shad0w-share

Berikut ini adalah beberapa perintah yang dapat Anda lakukan untuk melihat performansi squid proxy server anda. Perintah ini dapat anda buat dalam bentuk file berextensi ".sh" dan letakkan di direktori /usr/sbin, sehingga anda tidak perlu menghapalkan syntax2 tersebut. Cukup membantu untuk para network administrator atau teknisi.

1. Perintah pertama

squidclient -h localhost -p 8080 mgr:info

Sesuaikan port 8080 dengan port squid Anda.
Hasilnya:

    HTTP/1.0 200 OK
    Server: squid/2.7.STABLE7
    Date: Fri, 20 Aug 2010 12:29:34 GMT
    Content-Type: text/plain
    Expires: Fri, 20 Aug 2010 12:29:34 GMT
    X-Cache: MISS from proxy1.netsolusindo.com
    X-Cache-Lookup: MISS from proxy1.netsolusindo.com:8080
    Via: 1.0 proxy1.netsolusindo.com:8080 (squid/2.7.STABLE7)
    Connection: close

    Squid Object Cache: Version 2.7.STABLE7
    Start Time:     Wed, 18 Aug 2010 12:00:39 GMT
    Current Time:   Fri, 20 Aug 2010 12:29:34 GMT
    Connection information for squid:
            Number of clients accessing cache:      2
            Number of HTTP requests received:       1179697
            Number of ICP messages received:        0
            Number of ICP messages sent:    0
            Number of queued ICP replies:   0
            Number of HTCP messages received:       0
            Number of HTCP messages sent:   0
            Request failure ratio:   0.00
            Average HTTP requests per minute since start:   405.5
            Average ICP messages per minute since start:    0.0
            Select loop called: 22503753 times, 7.756 ms avg
    Cache information for squid:
            Request Hit Ratios:     5min: 35.1%, 60min: 35.9%
            Byte Hit Ratios:        5min: 16.9%, 60min: 20.7%
            Request Memory Hit Ratios:      5min: 0.2%, 60min: 1.2%
            Request Disk Hit Ratios:        5min: 77.8%, 60min: 75.0%
            Storage Swap size:      27342220 KB
            Storage Mem size:       6136 KB
            Mean Object Size:       18.78 KB
            Requests given to unlinkd:      0
    Median Service Times (seconds)  5 min    60 min:
            HTTP Requests (All):   0.61549  0.52331
            Cache Misses:          1.05672  0.80651
            Cache Hits:            0.10857  0.13498
            Near Hits:             0.64968  0.52331
            Not-Modified Replies:  0.17711  0.05951
            DNS Lookups:           0.04854  0.04433
            ICP Queries:           0.00000  0.00000
    Resource usage for squid:
            UP Time:        174534.204 seconds
            CPU Time:       3182.603 seconds
            CPU Usage:      1.82%
            CPU Usage, 5 minute avg:        5.86%
            CPU Usage, 60 minute avg:       3.71%
            Process Data Segment Size via sbrk(): 176960 KB
            Maximum Resident Size: 693520 KB
            Page faults with physical i/o: 920117
    Memory usage for squid via mallinfo():
            Total space in arena:  176960 KB
            Ordinary blocks:       165139 KB  80926 blks
            Small blocks:               0 KB      0 blks
            Holding blocks:         10020 KB      7 blks
            Free Small blocks:          0 KB
            Free Ordinary blocks:   11820 KB
            Total in use:          175159 KB 94%
            Total free:             11820 KB 6%
            Total size:            186980 KB
    Memory accounted for:
            Total accounted:       102900 KB
            memPoolAlloc calls: 224927337
            memPoolFree calls: 221979688
    File descriptor usage for squid:
            Maximum number of file descriptors:   1024
            Largest file desc currently in use:    638
            Number of file desc currently in use:  477
            Files queued for open:                   0
            Available number of file descriptors:  547
            Reserved number of file descriptors:   100
            Store Disk files open:                   1
            IO loop method:                     epoll
    Internal Data Structures:
            1456421 StoreEntries
               520 StoreEntries with MemObjects
               449 Hot Object Cache Items
            1456302 on-disk objects

2. Perintah kedua

tail -f /var/log/squid/access.log | ccze

Sesuaikan /var/log/squid/access.log dengan direktori log squid Anda.

