Index

A

• access, to ports
  • ICP port / ICP port
  • HTCP port / HTCP port
  • purge access via HTCP / Purge access via HTCP
  • SNMP port / SNMP port
• access control
  • testing, squidclient used / Testing access control with squidclient
  • debugging / Time for action – debugging access control
• access control configuration
  • Squid in only reverse proxy mode / Squid in only reverse proxy mode
  • Squid in reverse proxy and forward proxy mode / Squid in reverse proxy and forward proxy mode
  • example configurations / Example configurations
• access list rules
  • access to HTTP protocol / Access to HTTP protocol
  • about / Access to HTTP protocol
  • access to other ports / Access to other ports
  • icp_access / ICP port
  • htcp_clr_access / Purge access via HTCP
  • snmp_access / SNMP port
  • limited access to neighbors / Enforcing limited access to neighbors
  • miss_access rule / Time for action – denying miss_access to neighbors
  • requests to neighbor proxy servers / Requesting neighbor proxy servers
  • cache_peer_access rule / Requesting neighbor proxy servers
  • requests, forwarding to remote servers / Forwarding requests to remote servers
  • always_direct / Forwarding requests to remote servers
  • never_direct / Forwarding requests to remote servers
  • ident lookup access / Ident lookup access
  • ident_lookup_access / Ident lookup access
  • controlled caching of web documents / Controlled caching of web documents
  • URL rewrite access / URL rewrite access
  • url_rewrite_access / URL rewrite access
  • HTTP header access / HTTP header access
  • request_header_access / HTTP header access
  • reply_header_access / HTTP header access
  • custom error pages / Custom error pages
  • deny_info / Custom error pages
  • reply_body_max_size / Maximum size of the reply body
  • reply size / Maximum size of the reply body
  • requests, logging selectively / Logging requests selectively
  • log_access rule / Logging requests selectively
• access log
  • about / Access log, Time for action – understanding the access log messages
  • access log messages / Time for action – understanding the access log messages
  • syntax, analyzing / Access log syntax, Time for action – analyzing a syntax to specify access log
  • none module / Time for action – analyzing a syntax to specify access log
  • stdio module / Time for action – analyzing a syntax to specify access log
  • daemon module / Time for action – analyzing a syntax to specify access log
  • syslog module / Time for action – analyzing a syntax to specify access log
  • tcp module / Time for action – analyzing a syntax to specify access log
  • udp module / Time for action – analyzing a syntax to specify access log
  • log messages, sending to syslog / Have a go hero – logging messages to the syslog module
  • log format / Time for action – learning log format and format codes
  • format codes / Time for action – learning log format and format codes
  • log formats, by Squid / Log formats provided by Squid
  • customizing / Time for action – customizing the access log with a new log format
• access rules
  • constructing, request protocol used / Time for action – using a request protocol to construct access rules, What just happened?
• access to HTTP protocol
  • about / Access to HTTP protocol
  • adapted HTTP access / Adapted HTTP access
  • HTTP access for replies / HTTP access for replies
• access_log directive / Logging messages in web server log format
• ACL lists
  • constructing, IP adresses used / Time for action – constructing ACL lists using IP addresses
  • constructing, range of IP addresses used / Time for action – using a range of IP addresses to build ACL lists
  • constructing, domain names used / Time for action – constructing ACL lists using domain names
  • constructing, destination ports used / Time for action – building ACL lists using destination ports
  • constructing, for audio content / Have a go hero – ACL list for audio content
• ACL lists and rules
  • example scenarios / Mixing ACL lists and rules – example scenarios
• ACLs
  • about / Access control lists, Access control lists
  • constructing / Time for action – constructing simple ACLs
  • pre-defined ACLs / Have a go hero – understanding the pre-defined ACLs
  • fast ACL types / Fast and slow ACL types
  • slow ACL types / Fast and slow ACL types
  • source and destination IP address / Source and destination IP address
  • source and destination domain names / Source and destination domain names
  • destination port / Destination port
  • HTTP methods / HTTP methods
  • request protocol, using / Identifying requests using the request protocol
  • time-based ACLs / Time-based ACLs
  • URL path-based identification / URL and URL path-based identification
  • client usernames, identifying / Matching client usernames
  • proxy authentication / Proxy authentication
  • user limits / User limits
  • identification, based on HTTP headers / Identification based on various HTTP headers
  • HTTP reply status / HTTP reply status
  • random requests, identifying / Identifying random requests
• ACL types
  • srcdomain / Fast and slow ACL types, Source and destination domain names
  • src / Time for action – constructing ACL lists using IP addresses
  • dst / Time for action – constructing ACL lists using IP addresses
  • myip / Identifying local IP addresses
  • arp / Client MAC addresses
  • mac_acl / Client MAC addresses
  • dstdomain / Source and destination domain names
  • our_network / Time for action – constructing ACL lists using domain names
  • srcdom_regex / Regular expressions for domain names
  • dstdom_regex / Regular expressions for domain names
  • port / Time for action – building ACL lists using destination ports
  • myportname / Local port name
  • proto / Identifying requests using the request protocol
  • time / Time-based ACLs
  • url_regex / URL and URL path-based identification
  • urlpath_regex / URL and URL path-based identification
  • ident / Matching client usernames
  • proxy_auth / Proxy authentication
  • proxy_auth_regex / Regular expressions for usernames
  • maxconn / Maximum number of connections per client
  • max_user_ip / Maximum logins per user
  • referer_regex / Referer identification
  • req_mime_type / Content type-based identification
  • rep_mime_type / Content type-based identification
  • browser / Other HTTP headers
  • req_header / Other HTTP headers
  • https_status / HTTP reply status
  • random / Identifying random requests
• address already in use issue, solving
  • program listening, finding on specific port / Time for action – finding the program listening on a specific port
• advantages, interception caching
  • zero client configuration / Zero client configuration
  • better control / Better control
  • increased reliability / Increased reliability
• Ad Zapper
  • about / Ad Zapper
  • features / Ad Zapper
• allow-direct, HTTP options
  • about / allow-direct
• allowed_ports ACL / Time for action – building ACL lists using destination ports
• always_direct access list rule / Forwarding requests to remote servers
• always_direct directive
  • about / Always direct
  / always_direct
• Apache Web server
  • installing / Time for action – installing Apache Web server
  • configuring, for providing cache manager web interface / Configuring Apache for providing the cache manager web interface
  • configuring, to use cachemgr.cgi / Time for action – configuring Apache to use cachemgr.cgi
• append_domain directive
  • about / Default domain name for requests
• Arch Linux
  • Squid installation / Arch Linux
• arp, ACL types / Client MAC addresses
• aufs
  • about / Storage types
• authenticate_ip_ttl directive / Maximum logins per user
• authentication issues
  • about / Common issues with authentication
  • whitelisting selected websites / Whitelisting selected websites
  • loops, challenging / Challenge loops
  • in intercept or transparent mode / Authentication in the intercept or transparent mode
• auth_param directives / Proxy authentication
• auth_param parameters
  • about / Digest authentication

