Problema SQUID apenas com TCP_MISS/200

renato.giacomett
(usa Suse)

Enviado em 31/03/2012 - 18:06h

Ola Pessoal estou com problema em relação ao cache do meu servidor

Utilizo o squid 2.7 e quando analiso o log de acesso noto que só tenho TCP_MISS/200, ou seja não esta fazendo cache dos sites navegados, porem os arquivos feitos download estão ficando em cache.

Já chequei as pastas de cache, a permissão do squid, e repassei meu squid.conf várias vezes e não encontrei nada de errado.

Será que alguém já passou por situação parecida e poderia ajudar?


Abaixo coloco respectivamente o access.log / cache.log / squid.conf e as regras IPTABLES
-----------------------------------------------------------------------------------------
access.log

1333227058.472 1 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.476 2 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.476 2 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.481 1 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.481 1 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.491 1 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.495 2 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.495 2 192.168.2.99 TCP_MISS/000 0 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/www.superdownloads.com.br -
1333227058.625 357 192.168.2.99 TCP_MISS/304 461 GET http://www.superdownloads.com.br/imagens/chamadas/21253.jpg - DIRECT/187.31.150.16 image/jpeg
1333227259.791 464 192.168.2.2 TCP_MISS/200 581 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.127 text/javascript
1333227260.226 514 192.168.2.2 TCP_MISS/200 37122 GET http://www.uol.com.br/ - DIRECT/200.147.67.142 text/html
1333227260.231 463 192.168.2.2 TCP_MISS/200 630 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.120 text/javascript
1333227260.658 344 192.168.2.2 TCP_MISS/304 254 GET http://ads.imguol.com/1203/ads/22/34916.gif - DIRECT/200.221.7.85 -
1333227260.662 348 192.168.2.2 TCP_MISS/304 254 GET http://ads.imguol.com/1203/ads/59/34971.gif - DIRECT/200.147.67.165 -
1333227260.668 352 192.168.2.2 TCP_MISS/304 254 GET http://ads.imguol.com/1203/ads/59/34972.gif - DIRECT/200.221.7.85 -
1333227260.738 456 192.168.2.2 TCP_MISS/200 6324 GET http://h.imguol.com/1203/31_menino.jpg - DIRECT/200.221.7.95 image/jpeg
1333227260.868 584 192.168.2.2 TCP_MISS/200 8212 GET http://h.imguol.com/1203/31quicomeirelles_d.jpg - DIRECT/200.221.7.95 image/jpeg
1333227260.890 610 192.168.2.2 TCP_MISS/200 10410 GET http://h.imguol.com/1203/31caes_d.jpg - DIRECT/200.147.68.8 image/jpeg
1333227260.897 616 192.168.2.2 TCP_MISS/200 12842 GET http://h.imguol.com/1203/31mulher2.jpg - DIRECT/200.221.7.95 image/jpeg
1333227260.917 635 192.168.2.2 TCP_MISS/200 12699 GET http://h.imguol.com/1203/31bebe.jpg - DIRECT/200.147.68.8 image/jpeg
1333227260.989 705 192.168.2.2 TCP_MISS/200 9453 GET http://h.imguol.com/1203/31_face.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.158 260 192.168.2.2 TCP_MISS/200 7514 GET http://h.imguol.com/1203/31shop-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333227261.170 665 192.168.2.2 TCP_REFRESH_MISS/200 2508 GET http://noticias.uol.com.br/erros/enviaerro.js - DIRECT/200.221.8.140 application/javascript