3. Perintah ketiga

squidclient -h localhost -p 8080 mgr:info | grep Hit

Sama seperti perintah pertama, sesuaikan -p 8080 dengan port squid Anda.
Hasilnya:
Request Hit Ratios:     5min: 32.1%, 60min: 35.4%
        Byte Hit Ratios:        5min: 14.9%, 60min: 17.4%
        Request Memory Hit Ratios:      5min: 3.0%, 60min: 1.0%
        Request Disk Hit Ratios:        5min: 84.6%, 60min: 77.2%
        Cache Hits:            0.15888  0.19742
        Near Hits:             1.24267  0.72387

SELAMAT MENCOBA . . .

#-----------------------------------------------------#
# LUSCA - High Performance Configuration #
#-----------------------------------------------------#

http_port 3128 transparent
cache_mem 8 MB
server_http11 on

pid_filename /var/run/squid.pid
coredump_dir /var/spool/squid/
error_directory /usr/share/squid/errors/English
icon_directory /usr/share/squid/icons
mime_table /usr/share/squid/mime.conf

maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
maximum_object_size 4608 MB
cache_swap_low 98%
cache_swap_high 99%
cache_dir aufs /cache1 15000 32 256
cache_dir aufs /cache2 15000 32 256
access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_log /dev/null
cache_store_log /dev/null
redirect_rewrites_host_header off
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
acl dynamic urlpath_regex cgi-bin \?
acl all src 0.0.0.0/0
acl network src 172.16.0.0/16
acl network src 192.168.0.0/24
http_access allow manager
http_access allow localhost
http_access allow network
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
#http_gzip on
#http_gzip_types text/plain,text/html,text/xml,text/css,application/xml,application/xhtml+xml,application/rss+xml,application/javascript,application/x-javascript

snmp_port 3401
acl snmppublic snmp_community public
snmp_access allow snmppublic all

#Dynamic Contain
acl store_rewrite_list urlpath_regex \/(get_video|videoplayback\?id|videoplayback.*id)
acl store_rewrite_list urlpath_regex \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf)\?
acl store_rewrite_list_domain url_regex ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
acl store_rewrite_list_domain url_regex (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
acl store_rewrite_list_path urlpath_regex \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
acl store_rewrite_list_domain_CDN url_regex (khm|mt)[0-9]?.google.com
acl store_rewrite_list_domain_CDN url_regex photos-[a-z].ak.fbcdn.net
acl store_rewrite_list_domain_CDN url_regex \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]*
acl store_rewrite_list_domain_CDN url_regex ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*)
acl store_rewrite_list_domain_CDN url_regex ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$
acl store_rewrite_list_domain_CDN url_regex (khm|mt)[0-9]?.google.co(m|\.id) 
acl store_rewrite_list_domain_CDN url_regex streamate.doublepimp.com.*\.js\? \.doubleclick\.net.* yieldmanager cpxinteractive  quantserve\.com

acl dontrewrite url_regex yimg.com  redbot\.org (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\? threadless.*\.jpg\?r=
acl getmethod method GET

storeurl_access deny dontrewrite
storeurl_access deny !getmethod

storeurl_access allow store_rewrite_list_domain_CDN
storeurl_access allow store_rewrite_list
storeurl_access allow store_rewrite_list_domain store_rewrite_list_path
storeurl_access deny all
storeurl_rewrite_program /etc/squid/storeurl.pl
storeurl_rewrite_children 1
storeurl_rewrite_concurrency 99

max_stale 10 years
acl QUERY urlpath_regex -i \.(ini|ui|lst|inf|pak|ver|patch)$
acl QUERY urlpath_regex -i (dat.asp|afs.dat|notice.swf|patchlist.txt|hackshield|captcha|reset.css|update.ver|notice.html|updates.txt|gamenotice)
cache deny QUERY
refresh_pattern -i  \.(sc-|dl-|ex-|mh-|mst|dll)$                0  20% 0
refresh_pattern -i (main.exe|notice.html)$                      0  20% 0
refresh_pattern -i (livescore.com|UpdaterModifier.exe|FreeStyle.exe|FSLauncher.exe) 0  20% 0
refresh_pattern .speedtest.* 0 60% 10 negative-ttl=0

