Openwrt Squid 3.5.2 HTTP/HTTPS ssl bump



acl localnet src all
acl ssl_ports port 443
acl safe_ports port 80
acl safe_ports port 21
acl safe_ports port 443
acl safe_ports port 70
acl safe_ports port 210
acl safe_ports port 1025-65535
acl safe_ports port 280
acl safe_ports port 488
acl safe_ports port 591
acl safe_ports port 777
acl connect method connect
http_access deny !safe_ports
http_access deny connect !ssl_ports
http_access allow localhost manager
http_access deny manager
http_access deny to_localhost
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
ssl_bump bump all
http_port 3127 ssl-bump generate-host-certificates=on cert=/etc/squid/ssl_cert/yourcertificate.pem
dns_nameservers 8.8.8.8 11.8.0.1
visible_hostname yourhostname
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico|swf)$ 43200 90% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-
cache ignore-auth ignore-private
refresh_pattern -i \.(xml|html|htm|js|jsp|txt|css|php|asp)$ 21900 75% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-ca
che ignore-auth
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
cache_mem 8 MB
maximum_object_size_in_memory 500 KB
cache_dir aufs /cache 3200 10 256
cache_swap_low 95
cache_swap_high 95
access_log /squid/log/access.log
cache_log /squid/log/cache.log
cache_store_log /squid/log/store.log
logfile_rotate 0
logfile_daemon /squid/logfile-daemon
view raw squid.conf hosted with ❤ by GitHub

Comments