1333227261.181 264 192.168.2.2 TCP_MISS/200 4615 GET http://h.imguol.com/1203/31sala-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.227 237 192.168.2.2 TCP_MISS/200 6405 GET http://h.imguol.com/1203/31robo-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.242 619 192.168.2.2 TCP_MISS/200 7967 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227261.300 641 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.319 656 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227261.337 668 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.480 295 192.168.2.2 TCP_MISS/200 6724 GET http://h.imguol.com/1203/31sono-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.502 717 192.168.2.2 TCP_MISS/200 29716 GET http://h.imguol.com/1203/31aparecida-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333227261.618 359 192.168.2.2 TCP_MISS/200 6213 GET http://h.imguol.com/1203/31homo-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.621 277 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.624 277 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.650 1222 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227261.661 1231 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.678 1070 192.168.2.2 TCP_MISS/302 738 GET http://metrics.uol.com.br/b/ss/uoluolprod/1/H.22.1/s65053941591177? - DIRECT/66.235.132.152 text/plain
1333227261.698 1267 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227261.780 298 192.168.2.2 TCP_MISS/200 9360 GET http://h.imguol.com/1203/31humor-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227261.849 345 192.168.2.2 TCP_MISS/200 8401 GET http://h.imguol.com/1203/31humor2-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333227261.907 563 192.168.2.2 TCP_MISS/200 4082 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227261.926 273 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227261.943 279 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227261.950 1080 192.168.2.2 TCP_MISS/200 34482 GET http://h.imguol.com/1203/31toy-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333227261.973 1082 192.168.2.2 TCP_MISS/200 31798 GET http://h.imguol.com/1203/31tattoo-c.jpg - DIRECT/200.147.68.8 image/jpeg
1333227262.094 166 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227262.109 165 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.302 388 192.168.2.2 TCP_MISS/200 3791 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227262.310 213 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227262.333 221 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.339 716 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.378 753 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.461 148 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227262.582 247 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.583 242 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.585 205 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.592 1432 192.168.2.2 TCP_MISS/200 7411 GET http://h.imguol.com/1203/31salto-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333227262.594 1250 192.168.2.2 TCP_MISS/302 438 GET http://bn.uol.com.br/event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=40... - DIRECT/200.147.35.201 text/html
1333227262.910 1560 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227262.964 657 192.168.2.2 TCP_MISS/200 1413 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227262.972 1271 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227263.075 490 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227263.143 681 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333227263.236 650 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227263.257 278 192.168.2.2 TCP_MISS/200 2091 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227263.265 677 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333227263.402 311 192.168.2.2 TCP_MISS/200 423 GET http://b.scorecardresearch.com/r? - DIRECT/189.11.250.56 image/gif
1333227264.380 1119 192.168.2.2 TCP_MISS/200 3917 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 text/html
1333227265.470 1085 192.168.2.2 TCP_MISS/200 7697 GET http://ds.serving-sys.com/BurstingCachedScripts//SBTemplates_2_4_24/StdBanner.js? - DIRECT/189.11.250.91 text/javascript
