Squid代理的安装和配置
- Squid是Linux常用的Web代理软件,在Ubuntu 24.04上安装非常简单。
- sudo apt update && sudo apt upgrade
- sudo apt install squid
- 安装之后,squid.service就正常启动了,你可以使用下面命令查看服务状态,可以看到监听端口是3128.
- sudo systemctl status squid
Dec 22 09:12:21 squid[2401]: HTCP Disabled. Dec 22 09:12:21 squid[2401]: Pinger socket opened on FD 14 Dec 22 09:12:21 squid[2401]: Squid plugin modules loaded: 0 Dec 22 09:12:21 systemd[1]: Started squid.service - Squid Web Proxy Server. Dec 22 09:12:21 squid[2401]: Adaptation support is off. Dec 22 09:12:21 squid[2401]: Accepting HTTP Socket connections at conn3 local=[::]:3128 remote=[::] FD 12 flags=9 listening port: 3128
- 安装之后,可以在本地浏览器配置一下这个代理,看是否work。
- Firefox的网络设置中,有手动配置代理的选项。配置本地地址和端口,测试联网是否正常。
Manual proxy configuration HTTP Proxy: localhost Port: 3128 (*) Also use this proxy for HTTPS
- 下面尝试修改端口和其他安全设置。Squid配置文件如下,这个文件有10000行,所以修改前一定要备份
- /etc/squid/squid.conf
- sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.backup
- sudo vim /etc/squid/squid.conf
- Find http_port 3128 And change it if necessary
- Find the line: http_access allow localnet And uncomment it
- 配置文件修改完成后,记得重启服务
- sudo systemctl restart squid
- 最后,确保防火墙对3128端口已开。这样,web代理就可以对同局域网的机器其作用了
- sudo ufw allow 3128/tcp comment ‘web proxy’
- sudo ufw status
Status: active To Action From -- ------ ---- 3128/tcp ALLOW Anywhere # web proxy 3128/tcp (v6) ALLOW Anywhere (v6) # web proxy