refresh_pattern (get_video|videoplayback|videodownload|\.flv).*(begin|start)\=[1-9][0-9]*       0 0% 0
refresh_pattern imeem.*\.flv  0 0% 0  override-lastmod override-expire
refresh_pattern ^ftp: 40320     20%     40320   override-expire reload-into-ims store-stale
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (livescore.com|UpdaterModifier.exe|FreeStyle.exe|FSLauncher.exe) 0  20% 0

#speedtest
#refresh_pattern .speedtest.* 0 60% 10 negative-ttl=0
refresh_pattern speedtest.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png|swf|txt|js) 0 50% 180 store-stale negative-ttl=0


#ads
refresh_pattern ^.*safebrowsing.*google   131400 999999% 525600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth  negative-ttl=10080 store-stale
refresh_pattern ^.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 5259487 20% 5259487 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth  store-stale negative-ttl=40320 max-stale=1440

#antivirus
refresh_pattern avast.com.*\.vpx   40320 50% 525600 store-stale reload-into-ims
refresh_pattern (avgate|avira).*\.(idx|gz)$  1440 90% 1440  ignore-reload ignore-no-cache ignore-no-store store-stale 
refresh_pattern kaspersky.*\.avc$  131400 999999% 525600 ignore-reload store-stale
refresh_pattern kaspersky  1440 50% 131400 ignore-no-cache store-stale
refresh_pattern .symantecliveupdate.com.*\.zip  1440 90% 131400  store-stale
refresh_pattern .update.nai.com/.*\.(gem|zip|mcs) 43800 999999% 43800   ignore-reload store-stale
refresh_pattern .symantec.com.*\(exe|zip) 43800 999999% 43800   ignore-reload store-stale 
refresh_pattern ^http://file.pb.gemscool.com.*\.zip 131400 999999% 131400 override-expire store-stale
refresh_pattern ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|mov|mkv|cab|flv|wmv|3gp|mp(4|3)|exe|msi|zip) 43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  ignore-private  store-stale ignore-auth

refresh_pattern .kaskus.us.*\.(jpg|gif|png) 1440 60% 131400 override-expire store-stale

#fb
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(png|gif) 1440 60% 525600 override-expire store-stale
refresh_pattern .fbcdn.net.*\.(jpg|gif|png)  1440 60% 131400 ignore-no-cache override-expire ignore-reload store-stale negative-ttl=0

#specific sites
refresh_pattern \.rapidshare.*\/[0-9]*\/.*\/[^\/]* 131400 90% 525600 ignore-reload store-stale
refresh_pattern ^http://v\.okezone\.com/get_video\/([a-zA-Z0-9]) 131400 999999% 43200 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod  negative-ttl=10080 store-stale
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?) 525600 99999999% 525600 override-expire ignore-reload ignore-no-cache  ignore-private store-stale negative-ttl=0
refresh_pattern \.(ico|video-stats)  525600 999999% 525600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod  negative-ttl=10080 store-stale
refresh_pattern \.etology\?   525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern galleries\.video(\?|sz)   525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern brazzers\?   525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern \.adtology\? 525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale

refresh_pattern ^http://((cbk|mt|khm|mlt)[0-9]?)\.google\.co(m|\.id) 131400 999999% 525600 override-expire ignore-reload store-stale ignore-private negative-ttl=10080
refresh_pattern ytimg\.com.*\.(jpg|png) 525600 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern images\.friendster\.com.*\.(png|gif)  131400 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern garena\.com  525600 999999% 525600 override-expire reload-into-ims store-stale
refresh_pattern photobucket.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)  525600 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\?  525600 999999% 525600 ignore-no-cache override-expire override-lastmod store-stale
refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\.  131400 999999% 525600 ignore-no-cache ignore-no-store ignore-reload override-expire store-stale
refresh_pattern ^http:\/\/www.onemanga.com.*\/   525600 999999% 525600 reload-into-ims override-expire store-stale
refresh_pattern mediafire.com\/images.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)  131400 999999% 525600 reload-into-ims override-expire ignore-private store-stale
refresh_pattern  \.macromedia.com.*\.(z|exe|cab)  131400 999999%  525600 ignore-reload override-expire  store-stale