1333227265.475 4109 192.168.2.2 TCP_MISS/200 5503 GET http://bn.imguol.com/1203/uol/07/120x36_EmpregoCerto_Relogio-2012_HardSell.swf - DIRECT/200.147.67.165 application/x-shockwave-flash
1333227265.741 243 192.168.2.2 TCP_MISS/200 9982 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227266.100 597 192.168.2.2 TCP_MISS/200 24794 GET http://ds.serving-sys.com/BurstingRes///Site-16327/Type-2/d90bd866-e470-4f31-9919-5a529bca60a1.swf - DIRECT/189.11.250.91 application/x-shockwave-flash
1333227266.265 444 192.168.2.2 TCP_MISS/200 2173 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227266.321 498 192.168.2.2 TCP_MISS/302 438 GET http://bn.uol.com.br/event.ng/Type=count&FlightID=185531&AdID=407823&TargetID=21457&... - DIRECT/200.147.35.201 text/html
1333227266.586 260 192.168.2.2 TCP_MISS/200 2364 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227266.632 298 192.168.2.2 TCP_MISS/302 438 GET http://bn.uol.com.br/event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=40... - DIRECT/200.147.35.201 text/html
1333227266.686 865 192.168.2.2 TCP_MISS/200 1598 GET http://mfa.unilever.predicta.net/mrm-ad/ad/pc/? - DIRECT/174.132.204.221 image/gif
1333227267.717 1126 192.168.2.2 TCP_MISS/200 4075 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 text/html
1333227267.892 171 192.168.2.2 TCP_MISS/200 7697 GET http://ds.serving-sys.com/BurstingCachedScripts//SBTemplates_2_4_24/StdBanner.js? - DIRECT/189.11.250.91 text/javascript
1333227268.103 179 192.168.2.2 TCP_MISS/200 4202 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227268.157 230 192.168.2.2 TCP_MISS/200 24690 GET http://ds.serving-sys.com/BurstingRes///Site-16327/Type-2/7495c073-9c78-4c6a-b697-8ca21c677336.swf - DIRECT/189.11.250.91 application/x-shockwave-flash
1333227268.374 258 192.168.2.2 TCP_MISS/200 3928 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227268.570 428 192.168.2.2 TCP_MISS/200 16335 GET http://bn.imguol.com/1203/privalia/uol/28/SuperB_Sapatos_Clarie.swf - DIRECT/200.221.7.85 application/x-shockwave-flash
1333227268.616 230 192.168.2.2 TCP_MISS/200 1461 GET http://bn.uol.com.br/js.ng/site=uolbr&chan=homeuol&subchan=capa&affiliate=uolbrhomeuol&a...? - DIRECT/200.147.35.201 application/x-javascript
1333227269.145 516 192.168.2.2 TCP_MISS/200 1594 GET http://mfa.unilever.predicta.net/mrm-ad/ad/pc/? - DIRECT/209.207.217.137 image/gif
1333227269.621 767 192.168.2.2 TCP_MISS/200 6683 GET http://www.facebook.com/plugins/like.php? - DIRECT/69.171.242.13 text/html
1333227270.777 275 192.168.2.2 TCP_MISS/200 581 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.120 text/javascript
1333227271.041 250 192.168.2.2 TCP_MISS/200 664 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.120 text/javascript
1333227278.994 305 192.168.2.2 TCP_MISS/302 223 GET http://www.globo.com/ - DIRECT/186.192.82.163 -
1333227279.271 274 192.168.2.2 TCP_MISS/200 32330 GET http://www.globo.com/ - DIRECT/186.192.82.163 text/html
1333227279.765 190 192.168.2.2 TCP_MISS/302 353 GET http://ads.globo.com/RealMedia/ads/adstream_mjx.ads/globo.com/globo.com/home/1639754413@Bottom1,Bott...? - DIRECT/201.7.176.12 -
1333227279.952 183 192.168.2.2 TCP_MISS/200 1811 GET http://ads.globo.com/RealMedia/ads/adstream_mjx.ads/globo.com/globo.com/home/1639754413@Bottom1,Bott...? - DIRECT/201.7.176.12 application/x-javascript
1333227280.309 194 192.168.2.2 TCP_MISS/200 5898 GET http://s2.glbimg.com/hnc_mujbJ_4GtinwNB79PBhLniPxnDTY8EKdDbnqjgJEfZMIzbgjnDieZdspZV2S76KFlei6KuEOkjV... - DIRECT/186.192.82.89 image/jpeg
1333227280.436 269 192.168.2.2 TCP_MISS/200 497 GET http://ads.globo.com/RealMedia/ads/adstream_lx.ads/globo.com/globo.com/home/L24/2097633532/Top1/glob...? - DIRECT/201.7.176.12 image/gif
