Re: [squid-users] A few things about Squid-cache

[Amos Jeffries]

On 25/09/23 07:49, Jason Long wrote:

Hello,
Thank you so much for your reply.
1- Regarding security, what parameters should be changed or added in the 
configuration file?




First steps with a new Squid install are to check in squid.conf for the 
"acl localnet" lines and adjust so it lists your LAN ranges. The common 
ones are listed there by default.


Then look for the "http_access" directive. That is the primary means of 
telling Squid what the network policy needs are.




2- How to configure Squid-cache service for 1000 clients?



Apart from the above (1) answer, Squid does not care about number of 
clients it will serve as many as your machine can handle. Until the 
hardware overloads the CPU, RAM or disks capacity limits.



For good advise we will need details...

 Forward or Reverse proxy installation?
 LAN or WAN clients?

 What policies do you need to comply with regarding client use of the 
proxy, or access to any special websites?



Cheers
Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] A few things about Squid-cache

[Jason Long]

Hello,Thank you so much for your reply.1- Regarding security, what parameters 
should be changed or added in the configuration file?

 2- How to configure Squid-cache service for 1000 clients?


 
  On Sat, Sep 23, 2023 at 12:26 AM, Francesco Chemolli 
wrote:   Hi Jason!
Squid is a complex piece of software, which is deployed in a vast number of 
scenarios, some are simpler and some are intensely adversarial and 
trickier.Securing squid is similar to any other public-facing complex service; 
it's unfortunately not something that can be explained with a few tips.
Regarding how many users Squid can support at the same time, it really depends, 
mostly on the hardware, services configuration, and user behaviour. On modern 
hardware, Squid can generally support many users, in the order of several 
thousands
Squid is not a firewall, on most modern Unix-like operating systems, including 
Linux, FreeBSD, and OpenBSD, that role can be fulfilled by the underlying 
operating system
On Thu, Sep 21, 2023 at 7:59 PM Jason Long  wrote:

Hello,I have some questions:1- What tips should be considered to keep 
Squid-cache safe?

2- How strong is Squid-cache? How many users can use it at the same time?
3- Can Squid-cache also play the role of a firewall? Something like the 
Microsoft ForeFront TMG Replacement or the Kemp LoadMaster.

Thank you.___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users



-- 
    Francesco  
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users