#general
refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png) 131400 999999% 525600 ignore-no-cache ignore-no-store reload-into-ims override-expire  store-stale
refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu)  131400 999999% 525600 override-expire ignore-no-cache reload-into-ims
refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape)   131400 999999% 525600 override-expire reload-into-ims ignore-reload
refresh_pattern \.(exe|msi|dmg|bin|xpi|iso|swf|mar|psf|cab|mar)  131400 999999% 525600 override-expire reload-into-ims ignore-no-store ignore-no-cache
refresh_pattern \.(mkv|mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2)  525600 9999999% 525600  ignore-private ignore-no-cache override-expire reload-into-ims
refresh_pattern -i (cgi-bin) 0 0% 0
refresh_pattern \.(php|jsp|cgi|asx)\? 0 0% 0
refresh_pattern . 0 50% 525600 store-stale
header_access X-Forwarded-For deny all

fqdncache_size 4096
ipcache_low 98
ipcache_high 99
quick_abort_min 0
quick_abort_max 0
quick_abort_pct 75
shutdown_lifetime 10 seconds
memory_pools off
buffered_logs off
log_icp_queries off
logfile_rotate 1
log_fqdn off
forwarded_for off
icp_hit_stale on
query_icmp on
reload_into_ims on
emulate_httpd_log off
negative_ttl 2 minutes
pipeline_prefetch on
vary_ignore_expire on
half_closed_clients off
high_page_fault_warning 2
nonhierarchical_direct on
prefer_direct off
cache_mgr mr.ekoapriadi@gmail.com
cache_effective_user proxy
cache_effective_group proxy
visible_hostname elbieNux
unique_hostname elbieNux
cachemgr_passwd none all
client_db on
max_filedescriptors 8192
n_aiops_threads 24
load_check_stopen on
load_check_stcreate on
download_fastest_client_speed on

# TAG: ZPH
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

Kalau sudah selesai anda setting mikrotiknya seperti dibawah ini :
Masukkan ini di mangle :

;;; Intl-conn

/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=packet-intl passthrough=no
/ip firewall mangle add chain=output action=mark-packet new-packet-mark=packet-intl passthrough=no

;;; PROXY-HIT

/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=proxy-hit passthrough=no dscp=12

;;; http-conn

/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=http-conn passthrough=yes protocol=tcp dst-port=80
/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=http passthrough=yes connection-mark=http-conn

;;; https-conn

/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=https-conn passthrough=yes connection-state=new protocol=tcp dst-port=443
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=https passthrough=no connection-mark=https-conn

;;; CHANGE MMS

/ip firewall mangle add chain=forward action=change-mss new-mss=1440 tcp-flags=syn protocol=tcp in-interface=public tcp-mss=1441-65535

IP FIREWALL ADDRESS-LIST :
;;; LocalNet

LocalNet     192.168.2.0/24     — IP local sesuaikan dengan IP lokal anda

;;; PROXY

ProxyNet     192.168.2.0/24 -- IP network Proxy
DNS             202.134.1.10     -- sesuaikan DNS ISP anda
DNS             202.134.0.155     -- sesuaikan DNS ISP anda
GAMES           63.241.101.0/25
GAMES           74.114.8.0/21

IP FIREWALL NAT :
;;; Nat Proxy

/ip firewall add chain=dstnat action=dst-nat to-addresses=192.168.2.20 to-ports=3128 protocol=tcp src-address=!192.168.2.20 src-address-list=LocalNet dst-address-list=!ProxyNet dst-port=80,8080,3128
connection-mark=http-conn