1333227280.463 293 192.168.2.2 TCP_MISS/200 4820 GET http://s2.glbimg.com/Ia3KogUkR4TbCUUtlJ62ulwylZLQ93SaMzdbIsWOE9jNhhEntjd0_aebv5JC6TguiXY2sGUGPlzidVe... - DIRECT/186.192.82.89 image/jpeg
1333227280.473 305 192.168.2.2 TCP_MISS/200 5826 GET http://s2.glbimg.com/obDfzpnG29U7ajhOnDcigRYUZ1u2gBluAH-_PBL5RzHidJt7GV3pwdIpsaS8pH-qJXu7Dq-28P9zeb0... - DIRECT/186.192.82.89 image/jpeg
1333227280.493 325 192.168.2.2 TCP_MISS/200 4815 GET http://s2.glbimg.com/5-ZfUj2fgxApC9zTlmhTAhQvZdLqQFYj2BYbMAP-FbpAPqDFKf--THeJnSKZ8dPZawiHNJZFFbCTE_h... - DIRECT/186.192.82.89 image/jpeg
1333227280.536 217 192.168.2.2 TCP_MISS/200 2445 GET http://s2.glbimg.com/86KXrQw9PCSGW0pasNYPswdBmtfo_LF1d4lOUFWV5uZEyl07hmGV0RiMe0sVYQc4fa5DF4y5SQiKCmD... - DIRECT/186.192.82.89 image/jpeg
1333227280.634 464 192.168.2.2 TCP_MISS/200 16428 GET http://s2.glbimg.com/exl-HaCUXXB-Y1c4BlHvXtfEtgxplD4-H24akZecYmYpTmbHRrlePpBe5QSwkBg1gVhUDuWa90C8SUt... - DIRECT/186.192.82.89 image/jpeg
1333227280.650 482 192.168.2.2 TCP_MISS/200 15567 GET http://s2.glbimg.com/OuUJHejTrvtrGIpY4tGNOYx8rM37TB2PVTLQ_A1-c6-S-dKhao98DQk7Q7bY0Icpr-t2DxeaoAnxALc... - DIRECT/186.192.82.89 image/jpeg
1333227280.684 208 192.168.2.2 TCP_MISS/200 4453 GET http://s2.glbimg.com/NHOzg_po8Lx6CfAmr6glHAanpjpNLSjXAKUvjqh2uWoX0POgXbp0BVWoODat0cpQ-Au_lTJyRl5hxmU... - DIRECT/186.192.82.89 image/jpeg
1333227280.740 243 192.168.2.2 TCP_MISS/200 3873 GET http://s2.glbimg.com/QFctjj9Vy-ffcNjcaowVMTRLWEeyLAjpJIUp_t1Df23LKHvp1WKWWzrpC1EUXi1P07FbePuwRGbNU6U... - DIRECT/186.192.82.89 image/jpeg
1333227280.801 262 192.168.2.2 TCP_MISS/200 10477 GET http://s2.glbimg.com/6_H_jQRpvQnpoAffOn8ESv3GIeJPEOmrh06BEf8sLr0wOdZBrof_-J6SGDxiJODIPE_Rbdb5u1EhREo... - DIRECT/186.192.82.89 image/jpeg
1333227281.195 729 192.168.2.2 TCP_MISS/200 4010 GET http://s2.glbimg.com/i5sdwhe2AP5XwruE9I213hypWxb4Ret-rPI8edp9Y45yPQOg7UNlf91pkdUeUkzMB2uuVFUAcEBUHuV... - DIRECT/186.192.82.89 image/jpeg
1333227282.570 352 192.168.2.2 TCP_MISS/200 580 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.120 text/javascript
1333227282.677 252 192.168.2.2 TCP_MISS/200 581 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.127 text/javascript
1333227289.645 9452 192.168.2.2 TCP_MISS/302 267 GET http://ads.img.globo.com/RealMedia/ads/Creatives/js/oas_flash_2009.js - DIRECT/201.7.179.129 -
1333227290.161 511 192.168.2.2 TCP_MISS/200 1437 GET http://ads.img.globo.com/RealMedia/ads/Creatives/js/oas_flash_2009.js - DIRECT/201.7.179.129 application/x-javascript
1333227290.522 333 192.168.2.2 TCP_MISS/200 497 GET http://ads.globo.com/RealMedia/ads/adstream_lx.ads/globo.com/globo.com/home/L24/607155525/Bottom3/gl...? - DIRECT/201.7.176.12 image/gif
1333227290.943 776 192.168.2.2 TCP_MISS/200 1461 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1333227291.099 503 192.168.2.2 TCP_MISS/304 400 GET http://www.globo.com/libby/aplicacoes/cadastro_jogos/games.json - DIRECT/186.192.82.163 -
1333227291.162 285 192.168.2.2 TCP_MISS/200 423 GET http://b.scorecardresearch.com/p? - DIRECT/189.11.250.56 image/gif
1333227291.269 293 192.168.2.2 TCP_MISS/304 379 GET http://ads.img.globo.com/RealMedia/ads/Creatives/default/empty.gif - DIRECT/201.7.179.129 -
1333227291.323 802 192.168.2.2 TCP_MISS/200 442 GET http://api.globo.com/geo? - DIRECT/201.7.176.159 text/javascript
1333227291.379 722 192.168.2.2 TCP_MISS/200 606 GET http://api.globo.com/finance.jsonp? - DIRECT/201.7.176.159 text/javascript
1333227291.386 1008 192.168.2.2 TCP_MISS/302 870 GET http://ia.nspmotion.com/tracking/? - DIRECT/65.99.198.181 text/html
1333227291.392 791 192.168.2.2 TCP_MISS/200 1191 GET http://api.globo.com/schedule.jsonp? - DIRECT/201.7.176.159 text/javascript