B

• backend web servers
  • adding, to Squid / Adding backend web servers, Time for action – adding backend web servers
• backend web servers, adding
  • cache peer options / Cache peer options for reverse proxy mode
• basic authentication, Squid
  • about / Basic authentication
  • exploring / Time for action – exploring Basic authentication
  • database authentication / Database authentication
  • database authentication, configuring / Configuring database authentication
  • NCSA authentication / NCSA authentication
  • NCSA authentication, configuring / Time for action – configuring NCSA authentication
  • NIS authentication / NIS authentication
  • LDAP authentication / LDAP authentication
  • SMB authentication / SMB authentication
  • PAM Authentication / PAM authentication
  • MSNT authentication / MSNT authentication
  • MSNT authentication, configuring / Time for action – configuring MSNT authentication
  • MSNT multi domain authentication / MSNT multi domain authentication
  • SASL authentication / SASL authentication
  • getpwnam authentication / getpwnam authentication
  • POP3 authentication / POP3 authentication
  • RADIUS authentication / RADIUS authentication
  • fake basic authentication / Fake Basic authentication
• basic_db_auth helper
  • about / Database authentication
• basic_fake_auth helper
  • about / Fake Basic authentication
• basic_ldap_auth helper
  • about / LDAP authentication
• basic_pam_auth helper
  • about / PAM authentication
• basic_pam_auth Squid helper
  • about / What just happened?
• basic_radius_auth helper
  • about / Time for action – configuring RADIUS authentication
• basic_smb_auth helper
  • about / SMB authentication
• Bazaar
  • about / Obtaining the latest source code from Bazaar VCS
  • URL / Obtaining the latest source code from Bazaar VCS
• Bloom Filter
  • URL / Cache digests
  • about / Cache digests
• broken_posts directive
  • about / Broken posts
• browser, ACL types / Other HTTP headers
• browser reloads, ignoring
  • ignore-cc option, used / Using ignore-cc
  • ignore-reload option, used / Using ignore-reload
  • reload-into-ims, used / Using reload-into-ims
• bug report
  • about / Getting help online and reporting bugs
  • URL / Getting help online and reporting bugs
• Bugzilla account / Getting help online and reporting bugs