;;; Added by webbox

/ip firewall add chain=srcnat action=masquerade out-interface=ether1-gateway

;;; Proxy Out

/ip firewall add chain=srcnat action=src-nat to-addresses=IP INTERNET ANDA/IP PUBLIC misalnya 192.168.1.2 src-address=IP LOKAL ANDA misalnya 192.168.2.1
/ip firewall add chain=dstnat action=dst-nat to-ports=53 protocol=udp dst-port=53

;;; SSH

/ip firewall add chain=dstnat action=dst-nat to-addresses=192.168.1.2 to-ports=22 protocol=tcp dst-address=IP INTERNET ANDA/IP PUBLIC dst-port=22,10000

;;; queue tree

/queue tree add name="A_HIT-Proxy" parent=lan packet-mark=proxy-hit limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s

Selamat Mencoba Dan Semoga Berhasil :D 

Ingin menyembunyikan status proxy server kita? mungkin dari judul di atas terkesan membingungkan, Oke sekarang akan saya jelaskan sedikit, Begini kronologinya.

Ketika kita menggunakan proxy server kita baik di warnet, ISP, maupun semua bentuk penggunaan proxy server baik itu lusca maupun squid. Kadang kita mulai cek IP Address kita melalui situs seperti Whatsmyip. Nah bila kita menggunakan proxy, maka di sana akan terdeteksi nama proxy server kita. Pertanyaannya. Apakah kita bisa menyembunyikannya ? Jawab: Iya bisa. Dan sangat bisa. Oke tidak usah panjang lebar, mari kita coba aplikasikan semua ini pada mesin proxy kita.

Siapkan dulu mesin proxy kita yanng aktif dan saya asumsikan sobat sudah berada di menu sebagai root / super user dari mesin tersebut. Oke kita lanjutkan. Kemudian silahkan ketikan perintah pengeditan file squid.conf.

    #nano /etc/squid/squid.conf

Lalu pastekan kode berikut ini :

    #hidden proxy
    header_access X-Forwarded-For deny all
    header_access Proxy-Connection deny all
    header_access X-Forwarded-For deny all
    header_access Connection deny all
    header_access Via deny all

Oke silahkan kemudian restart mesin proxy sobat, atau ketikan perintah brikut

    #/etc/init.d/squid restart

Sekarang silahkan cek pada situs ini : http://www.whatismyip.com/ semoga berhasil dan semoga bermanfaat, bila masih belum berhasil silahkan poskan komentar pertanyaan sobat di bawah ini.

Oke kali ini, sesuai judul, saya mau posting sdikit informasi, tentang Perbedaan Squid dan Lusca, Oke. Berikut kira-kira perbedaan berdasarkan beberapa jenis.

Berdasarkan Package nya, Perbedaannya adalah:

    lusca : menggunakan perl versi perl squid v.perl-5.12.3 Lusca perl-5.10.1.
    squid : menggunakan ldap  sedangkan lusca tidak menggunakan

Nah berdasarkan kelebihan dan kekurangannya:

    squid : Termnasuk masih bahan mentah kalau untuk cache proxy, belum di tunning dsb.
    Lusca : kalo buat cache lusca sudah berbentuk barang jadi artinya tinggal pakai langsung jalan, Atau bisa disebut juga versi modding dari squid itu sendiri

Sedikit informasi saja, mungkin dari sobat ada yang ingin menambahkan, silahkan postkan di komentar di bawah ini. Terima Kasih. Semoga Bermanfaat.

Squid LUSCA adalah squid yang mampu menyimpan cache video selain menyimpan cache web biasa. Setelah anda menginstal ubuntu server, langkah selanjutnya adalah dengan mengupgrade ubuntu kita dan menginstal squid+LUSCA.

Setelah login ke ubuntu server dengan memakai hak akses login dan pasword admin anda, kita masuk ke direktori root dengan mengetikan :

#sudo su

kemudian masukan kembali username dan pasword anda. setelah masuk ke root directori, selanjutnya ikuti langkah-langkah berikut dengan mengetikan di console ubuntu anda.