1333227291.544 787 192.168.2.2 TCP_MISS/200 2627 GET http://futpedia.globo.com/widget/jogoshistoricos/hoje.jsonp? - DIRECT/201.7.184.11 application/javascript
1333227291.595 603 192.168.2.2 TCP_MISS/304 379 GET http://ads.img.globo.com/RealMedia/ads/Creatives/globocom/ibm_80_100_ibm_120309/logo_IBM_65x30-v2.jp... - DIRECT/201.7.179.129 -
1333227291.811 476 192.168.2.2 TCP_MISS/200 623 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.127 text/javascript
1333227291.982 1313 192.168.2.2 TCP_MISS/200 537 GET http://api.globo.com/horoscope/aries/summary.jsonp? - DIRECT/201.7.176.159 text/javascript
1333227292.068 876 192.168.2.2 TCP_MISS/200 1561 GET http://vitrines.globo.com/vitrine/shop/5/globocom/home.html? - DIRECT/186.192.82.123 text/html
1333227292.211 785 192.168.2.2 TCP_MISS/200 795 GET http://api.g1.globo.com/tempo/cidade-resumida/sp/sao-paulo.jsonp? - DIRECT/186.192.82.162 application/json
1333227292.606 0 192.168.2.2 TCP_MEM_HIT/200 793 GET http://api.g1.globo.com/tempo/cidade-resumida/sp/sao-paulo.jsonp? - NONE/- application/json
1333227293.137 1247 192.168.2.2 TCP_MISS/200 6169 GET http://cade.search.yahoo.com/ - DIRECT/74.6.239.84 text/html
1333227293.264 2431 192.168.2.2 TCP_MISS/200 1849 GET http://frases.globo.com/api/v1/frases.json? - DIRECT/50.16.201.65 text/javascript
1333227294.113 906 192.168.2.2 TCP_MISS/200 498 GET http://row.bc.yahoo.com/b? - DIRECT/76.13.6.31 image/gif
1333227294.251 3659 192.168.2.2 TCP_MISS/200 1750 GET http://musica.com.br/api/artistas/top_artistas/30? - DIRECT/186.192.82.110 text/javascript
1333227294.281 3687 192.168.2.2 TCP_MISS/200 934 GET http://musica.com.br/api/musicas/top_musicas/3? - DIRECT/186.192.82.110 text/javascript
1333227294.660 3790 192.168.2.2 TCP_MISS/304 402 GET http://s.glbimg.com/bu/rt/js/glb-rt-min.js - DIRECT/186.192.82.11 -
1333227294.774 3592 192.168.2.2 TCP_MISS/304 402 GET http://ads.img.globo.com/RealMedia/ads/Creatives/globocom/globocom_s92_001_diversos_101207/topbanner... - DIRECT/201.7.179.129 -
1333227294.803 3619 192.168.2.2 TCP_MISS/200 1561 GET http://ads.img.globo.com/RealMedia/ads/Creatives/globocom/vivo_087_155_loja_120301/TorpedoCenter_Viv... - DIRECT/201.7.179.129 application/x-shockwave-flash
1333227294.850 3666 192.168.2.2 TCP_MISS/304 400 GET http://ads.img.globo.com/RealMedia/ads/Creatives/globocom/dell_1096_155_dell_120325/br_consumer_xps1... - DIRECT/201.7.179.129 -
1333227294.949 3763 192.168.2.2 TCP_MISS/304 402 GET http://ads.img.globo.com/RealMedia/ads/Creatives/globocom/tamtran_212_156_tam_120302/Globo.com-300x1... - DIRECT/201.7.179.129 -
1333227296.074 275 192.168.2.2 TCP_MISS/200 606 GET http://www.google.com.br/complete/search">http://www.google.com.br/complete/search? - DIRECT/74.125.229.127 text/javascript
1333227296.447 5244 192.168.2.2 TCP_MISS/200 514 GET http://www.google-analytics.com/__utm.gif? - DIRECT/74.125.234.6 image/gif
1333227296.476 5243 192.168.2.2 TCP_MISS/200 514 GET http://www.google-analytics.com/__utm.gif? - DIRECT/74.125.234.6 image/gif
1333227296.852 239 192.168.2.2 TCP_MISS/302 630 GET http://www.google.com.br/ - DIRECT/74.125.229.127 text/html
1333227297.074 530 192.168.2.2 TCP_MISS/200 851 GET http://cade.search.yahoo.com/sdconfig? - DIRECT/74.6.239.84 application/javascript
1333227297.111 2 192.168.2.2 TCP_MEM_HIT/200 9192 GET http://l.yimg.com/mk/ura/0.8.27/ura-lite-pt-br.js - NONE/- application/x-javascript
1333227297.111 1 192.168.2.2 TCP_MEM_HIT/200 2246 GET http://l.yimg.com/mk/ura/0.8.27/ura-lite.css - NONE/- text/css
1333227297.698 572 192.168.2.2 TCP_MISS/200 30354 GET http://l.yimg.com/py/load? - DIRECT/189.11.250.43 application/javascript
---------------------------------------------------------------------------------------------
cache.log