C

• --cond option, database authentication options
  • about / Configuring database authentication
• cache client list
  • about / Cache Client List
• cache digest configuration
  • about / Squid and cache digest configuration
  • digest generation directive / Digest generation
  • digest_bits_per_entry directive / Digest bits per entry
  • digest_rebuild_period directive / Digest rebuild period
  • digest_rebuild_chunk_percentage directive / Digest rebuild chunk percentage
  • digest_swapout_chunk directive / Digest swapout chunk
  • digest_rewrite_period directive / Digest rewrite period
• cache digests
  • about / Cache digests
  • enabling / Squid and cache digest configuration
• cache directories
  • creating / Creating cache or swap directories
  • adding / Have a go hero – adding cache directories
• cache directory permissions
  • fixing / Time for action – fixing cache directory permissions
• cached objects, in hard disks
  • about / Using hard disks for caching
  • storage space, specifying / Specifying the storage space
  • cache directory, creating / Time for action – creating a cache directory
  • cache size, declaring / Declaring the size of the cache
  • sub directories, configuring / Configuring the number of sub directories
  • read-only cache / Read-only cache
  • cache directory, adding / Time for action – adding a cache directory
  • cache directory, selecting / Cache directory selection
  • size limits / Cache object size limits
  • object replacement limits, setting / Setting limits on object replacement
• cached objects, in RAM
  • in-transit objects / In-transit objects or current requests
  • current requests / In-transit objects or current requests
  • popular objects / Hot or popular objects
  • negatively cached objects / Negatively cached objects
  • object size, in memory / Maximum object size in memory
  • memory cache mode / Memory cache mode
• cache hierarchy
  • about / Cache hierarchies
  • Cache Digests protocol, using / Cache hierarchies
  • CARP protocol, using / Cache hierarchies
  • ICP protocol, using / Cache hierarchies
  • HTCP protocol, using / Cache hierarchies
  • joining / Joining a cache hierarchy
  • ICP options / ICP options
  • HTCP options / HTCP options
  • peer selection options / Peer or neighbor selection
  • SSL or HTTPS options / no-digest
  • cache peer options / Other cache peer options
• cache log
  • about / Cache log or debug log, Time for action – understanding the cache log
  • exploring / Have a go hero – exploring the cache log
• cache manager
  • about / Cache manager
• cache manager web interface
  • Apache Web server, installing / Installing the Apache Web server
  • Apache, configuring / Configuring Apache for providing the cache manager web interface
  • accessing / Accessing the cache manager web interface
  • Squid, configuring / Configuring Squid
  • cache manger, logging in / Log in to cache manger
  • general runtime information / General Runtime Information
  • IP Cache Stats and Contents / IP Cache Stats and Contents
  • FQDN Cache Statistics / FQDN Cache Statistics
  • HTTP Header Statistics / HTTP Header Statistics
  • traffic and resource counters / Traffic and Resource Counters
  • request forwarding statistics / Request Forwarding Statistics
  • cache client list / Cache Client List
  • memory utilization / Memory Utilization
  • internal DNS statistics / Internal DNS Statistics
  • cache manager, exploring / Have a go hero – exploring cache manager
• cache peer options
  • about / Other cache peer options
  • login=usernameTopicncache peer optionslogin=usernamepassword / login=username:password
  • login=PASS / login=PASS
  • login=PASSTHRU / login=PASSTHRU
  • login=NEGOTIATE / login=NEGOTIATE
  • connect-timeout / connect-timeout
  • connect-fail-limit / connect-fail-limit
  • max-conn / max-conn
  • name / name
  • proxy-only / proxy-only
  • allow-miss / allow-miss
• cache peer options, for reverse proxy mode
  • about / Cache peer options for reverse proxy mode
  • originserver / originserver
  • forcedomain / forcedomain
• cache peers
  • about / Cache peers or neighbors
  • declaring / Declaring cache peers
  • adding / Time for action – adding a cache peer
  • domain access, restricting / Quickly restricting access to domains using peers
  • access, controlling / Advanced control on access using peers
• cache replacement policies
  • about / Cache replacement policies
  • least recently used (lru) / Least recently used (LRU)
  • GDSF / Greedy dual size frequency (GDSF)
  • LFUDA / Least frequently used with dynamic aging (LFUDA)
• cache store log
  • about / Cache store log
• cache_dir directive
  • about / Read-only cache
  / Failed verification of swap directories
• cache_dns_program directive
  • about / Specifying the DNS program path
• cache_effective_user directive / Syntax of the configuration file, Matching client usernames, Time for action – changing the ownership of log files
  • about / Setting the effective user for running Squid
• cache_mem / Squid becomes slow over time
• cache_object URL scheme / Time for action – using a request protocol to construct access rules
• cache_peer directive / Declaring cache peers, Requesting neighbor proxy servers, Joining a cache hierarchy, Connection refused when reaching a sibling proxy server
• cache_peer_access directive
  • about / Cache peer access
• cache_peer_access rule / Requesting neighbor proxy servers
• cache_peer_domain directive
  • about / Domain-based forwarding
• cache_replacement_policy directive
  • about / Least frequently used with dynamic aging (LFUDA)
• cache_swap_high directive
  • about / Setting limits on object replacement
• cache_swap_low directive
  • about / Setting limits on object replacement
• caching
  • about / Caching web documents
• cafile, HTTPS options
  • about / cafile
• Calamaris
  • about / Log file analyzers
  • reports / Calamaris
  • features / Calamaris
  • installing / Installing Calamaris
  • statistics, generating / Using Calamaris to generate statistics
  • statistics, generating in plain text format / Time for action – generating stats in plain text format, What just happened?
  • reports, exploring / Have a go hero – exploring the reports
  • graphical reports, generating / Time for action – generating graphical reports with Calamaris
  • exploring / Have a go hero – exploring Calamaris
• capath, HTTPS options
  • about / capath
• Captive portal
  • reference link / Security vulnerabilities
• CDN
  • about / Reasons to use hierarchical caching
  • function / Reasons to use hierarchical caching
  • resources / Reasons to use hierarchical caching
• CentOS
  • Squid installation / Fedora, CentOS or Red Hat
• Certificate Authorities (CAs) / clientca
• cert parameter
  • about / HTTPS options in reverse proxy mode
• check_nonce_count parameter
  • about / Digest authentication
• children parameter
  • about / Time for action – exploring Basic authentication
• chown command / Time for action – changing the ownership of log files
• cipher, HTTPS options
  • about / cipher
• Cisco devices
  • about / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
• clientca, HTTPS options
  • about / clientca
• client IP addresses
  • listing / Have a go hero – make a list of the client IP addresses in your network
  • local IP address, identifying / Identifying local IP addresses
  • client MAC addresses / Client MAC addresses
• client MAC addresses
  • about / Client MAC addresses
• Client netmask
  • about / Client netmask
• client usernames
  • identifying / Matching client usernames
  • Regular expressions / Regular expressions for client usernames
• command line options, Squid
  • about / Command line options
• communication interface, Squid-URL redirector communication
  • about / Communication interface
  • fields / Communication interface
  • message flow, exploring / Time for action – exploring the message flow between Squid and redirectors, What just happened?
  • URL redirector program, writing / Time for action – writing a simple URL redirector program
• compiling Squid
  • about / Compiling Squid
  • advantages / Why compile?
• complex access control
  • testing, squidclient used / Time for action – testing a complex access control
• configuration directives
  • about / Other configuration directives
  • effective user, setting / Setting the effective user for running Squid
  • cache_effective_user directive / Setting the effective user for running Squid
  • visible_hostname directive / Configuring hostnames for the proxy server
  • hostnames, configuring / Configuring hostnames for the proxy server
  • unique_hostname directive / Configuring hostnames for the proxy server
  • visible_hostname / Hostname visible to everyone
  • unique hostname / Unique hostname for the server
  • request forwarding, controlling / Controlling the request forwarding
  • prefer_direct directive / Controlling the request forwarding
  • never_direct directive / Controlling the request forwarding, Never direct
  • hierarchy_stoplist directive / Controlling the request forwarding, Hierarchy stoplist
  • cache_peer_access directive / Controlling the request forwarding
  • always_direct directive / Controlling the request forwarding, Always direct
  • broken_posts directive / Broken posts
  • TCP outgoing address / TCP outgoing address
  • PID filename / PID filename
  • Client netmask / Client netmask
• configuration options
  • --help option / Configure or system check
  • --prefix option / --prefix
  • --enable-gnuregex / --enable-gnuregex
  • --disable-inline / --disable-inline
  • --disable-optimizations / --disable-optimizations
  • --enable-storeio / --enable-storeio
  • --enable-removal-policies / --enable-removal-policies
  • --enable-icmp / --enable-icmp
  • --enable-delay-pools / --enable-delay-pools
  • --enable-esi / --enable-esi
  • --enable-useragent-log / --enable-useragent-log
  • --enable-referer-log / --enable-referer-log
  • --disable-wccp / --disable-wccp
  • --disable-wccpv2 / --disable-wccpv2
  • --disable-snmp / --disable-snmp
  • --enable-cachemgr-hostname / --enable-cachemgr-hostname
  • --enable-arp-acl / --enable-arp-acl
  • --disable-htcp / --disable-htcp
  • --enable-ssl / --enable-ssl
  • --enable-cache-digests / --enable-cache-digests
  • --enable-default-err-language / --enable-default-err-language
  • --enable-err-languages / --enable-err-languages
  • --disable-http-violations / --disable-http-violations
  • --enable-ipfw-transparent / --enable-ipfw-transparent
  • --enable-ipf-transparent / --enable-ipf-transparent
  • --enable-pf-transparent / --enable-pf-transparent
  • --enable-linux-netfliter / --enable-linux-netfliter
  • --enable-follow-x-forwarded-for / --enable-follow-x-forwarded-for
  • --disable-ident-lookups / --disable-ident-lookups
  • --disable-internal-dns / --disable-internal-dns
  • --enable-default-hostsfile / --enable-default-hostsfile
  • --enable-auth / --enable-auth
  • old syntax, --enable-auth / Old Syntax
  • new syntax, --enable-auth / New Syntax
  • --enable-auth-basic / --enable-auth-basic
  • --enable-auth-ntlm / --enable-auth-ntlm
  • --enable-auth-negotiate / --enable-auth-negotiate
  • --enable-auth-digest / --enable-auth-digest
  • --enable-ntlm-fail-open / --enable-ntlm-fail-open
  • --enable-external-acl-helpers / --enable-external-acl-helpers
  • --disable-translation / --disable-translation
  • --disable-auto-locale / --disable-auto-locale
  • --disable-unlinkd / --disable-unlinkd
  • --with-default-user / --with-default-user
  • --with-logdir / --with-logdir
  • --with-pidfile / --with-pidfile
  • --with-aufs-threads / --with-aufs-threads
  • --without-pthreads / --without-pthreads
  • --with-openssl / --with-openssl
  • --with-large-files / --with-large-files
  • --with-filedescriptors / --with-filedescriptors
  • listing / Getting a list of available options, What just happened?
• configuration options, surrogate protocol
  • about / Configuration options for surrogate support
  • httpd_accel_surrogate_id / httpd_accel_surrogate_id
  • httpd_accel_surrogate_remote / httpd_accel_surrogate_remote
• configure command / --prefix
• configure or system check
  • about / Configure or system check
• CONNECT method / HTTP methods
• Content-Type HTTP header / Content type-based identification
• credentialsttl parameter
  • about / Time for action – exploring Basic authentication
• CRL (Certificate Revocation List) / capath
• crlfile, HTTPS options
  • about / crlfile
• custom access denied page
  • about / Have a go hero – custom access denied page
• custom authentication helper
  • writing / Writing a custom authentication helper, Time for action – writing a helper program, Have a go hero – implementing the validation function
• custom error pages
  • about / Custom error pages
• custom URL redirector program
  • writing / Writing our own URL redirector program
  • custom template, writing / Time for action – writing our own template for a URL redirector
  • redirector program, extending / Have a go hero – extend the redirector program