# sudo apt-get update
# sudo apt-get install squid
# sudo apt-get install squid squidclient squid-cgi
# sudo apt-get install gcc
# sudo apt-get install build-essential
# sudo apt-get install sharutils
# sudo apt-get install ccze
# sudo apt-get install libzip-dev
# sudo apt-get install automake1.9

Mungkin membutuhkan banyak waktu sampai update dan proses instal diatas selesai, dan tergantung kecepatan internet anda.
Setelah proses selesai kemudian download LUSCA dengan cara mengetikan di console ubuntu anda :

#wget http://lusca-cache.googlecode.com/files/LUSCA_HEAD-r14756.tar.gz

Extract LUSCA yang telah di download tadi :

#tar xvf LUSCA_HEAD-r14756.tar.gz

Masuk ke direktori LUSCA :

#cd LUSCA_HEAD-r14756

Sebelum mengompile LUSCA, lakukan perintah dibawah ini :

#./bootstrap.sh

Mengompile LUSCA, copas perintah dibawah ini :

./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid
--sysconfdir=/etc/squid \
--localstatedir=/var/spool/squid --datadir=/usr/share/squid --enable-http-gzip --enable-async-io=24 --with-aufs-threads=24
--with-pthreads --enable-storeio=aufs \
--enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=heap --with-aio --with-dl --enable-snmp \
--enable-delay-pools --enable-htcp --enable-cache-digests --disable-unlinkd --enable-large-cache-files --with-large-files \
--enable-err-languages=English --enable-default-err-language=English --with-maxfd=65536

Setelah proses compile selesai, lakukan peritah dibawah :

# make
# make install

Setelah proses diatas selesai, berarti anda sudah berhasil menginstal squid+LUSCA di ubuntu server anda. tetapi sebelum mengaktifkan squid lusca anda, ada hal-hal yang harus di edit:

1. Copy squid.conf dan storeurl.pl ke folder /etc/squid dalam ubuntu server anda.
2. Edit squid.conf dan sesuaikan dengan jaringan anda
3. edit Aufs di file squid.conf anda

Dalam mengupload atau mengcopikan file squid.conf dan mengeditnya, ada berbagai cara diantaranya yaitu dengan cara remote ubuntu kita dengan memakai winscp dan putty. Supaya file-file dalam folder /etc/squid di ubuntu anda bisa di copas dan di edit, kita harus memberikan permission dulu pada folder dan file tersebut stop dulu squid anda dengan cara :

#sudo /etc/init.d/squid stop

Berikan permision pada folder dan file di /etc/squid :

#chmod 777 /etc/squid
#chmod 777 /etc/squid/squid.conf
#chmod 777 /etc/squid/storeurl.pl

Selanjutnya copas file-file yang dibutuhkan yang telah di download tadi kedalam folder /etc/squid yang ada didalam ubuntu server anda kemudian edit squid.conf dan sesuaikan dengan jaringan anda. Jangan lupa edit juga aufs yang ada di squid.conf. perhitungan ufs disesuaikan dengan besarnya ukuran masing-masing cache yang anda gunakan. cara perhitungan aufs adalah :

(((x / y) / 256) / 256) * 2
x=besarnya partisi untuk /cache dalam KB
z=Number of directories per first level directory

Contoh :

Apabila cache kita berukuran 30Gb=30000000Kb
30,000,000 / 13 = 2307692.3 / 256 = 19014.5 / 256 = 35.2 * 2 = 70
Jadi angka buat L1nya adalah 70. berarti setingan aufs pada squid.conf anda adalah :

cache_dir aufs 30000 70 256

Setelah selesai mengedit squid.conf langkah selanjutnya adalah memberikan permission kepada partisi hardisk cache yang kita pakai, yaitu dengan cara:

#chown proxy:proxy /cache1
#chown proxy:proxy /cache2
#chown proxy:proxy /cache3
#chown proxy:proxy /var/log/squid/access.log
#chown proxy:proxy /etc/squid/storeurl.pl
#chmod 777 /cache1
#chmod 777 /cache2
#chmod 777 /cache3
#squid -f /etc/squid/squid.conf –z

Restart squid ada

#sudo /etc/init.d/squid restart

Kemudian PC sobat :

#reboot

Selesai, dan dilahkan sobat coba browse ke http://www.speedtest.net . Terimakasih.
Sumber : Berbagai sumber (www.google.com)