servidor:~ # tail -f /var/log/squid/cache.log
2012/03/31 17:45:08| Accepting transparently proxied HTTP connections at 0.0.0.0, port 3128, FD 9.
2012/03/31 17:45:08| Accepting ICP messages at 0.0.0.0, port 3130, FD 11.
2012/03/31 17:45:08| HTCP Disabled.
2012/03/31 17:45:08| Accepting SNMP messages on port 3401, FD 12.
2012/03/31 17:45:08| WCCP Disabled.
2012/03/31 17:45:08| Pinger socket opened on FD 13
2012/03/31 17:45:08| Loaded Icons.
2012/03/31 17:45:08| Ready to serve requests.
2012/03/31 17:46:11| icmpSend: send: (111) Connection refused
2012/03/31 17:46:11| Closing Pinger socket on FD 13
---------------------------------------------------------------------------------------------
squid.conf

http_port 3128 transparent
visible_hostname servidor

cache_effective_user squid


# Configuracao do cache
cache_mem 800 MB

maximum_object_size_in_memory 1024 KB
maximum_object_size 850 MB
minimum_object_size 0 KB

cache_swap_low 90
cache_swap_high 95

#Politicas squid e diretorio de cache
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

cache_dir ufs /var/spool/squid/cache1 5000 16 256
cache_dir ufs /var/spool/squid/cache2 5000 16 256
cache_dir ufs /var/spool/squid/cache3 5000 16 256
cache_dir ufs /var/spool/squid/cache4 5000 16 256
cache_dir ufs /var/spool/squid/cache5 5000 16 256
cache_dir ufs /var/spool/squid/cache6 5000 16 256

#Cache videos e youtube
refresh_pattern -i .flv$ 10080 90% 999999 ignore-no-cache override-expire ignore-private
acl youtube dstdomain .youtube.com
cache allow youtube

# Localizacao dos logs
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/cache_store.log


#Refreshs
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280
refresh_pattern -i \.jpeg$ 129600 100% 5781600 override-expire ignore-reload reload-into-ims
refresh_pattern au.download.windowsupdate.com/.*.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern download.microsoft.com/.*.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern msgruser.dlservice.microsoft.com/.*.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern windowsupdate.com/.*.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern www.microsoft.com/.*.(cab|exe|msi) 10080 100% 43200 reload-into-ims

acl all src 0.0.0.0/0.0.0.0
cache allow all
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl redelocal src 192.168.2.0/24
http_access allow localhost
http_access allow redelocal