D

• --disable-auth-ntlm option / --enable-auth-ntlm
• --disable-auto-locale, configuration options / --disable-auto-locale
• --disable-htcp, configuration options / --disable-htcp
• --disable-http-violations, configuration options / --disable-http-violations
• --disable-ident-lookups, configuration options / --disable-ident-lookups
• --disable-inline, configuration options / --disable-inline
• --disable-internal-dns, configuration options / --disable-internal-dns
• --disable-optimizations, configuration options / --disable-optimizations
• --disable-snmp, configuration options / --disable-snmp
• --disable-translation, configuration options / --disable-translation
• --disable-unlinkd, configuration options / --disable-unlinkd
• --disable-wccp, configuration options / --disable-wccp
• --disable-wccpv2, configuration options / --disable-wccpv2
• --dsn option, database authentication options
  • about / Configuring database authentication
• daemon module, access log / Time for action – analyzing a syntax to specify access log
• database authentication
  • about / Database authentication
  • configuring / Configuring database authentication
  • options / Configuring database authentication
• database authentication options
  • --dsn / Configuring database authentication
  • --user / Configuring database authentication
  • --password / Configuring database authentication
  • --table / Configuring database authentication
  • --usercol / Configuring database authentication
  • --passwdcol / Configuring database authentication
  • --plaintext / Configuring database authentication
  • --cond / Configuring database authentication
  • --md5 / Configuring database authentication
  • --salt / Configuring database authentication
  • --persist / Configuring database authentication
  • --joomla / Configuring database authentication
• Debian
  • Squid installation / Debian or Ubuntu
• debug log
  • about / Cache log or debug log
• debug_options directive / Debugging problems
• default domain name
  • appending / Default domain name for requests
• defaultsite, HTTP options
  • about / defaultsite
• defaultsite, HTTPS options
  • about / defaultsite
• DELETE method / HTTP methods
• deny_info access list rule / Custom error pages
• deny_info directive
  • about / A special URL redirector – deny_info
• destination ports
  • used, for building ACL lists / Time for action – building ACL lists using destination ports
• dhparams, HTTPS options
  • about / dhparams
• different configuration file
  • using / Using a different configuration file
• different versions, Squid
  • about / Time for action – identifying the right version
• digest_bits_per_entry directive / Digest bits per entry
• digest_edirectory_auth authentication helper
  • about / eDirectory authentication
• digest_file_auth helper
  • about / File authentication
• digest_generation directive / Digest generation
• digest_ldap_auth authentication helper
  • about / eDirectory authentication
• digest_ldap_auth helper
  • about / LDAP authentication
• digest_rebuild_chunk_percentage directive / Digest rebuild chunk percentage
• digest_rebuild_period directive / Digest rebuild period
• digest_rewrite_period directive / Digest rewrite period
• digest_swapout_chunk directive / Digest swapout chunk
• directives, types
  • about / Types of directives
  • single valued directives / Single valued directives
  • boolean-valued or toggle directives / Boolean-valued or toggle directives
  • multi-valued directives / Multi-valued directives
  • directives with time as value / Directives with time as a value
  • directives with file or memory size as values / Directives with file or memory size as values
  • categorizing / Have a go hero – categorize the directives
• disadvantages, interception caching
  • violates TCP/IP standards / Violates TCP/IP standards
  • susceptible to routing problems / Susceptible to routing problems
  • no authentication / No authentication
  • supports only HTTP interception / Supports only HTTP interception
  • client exposure / Client exposure
  • IP filtering / IP filtering
  • Protocol support / Protocol support
  • security vulnerabilities / Security vulnerabilities
• Disk Daemon (diskd) storage
  • about / Storage types
• DNS cache size
  • setting / Setting the size of the DNS cache
• DNS client processes
  • controlling / Controlling the number of DNS client processes
• DNS name servers
  • setting / Setting the DNS name servers
  • adding, to Squid / Time for action – adding DNS name servers
• DNS program path
  • specifying / Specifying the DNS program path
• DNS responses
  • caching / Caching the DNS responses
• DNS server configuration
  • about / DNS server configuration
  • DNS program path, specifying / Specifying the DNS program path
  • DNS client processes, controlling / Controlling the number of DNS client processes
  • DNS name servers, setting / Setting the DNS name servers
  • hosts file, setting / Setting the hosts file
  • default domain name, appending / Default domain name for requests
  • DNS queries timeout / Timeout for DNS queries
  • DNS responses, caching / Caching the DNS responses
  • DNS cache size, setting / Setting the size of the DNS cache
• dns_children directive
  • about / Controlling the number of DNS client processes
• dns_timeout directive
  • about / Timeout for DNS queries
• domain-based forwarding
  • about / Domain-based forwarding
  • Squid, configuring for / Time for action – configuring Squid for domain-based forwarding
• domains, hosted in local network
  • listing / Have a go hero – make a list of domains hosted in your local network
• Dragonfly BSD
  • Squid installation / Dragonfly BSD
• DragonFlyBSD / Time for action – enabling IP forwarding
• dst, ACL types
  • about / Time for action – constructing ACL lists using IP addresses
• dstdomain, ACL types / Source and destination domain names
• dstdom_regex, ACL types / Regular expressions for domain names

