http_access allow localhost

http_access deny all
icp_access allow all
visible_hostname sofs

coredump_dir /var/spool/squid
extension_methods REPORT MERGE MKACTIVITY CHECKOUT

# use this to go via some other cache upstream to IBM
#cache_peer upstream.example.com parent 3128 7 no-query
#
#acl ibm dst 9.0.0.0/8
#never_direct allow ibm