# Bloqueia acessos externos
http_access deny all


# Resolve problemas conexao persistente que provocam delay no cache
detect_broken_pconn on

# Provoca um ganho de performance ao usar conexao pipeline / requisicoes em paralelo
pipeline_prefetch on

# Proxy transparente
#httpd_accel_host virtual
#httpd_accel_port 80
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on
---------------------------------------------------------------------------------------------
Regras IPTABLES adicionadas ao arquivo boot.local


#Regras Iptables
/etc/init.d/squid start
echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/modprobe iptable_nat
iptables -F
iptables -t nat -F
iptables -t nat -A PREROUTING -s 0/0 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -s 0/0 -p udp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A POSTROUTING -s 0/0 -o eth1 -j MASQUERADE

#Bloqueia acesso de todos nao cadastrados
iptables -P FORWARD DROP

#acesso para notebook Renato - PL REDE
iptables -t nat -A POSTROUTING -s 192.168.2.2 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.2 -m mac --mac-source 00-A0-D1-2D-69-60 -j ACCEPT
iptables -A FORWARD -d 192.168.2.2 -j ACCEPT

#acesso para Router Wirelles casa
iptables -t nat -A POSTROUTING -s 192.168.2.254 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.254 -m mac --mac-source 00-27-19-D2-F5-BB -j ACCEPT
iptables -A FORWARD -d 192.168.2.254 -j ACCEPT

#acesso para PC casa
iptables -t nat -A POSTROUTING -s 192.168.2.3 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.3 -m mac --mac-source 00-08-54-68-1B-87 -j ACCEPT
iptables -A FORWARD -d 192.168.2.3 -j ACCEPT

#acesso para NB
iptables -t nat -A POSTROUTING -s 192.168.2.10 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.10 -m mac --mac-source 00-22-5F-79-27-87 -j ACCEPT
iptables -A FORWARD -d 192.168.2.10 -j ACCEPT

#acesso para ELENIR
iptables -t nat -A POSTROUTING -s 192.168.2.30 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.30 -m mac --mac-source 00-02-2A-E7-B2-E9 -j ACCEPT
iptables -A FORWARD -d 192.168.2.30 -j ACCEPT

#acesso para TEMPORARIO
iptables -t nat -A POSTROUTING -s 192.168.2.99 -j MASQUERADE
iptables -A FORWARD -s 192.168.2.99 -m mac --mac-source 00-14-2A-60-D8-B2 -j ACCEPT
iptables -A FORWARD -d 192.168.2.99 -j ACCEPT

william-fonseca
(usa Debian)

Enviado em 31/03/2012 - 21:52h

o seu squid.conf esta parecido com o meu mais so nao tem estas regras
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache


e outra coisa pra que tantos cache_dir?

[]'s

phrich
(usa Slackware)

Enviado em 01/04/2012 - 17:32h

Eu recomendo que vc atualize para a versão 3.x pois para a dois não tem mais atualizações...

renato.giacomett
(usa Suse)

Enviado em 01/04/2012 - 18:31h

Ola William

adicionei suas regras.. e por enquanto continua apenas trazendo com TCP_MISS/200 as requisições..

quanto aos cache_dir, segundo documentação do próprio squid é mais rápido para pesquisa várias pastas, pois os dados são mais distribuídos nas pastas mais rasas 16 256

será que temos mais alguma possibilidade para solucionar?

renato.giacomett
(usa Suse)

Enviado em 01/04/2012 - 18:32h

pois é.. caso não consiga resolver com essa versao vou ter que pensar em atualizar...

william-fonseca
(usa Debian)