E

• --enable-arp-acl, configuration options / --enable-arp-acl
• --enable-auth, configuration options / --enable-auth
• --enable-auth-basic, configuration options / --enable-auth-basic
• --enable-auth-digest, configuration options / --enable-auth-digest
• --enable-auth-negotiate, configuration options / --enable-auth-negotiate
• --enable-auth-ntlm, configuration options / --enable-auth-ntlm
• --enable-cache-digests, configuration options / --enable-cache-digests
• --enable-cachemgr-hostname, configuration options / --enable-cachemgr-hostname
• --enable-default-err-language, configuration options / --enable-default-err-language
• --enable-default-hostsfile, configuration options / --enable-default-hostsfile
• --enable-delay-pools, configuration options / --enable-delay-pools
• --enable-err-languages, configuration options / --enable-err-languages
• --enable-esi, configuration options / --enable-esi
• --enable-external-acl-helpers, configuration options / --enable-external-acl-helpers
• --enable-follow-x-forwarded-for, configuration options / --enable-follow-x-forwarded-for
• --enable-gnuregex, configuration options / --enable-gnuregex
• --enable-icmp, configuration options / --enable-icmp
• --enable-ipf-transparent, configuration options / --enable-ipf-transparent
• --enable-ipfw-transparent, configuration options / --enable-ipfw-transparent
• --enable-linux-netfliter, configuration options / --enable-linux-netfliter
• --enable-ntlm-fail-open, configuration options / --enable-ntlm-fail-open
• --enable-pf-transparent, configuration options / --enable-pf-transparent
• --enable-referer-log, configuration options / --enable-referer-log
• --enable-removal-policies, configuration options / --enable-removal-policies
• --enable-ssl, configuration options / --enable-ssl
• --enable-storeio, configuration options / --enable-storeio
• --enable-useragent-log, configuration options / --enable-useragent-log
• /etc/rc.local file / Adding Squid command to /etc/rc.local file
• eDirectory authentication
  • about / eDirectory authentication
• error_directory tag / --disable-auto-locale
• ESI
  • about / Support for ESI protocol
• ESI protocol
  • advantages / Support for ESI protocol
  • about / Support for ESI protocol
  • reference link / Support for ESI protocol
• ESI support
  • Squid, configuring for / Configuring Squid for ESI support
  • enabling / Configuring Squid for ESI support
• esi_parser directive / Configuring Squid for ESI support
• example configurations, Squid in reverse proxy mode
  • configuration for accelerating a web server hosting / Web server and Squid server on the same machine
  • accelerating multiple backend web servers hosting one website / Accelerating multiple backend web servers hosting one website
  • accelerating multiple web servers hosting multiple websites / Accelerating multiple web servers hosting multiple websites
• example scenarios
  • about / Mixing ACL lists and rules – example scenarios
  • caching local content, handling / Handling caching of local content
  • caching local content, avoiding / Time for action – avoiding caching of local content
  • access, denying from external networks / Denying access from external networks
  • access, denying to selective clients / Denying access to selective clients
  • video content, blocking / Time for action – blocking video content
  • rules, for special access / Time for action – writing rules for special access
  • limited access, during working hours / Limited access during working hours
  • special ports connection, allowing / Allowing some clients to connect to special ports
• example_com_jpg ACL / URL and URL path-based identification

F

• failed requests
  • caching / Caching the failed requests
• fake basic authentication
  • configuring / Fake Basic authentication
• fake NTLM authentication
  • about / Fake NTLM authentication
• fast ACL types
  • about / Fast and slow ACL types
• Fedora
  • Squid installation / Fedora, CentOS or Red Hat
• field module, access log / Time for action – analyzing a syntax to specify access log
• fields, communication interface
  • ID / Communication interface
  • URL / Communication interface
  • client_IP / Communication interface
  • FQDN / Communication interface
  • username / Communication interface
  • method / Communication interface
  • myip=IP / Communication interface
  • myport=PORT / Communication interface
  • kv-pairs / Communication interface
• file authentication
  • about / File authentication
• file descriptors
  • about / Have a go hero – file descriptors
• format codes, access log / Time for action – learning log format and format codes
• FQDN cache statistics
  • about / FQDN Cache Statistics
• FreeBSD
  • Squid installation / FreeBSD
• fstat command / For OpenBSD and NetBSD

G

• GDSF
  • about / Greedy dual size frequency (GDSF)
• general runtime information
  • about / General Runtime Information
• Gentoo
  • Squid installation / Gentoo
• GET method / HTTP methods
• getpwnam()
  • about / getpwnam authentication
• getpwnam authentication
  • about / getpwnam authentication
• getpwnam authentication helper
  • about / getpwnam authentication
• GRE (Generic Routing Encapsulation) tunnel
  • about / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel

H

• --help option, configuration options / Configure or system check
• hard disks, for cached objects
  • storage space, specifying / Specifying the storage space
  • storage types / Storage types
  • cache directory, selecting / Choosing a directory name or location, Cache directory selection
  • cache directory, creating / Time for action – creating a cache directory
  • cache size, declaring / Declaring the size of the cache
  • sub directories, configuring / Configuring the number of sub directories
  • cache directory, adding / Time for action – adding a cache directory
  • cache object size limits / Cache object size limits
  • object replacement limits, setting / Setting limits on object replacement
• header_replace directive
  • about / Playing around with HTTP headers
• helper-mux program
  • about / Making non-concurrent helpers concurrent
• helper concurrency
  • about / Making non-concurrent helpers concurrent
• hierarchical caching
  • about / Reasons to use hierarchical caching
  • benefits / Reasons to use hierarchical caching
  • example / Reasons to use hierarchical caching
  • issues / Problems with hierarchical caching
  • issues, example scenario / Problems with hierarchical caching
  • forwarding loop, avoiding / Avoiding a forwarding loop
• hierarchy_stoplist directive
  • about / Hierarchy stoplist
  / hierarchy_stoplist
• Host HTTP header
  • rewriting / Rewriting the Host HTTP header
• hosts file
  • setting / Setting the hosts file
• hosts_file directive
  • about / Setting the hosts file
• HTCP
  • about / Hypertext Caching Protocol
  • advantages, over ICP protocol / Hypertext Caching Protocol
  • reference link / Hypertext Caching Protocol
• HTCP (Hypertext Caching Protocol) / HTCP port
• HTCP access
  • about / HTCP access
• HTCP CLR access
  • about / HTCP CLR access
• HTCP CLR requests / Purge access via HTCP
• HTCP options, cache hierarchy
  • about / HTCP options
  • htcp / htcp
  • htcp=oldsquid / htcp=oldsquid
  • htcp=no-clr / htcp=no-clr
  • htcp=only-clr / htcp=only-clr
  • htcp=no-purge-clr / htcp=no-purge-clr
  • htcp=forward-clr / htcp=forward-clr
• htcp_access directive / HTCP options
• htcp_clr_access directive / HTCP CLR access
• htcp_clr_access rule / Purge access via HTCP
• htcp_port directive / HTCP options
• HTTP access control
  • about / HTTP access control
  • with ACLs / Time for action – combining ACLs and HTTP access
• HTTP authentication, Squid
  • about / HTTP authentication
• HTTP Digest authentication
  • about / Digest authentication
  • auth_param parameters / Digest authentication
  • parameters / Digest authentication
  • nonce_garbage_interval parameter / Digest authentication
  • nonce_max_duration parameter / Digest authentication
  • nonce_max_count parameter / Digest authentication
  • nonce_strictness parameter / Digest authentication
  • check_nonce_count parameter / Digest authentication
  • post_workaround parameter / Digest authentication
  • configuring / Time for action – configuring Digest authentication
  • file authentication / File authentication
  • LDAP authentication / LDAP authentication
  • eDirectory authentication / eDirectory authentication
• httpd_accel_surrogate_id
  • about / httpd_accel_surrogate_id
• httpd_accel_surrogate_remote
  • about / httpd_accel_surrogate_remote
• HTTP headers
  • about / Playing around with HTTP headers
  • controlling, in request / Controlling HTTP headers in requests
  • controlling, in responses / Controlling HTTP headers in responses
  • contents, replacing / Replacing the contents of HTTP headers
• HTTP headers, used for indentifying requests
  • user-agent or browser / User-agent or browser
  • Referer header / Referer identification
  • Content-Type header / Content type-based identification
  • req_header / Other HTTP headers
• HTTP header statistics
  • about / HTTP Header Statistics
• HTTP methods
  • about / HTTP methods
  • DELETE / HTTP methods
  • POST / HTTP methods
  • GET / HTTP methods
  • PUT / HTTP methods
  • CONNECT / HTTP methods
• HTTP options, in reverse proxy mode
  • about / HTTP options in reverse proxy mode
  • defaultsite / defaultsite
  • vhost / vhost
  • vport / vport
  • allow-direct / allow-direct
  • protocol / protocol
  • ignore-cc / ignore-cc
• HTTP port
  • about / HTTP port, HTTP port
  • setting / Time for action – setting the HTTP port
  • ways of setting / Time for action – setting the HTTP port
• HTTP redirect codes
  • about / HTTP status codes for redirection
• HTTP reply access
  • about / HTTP reply access
• HTTP reply status, ACLs / HTTP reply status
• HTTP responses
  • debugging / Getting help online and reporting bugs
• HTTP server log emulation
  • about / Emulating HTTP server-like logs
  • enabling / Time for action – enabling HTTP server log emulation
• HTTPS options, in reverse proxy mode
  • about / HTTPS options in reverse proxy mode
  • defaultsite / defaultsite
  • vhost / vhost
  • version / version
  • cipher / cipher
  • options / options
  • clientca / clientca
  • cafile / cafile
  • capath / capath
  • crlfile / crlfile
  • dhparams / dhparams
  • sslflags / sslflags
  • sslcontext / sslcontext
  • vport / vport
• https_status ACL type / HTTP reply status
• HTTP traffic, diverting to Squid
  • about / Diverting HTTP traffic to Squid
  • router's policy routing, using / Using a router's policy routing to divert requests
  • rule-based switching, using / Using rule-based switching to divert requests
  • Squid server, using as bridge / Using Squid server as a bridge, Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
  • WCCP tunnel, using / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
  • interception caching, implementing / Implementing interception caching
  • network devices, configuring / Configuring the network devices
  • operating system, configuring / Configuring the operating system
  • Squid, configuring / Configuring Squid
  • HTTP port, configuring / Configuring HTTP port
• HTTP traffic diversion
  • testing / Have a go hero – testing the traffic diversion
• http_access directive / Access control lists
• http_port directive / Time for action – configuring Squid to ignore the browser reloads, Address already in use
• HTTP_PORT parameter / Joining a cache hierarchy
• http_reply_access directive / HTTP reply access, Content type-based identification
• http_reply_acess rules / HTTP access for replies
• Hypertext Caching Protocol (HTCP) / --disable-htcp

I

• ICAP/eCAP adaptation / Adapted HTTP access
  • reference link / Adapted HTTP access
• ICP
  • about / Internet Cache Protocol
  • limitations / Internet Cache Protocol
• ICP access
  • about / ICP access
• ICP options, cache hierarchy
  • about / ICP options
  • no-query / no-query
  • multicast-responder / multicast-responder
  • closest-only / closest-only
  • background-ping / background-ping
• icp_access directive / Access control lists, ICP options
• icp_access rule / ICP port
• ICP_OR_HTCP_PORT parameter / Joining a cache hierarchy
• icp_port directive / ICP port, ICP options
• ident ACL type / Matching client usernames
• Ident lookup access
  • about / Ident lookup access
• ident lookup access
  • about / Ident lookup access
• ident protocol / Matching client usernames
• ident_lookup_access list rule / Ident lookup access
• ignore-cc, HTTP options
  • about / ignore-cc
• ignore-cc option / Using ignore-cc
• ignore-reload option / Using ignore-reload
• installation
  • Squid / Installing Squid
  • Squid, from source code / Installing Squid from source code
  • Squid, from binary packages / Installing Squid from binary packages
• installation methods, Squid
  • source archive, using / Using source archives
  • latest source code, getting from Bazaar VCS / Obtaining the latest source code from Bazaar VCS
  • source code, fetching / Have a go hero – fetching the source code
  • binary packages, using / Using binary packages
• interception caching
  • about / Time for action – understanding interception caching
  • advantages / Advantages of interception caching
  • disadvantages / Problems with interception caching
  • implementing / Implementing interception caching
• interception of requests
  • occurring / Time for action – understanding interception caching
• interception proxying
  • about / Interception caching
• internal DNS statistics
  • about / Internal DNS Statistics
• IP cache stats and contents
  • about / IP Cache Stats and Contents
• ipcache_high directive
  • about / Setting the size of the DNS cache
• ipcache_low directive
  • about / Setting the size of the DNS cache
• ipcache_size directive
  • about / Setting the size of the DNS cache
• IPFilter (IPF)
  • about / --enable-ipf-transparent
• IPFIREWALL (IPFW)
  • about / --enable-ipfw-transparent
• issues, Squid
  • can't write to log files / Cannot write to log files
  • could not determine hostname / Could not determine hostname
  • can't create swap directories / Cannot create swap directories
  • failed verification of swap directories / Failed verification of swap directories
  • address already in use / Address already in use
  • URLs with underscore results in an invalid URL / URLs with underscore results in an invalid URL
  • squid becomes slow over time / Squid becomes slow over time
  • request or reply is too large / The request or reply is too large
  • access denied / Access denied on the proxy server
  • connection refused when reaching a sibling proxy server / Connection refused when reaching a sibling proxy server
• issues, URL rewriters
  • about / Issues with URL rewriters

J

• --joomla option, database authentication options
  • about / Configuring database authentication

K

• keep_alive parameter
  • about / Microsoft NTLM authentication
• key parameter
  • about / HTTPS options in reverse proxy mode