Enviado em 01/04/2012 - 19:15h

entao teste a minha configuração:

http_port 3128 transparent
visible_hostname william-squid
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 200 MB
maximum_object_size_in_memory 200 KB
maximum_object_size 512 MB
minimum_object_size 2 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_swap_low 95
cache_swap_high 98
cache_dir ufs /var/spool/squid 10240 64 256
cache_access_log /var/log/squid/access.log
cache_store_log none
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
# ---- Cache do Windows Update ----
refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern msgruser.dlservice.microsoft.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern windowsupdate.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern www.microsoft.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern update.microsoft.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
refresh_pattern download.windows.update.com/.*\.(cab|exe|msi) 10080 100% 43200 reload-into-ims
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
half_closed_clients off
#aqui estão as máquinas de nosso cenário
acl redelocal src 192.168.5.0/24
http_access allow redelocal
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
error_directory /usr/share/squid/errors/Portuguese
coredump_dir /var/spool/squid
detect_broken_pconn on
pipeline_prefetch on


depois de colar as configuracoes no squid.conf, pare o squid:
/etc/init.d/squid stop
delete a pasta /var/spool/squid/
rm -R /var/spool/squid/
e depois crie ela novamente /var/spool/squid/
mkdir /var/spool/squid
e entao refaça o cache
squid -z
e verifique o access.log pra ve se vai aparecer os TCP_HIT

e poste aqui se deu certo ou nao !

[]'s sucesso!

renato.giacomett
(usa Suse)

Enviado em 01/04/2012 - 19:50h

William fiz oque falou.. coloquei teu .conf apaguei e refiz o cache..
ainda só aparece o TCP_MISS:

333320483.277 713 192.168.2.2 TCP_MISS/200 38246 GET http://www.uol.com.br/ - DIRECT/200.147.67.142 text/html
1333320484.083 822 192.168.2.2 TCP_MISS/200 9950 GET http://h.imguol.com/1204/01gelo-c.jpg - DIRECT/200.221.7.95 image/jpeg
1333320484.727 897 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320484.754 923 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320484.788 956 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320484.810 977 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320484.831 998 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.013 285 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.085 330 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320485.119 329 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.154 343 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320485.199 367 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.457 442 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.527 439 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320485.554 433 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.629 473 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320485.686 485 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.779 320 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.858 302 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320485.898 2064 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320485.920 288 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320486.025 338 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320486.272 492 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320486.314 455 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.221.7.85 text/plain
1333320486.369 470 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain
1333320486.397 476 192.168.2.2 TCP_MISS/204 290 GET http://ads.imguol.com/x.gif? - DIRECT/200.147.67.165 text/plain

FIZ ALTERAÇOES NO TEU SQUID.CONF APENAS EM RELACAO A CLASSE DE IP DE MINHA REDE O RESTANTE RODANDO TUDO IGUAL

william-fonseca
(usa Debian)

Enviado em 01/04/2012 - 19:59h

Oi renato, agora é o seguinte, como agente esvaziou o cache, tem q dar um tempo pra ele encher... vai entrando em site e tal.... e em outra maquina entre no mesmo site, e veja se vai começar a dar HIT...
[]'s

renato.giacomett
(usa Suse)

Enviado em 01/04/2012 - 20:27h

Ok William.. mais quando tento entrar varias vezes seguidas na mesma pagina.. já era para rolar um HIT
concorda?

william-fonseca
(usa Debian)

Enviado em 01/04/2012 - 20:49h

Concordo em parte renato,pois isso depende de alguns fatores.... há algumas coisas que o squid nao consegue fazer cache e outra coisa os navegadores tambem tem um cache... que quando vc atualiza uma pagina ele pega algumas coisas do proprio cache do navegador... e então como eeu disse tem q dar um tempo, ir navegando normalmente, e depois verá os HITs, que nao serao muitos e um atras do outro... serão um pouco ocasionais.

[]'s

william-fonseca
(usa Debian)

Enviado em 01/04/2012 - 21:30h

Ah renato outra coisa que vi agora colque aufs na particao de cache, voce pode testar tbm diskd, ambos sao bons, mas o mais usado é aufs

cache_dir aufs /var/spool/squid 23360 16 256

[]'s

phrich
(usa Slackware)

Enviado em 02/04/2012 - 09:04h

Cara não pense, atualize!

Lembre-se que o squid é software voltado a segurança, e sendo assim, como vc quer prover segurança se o seu software não é mais confiável?

Pense nisso...