L

• LDAP authentication
  • about / LDAP authentication, LDAP authentication
• least recently used (LRU)
  • about / Least recently used (LRU)
• LFUDA
  • about / Least frequently used with dynamic aging (LFUDA)
• limited access to neighbors
  • enforcing / Enforcing limited access to neighbors
  • miss_access rule, denying / Time for action – denying miss_access to neighbors
• localnet / Have a go hero – make a list of the client IP addresses in your network
• local_domains, ACL list / Have a go hero – make a list of domains hosted in your local network
• log file analyzers
  • Calamaris / Log file analyzers
  • about / Log file analyzers
• log files
  • rotating / Rotating the log files, Log file rotation
  • log messages / Log messages
  • cache log / Cache log or debug log, Time for action – understanding the cache log
  • access log / Access log, Time for action – understanding the access log messages
  • logging of requests / Selective logging of requests
  • referer log / Referer log
  • user agent log / User agent log
  • HTTP server log emualtion / Emulating HTTP server-like logs
  • log file rotation / Log file rotation
  • log-related features / Other log related features
• logfile_rotate directive
  • about / Log file rotation or log file backups
• log formats
  • about / Log formats
  • log file rotation / Log file rotation or log file backups
  • log file backups / Log file rotation or log file backups
  • log access / Log access
  • buffered logs / Buffered logs
  • strip query terms / Strip query terms
• logging of requests
  • about / Selective logging of requests
  • controlling, access_log used / Time for action – using access_log to control logging of requests
• log messages
  • about / Log messages
• log_access directive
  • about / Log access
• log_access rule / Logging requests selectively
• lsof command / What just happened?

M

• --md5 option, database authentication options
  • about / Configuring database authentication
• MAC (Media Access Control address) / Client MAC addresses
• mac_acl, ACL types / Client MAC addresses
• mailing lists
  • URL / Getting help online and reporting bugs
• maxconn, ACL types / Maximum number of connections per client
• maximum_object_size directive
  • about / Cache object size limits
• max_user_ip, ACL types / Maximum logins per user
• memory cache mode
  • about / Memory cache mode
  • always / Memory cache mode
  • disk / Memory cache mode
  • network / Memory cache mode
• memory utilization
  • about / Memory Utilization
• memory_cache_mode directive / Memory cache mode
• memory_pools directive / Squid becomes slow over time
• memory_replacement_policy directive
  • about / Least frequently used with dynamic aging (LFUDA)
• Microsoft NTLM authentication
  • about / Microsoft NTLM authentication
  • Samba's NTLM authentication / Samba's NTLM authentication
  • fake NTLM authentication / Fake NTLM authentication
• minimum_object_size directive
  • about / Cache object size limits
• Miss access
  • about / Miss access
• miss_access directive / Miss access
• miss_access rule / Time for action – denying miss_access to neighbors
• MSNT authentication
  • about / MSNT authentication
  • configuring / Time for action – configuring MSNT authentication
• MSNT multi domain authentication
  • about / MSNT multi domain authentication
• multiple authentication schemes
  • implementing / Using multiple authentication schemes
• myip, ACL types / Identifying local IP addresses
• myportname, ACL types / Local port name

N

• NCSA authentication
  • about / NCSA authentication
  • configuring / Time for action – configuring NCSA authentication
• negative_dns_ttl directive
  • about / Caching the DNS responses
• negative_ttl directive
  • about / Caching the failed requests
• Negotiate authentication
  • about / Negotiate authentication
  • configuring / Time for action – configuring Negotiate authentication
• negotiate_kerberos_auth authentication helper
  • about / Time for action – configuring Negotiate authentication
• neighbor proxy servers
  • requesting / Requesting neighbor proxy servers
• NetBSD
  • Squid installation / OpenBSD or NetBSD
• Network Address Translation (NAT) / Time for action – redirecting HTTP traffic to Squid
• network devices
  • configuring, for diverting HTTP requests / Configuring the network devices
• never_direct access list rule / Forwarding requests to remote servers
• never_direct directive
  • about / Never direct
  / never_direct
• new syntax, --enable-auth configuration option / New Syntax
• NIS authentication
  • about / NIS authentication
• non-concurrent helpers
  • making concurrent / Making non-concurrent helpers concurrent
• nonce_garbage_interval parameter
  • about / Digest authentication
• nonce_max_count parameter
  • about / Digest authentication
• nonce_max_duration parameter
  • about / Digest authentication
• nonce_strictness parameter
  • about / Digest authentication
• none module, access log / Time for action – analyzing a syntax to specify access log
• nonhierarchical_direct directive / nonhierarchical_direct
• NTLM (NT LAN Manager)
  • about / Microsoft NTLM authentication
  • reference link / Microsoft NTLM authentication
• ntlm_auth program
  • about / Samba's NTLM authentication
• ntlm_fake_auth authentication helper
  • about / Fake NTLM authentication

O

• old syntax, --enable-auth configuration option / Old Syntax
• OpenBSD
  • Squid installation / OpenBSD or NetBSD
  / Time for action – enabling IP forwarding
• OpenSSL
  • URL / HTTPS options in reverse proxy mode
  • about / HTTPS options in reverse proxy mode
• operating system
  • configuring, for diverting HTTP requests / Configuring the operating system
  • IP forwarding, enabling / Enabling IP forwarding, Time for action – enabling IP forwarding
  • packets, redirecting to Squid / Redirecting packets to Squid, Time for action – redirecting HTTP traffic to Squid
• options, HTTPS options
  • about / options
• our_network ACL / Time for action – constructing ACL lists using domain names
• output
  • debugging, in console / Time for action – debugging output in the console
  • debugging, in terminal / Full debugging output on the terminal
• ownership of log files
  • changing / Time for action – changing the ownership of log files

P

• ${prefix}
  • bin / bin
  • bin/squidclient / bin/squidclient
  • etc / etc
  • etc/squid.conf / etc/squid.conf
  • etc/squid.conf.default / etc/squid.conf.default
  • etc/squid.conf.documented / etc/squid.conf.documented
  • libexec / libexec
  • libexec/cachemgr.cgi / libexec/cachemgr.cgi
  • sbin / sbin
  • sbin/squid / sbin/squid
  • share / share
  • share/errors / share/errors
  • share/icons / share/icons
  • share/man / share/man
  • var / var
  • var/cache / var/cache
  • var/logs / var/logs
• --passwdcol option, database authentication options
  • about / Configuring database authentication
• --password option, database authentication options
  • about / Configuring database authentication
• --persist option, database authentication options
  • about / Configuring database authentication
• --plaintext option, database authentication options
  • about / Configuring database authentication
• --prefix option, configuration options / --prefix
• Packet Filter (PF)
  • about / --enable-pf-transparent
• PAM Authentication
  • about / PAM authentication
• PAM service
  • configuring / Time for action – configuring PAM service
• parameters, Digest authentication
  • nonce_garbage_interval / Digest authentication
  • nonce_max_duration / Digest authentication
  • nonce_max_count / Digest authentication
  • nonce_strictness / Digest authentication
  • check_nonce_count / Digest authentication
  • post_workaround / Digest authentication
• partial retrievals
  • aborting / Aborting the partial retrievals
• peer communication
  • controlling / Controlling communication with peers
  • domain-based forwarding / Domain-based forwarding
  • cache peer access / Cache peer access
  • requests, forwarding to cache using ACLs / Time for action – forwarding requests to cache peers using ACLs
  • peer relationship, switching / Switching peer relationship
  • request redirects, controlling / Controlling request redirects
• peer communication protocols
  • about / Peer communication protocols
  • ICP / Internet Cache Protocol
  • cache digests / Cache digests
  • HTCP / Hypertext Caching Protocol
• peer relationship
  • switching / Switching peer relationship, What just happened?
• peer selection methods options, cache hierarchy
  • about / Options for peer selection methods
  • weight / weight
  • basetime / basetime
  • ttl / ttl
  • no-delay / no-delay
  • digest-URL / digest-URL
  • no-digest / no-digest
• peer selection options, cache hierarchy
  • about / Peer or neighbor selection
  • default / default
  • round-robin / round-robin
  • weighted-round-robin / weighted-round-robin
  • userhash / userhash
  • sourcehash / sourcehash
  • carp / carp
  • multicast-siblings / multicast-siblings
• Perl
  • URL / Log file analyzers
  • about / Log file analyzers
• PID filename
  • about / PID filename
• Policy-based Routing
  • about / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
• POP3 authentication
  • about / POP3 authentication
• port, ACL types / Time for action – building ACL lists using destination ports
• positive_dns_ttl directive
  • about / Caching the DNS responses
• POST method / HTTP methods
• post_workaround parameter
  • about / Digest authentication
• preceding access control
  • testing, squidclient used / Time for action – testing our access control example with squidclient
• prefer_direct directive
  • about / Controlling the request forwarding
  / prefer_direct
• program listening, finding on specific port
  • for Linux-based operating systems / For Linux-based operating systems
  • for OpenBSD and NetBSD / For OpenBSD and NetBSD
  • for FreeBSD and DragonFlyBSD / For FreeBSD and DragonFlyBSD
• program parameter
  • about / Time for action – exploring Basic authentication
• proto, ACL types / Identifying requests using the request protocol
• protocol, HTTP options
  • about / protocol
• proxy authentication
  • enforcing / Proxy authentication, Time for action – enforcing proxy authentication
  • regular expressions, for usernames / Regular expressions for usernames
• Proxy auto config (PAC)
  • reference link / Security vulnerabilities
  • about / Security vulnerabilities
• proxy server
  • about / Proxy server
  • features / Proxy server
  • functions / Proxy server
• proxy servers
  • listing / Have a go hero – make a list of proxy servers in your network
• proxy_auth ACL type / Proxy authentication
• proxy_auth_regex ACL type / Regular expressions for usernames
• PUT method / HTTP methods

Q

• quick_abort_max (KB) directive
  • about / Aborting the partial retrievals
• quick_abort_min (KB) directive
  • about / Aborting the partial retrievals
• quick_abort_pct (percent) directive
  • about / Aborting the partial retrievals

R

• RADIUS authentication
  • about / RADIUS authentication
  • configuring / Time for action – configuring RADIUS authentication
• RAM
  • using, for caching web documents / Using main memory (RAM) for caching
  • cache space, specifying / Specifying cache space in RAM, Time for action – specifying space for memory caching
  • cache_mem, calculating / Have a go hero – calculating cache_mem for your machine
• random ACL type / Identifying random requests
• random requests, ACLs
  • identifying / Identifying random requests
• random_req ACL / Identifying random requests
• realm parameter
  • about / Time for action – exploring Basic authentication
• recommended versions
  • about / Getting Squid
• Red Hat
  • Squid installation / Fedora, CentOS or Red Hat
• redirect_url function / Time for action – writing our own template for a URL redirector
• Referer header / Referer identification
• referer log
  • about / Referer log
  • enabling / Time for action – enabling the referer log
  • translating, to readable format / Time for action – translating the referer logs to a human-readable format
• referer_regex, ACL types / Referer identification
• refresh_pattern
  • using / Refresh patterns for cached objects
• refresh_pattern, options
  • override-expire / override-expire
  • override-lastmod / override-lastmod
  • reload-into-ims / reload-into-ims
  • ignore-reload / ignore-reload
  • ignore-no-cache / ignore-no-cache
  • ignore-no-store / ignore-no-store
  • ignore-must-revalidate / ignore-must-revalidate
  • ignore-private / ignore-private
  • ignore-auth / ignore-auth
  • refresh-ims / refresh-ims
• refresh_pattern directive / Time for action – configuring Squid to ignore the browser reloads, Using ignore-reload
• regular expressions, domain names / Regular expressions for domain names
• reload-into-ims option / Using reload-into-ims
• reply_body_max_size access list rule / Maximum size of the reply body
• reply_header_access directive
  • about / Playing around with HTTP headers
• reply_header_access list rule / HTTP header access
• rep_mime_type, ACL types / Content type-based identification
• request
  • identifying, request protocol used / Identifying requests using the request protocol
  • forwarding, to remote servers / Forwarding requests to remote servers
  • logging, selectively / Logging requests selectively
• request forwarding statistics
  • about / Request Forwarding Statistics
• request protocol
  • using, for identification / Identifying requests using the request protocol
  • using, for constructing access rules / Time for action – using a request protocol to construct access rules, What just happened?
• request redirects
  • controlling / Controlling request redirects
  • hierarchy_stoplist / hierarchy_stoplist
  • always_direct / always_direct
  • never_direct / never_direct
  • prefer_direct / prefer_direct
  • nonhierarchical_direct / nonhierarchical_direct
• request_header_access / Controlling HTTP headers in requests
• request_header_access directive
  • about / Playing around with HTTP headers
• request_header_access list rule / HTTP header access
• req_header / Other HTTP headers
• req_mime_type, ACL types / Content type-based identification
• reverse proxying
  • about / Reverse proxy
• reverse proxy mode
  • about / What is reverse proxy mode?
  • exploring / Exploring reverse proxy mode
  • HTTP options / HTTP options in reverse proxy mode
  • HTTPS options / HTTPS options in reverse proxy mode
• router's policy routing
  • using, for diverting HTTP request / Using a router's policy routing to divert requests
• rule-based switching
  • using, for diverting HTTP request / Using rule-based switching to divert requests

S

• --salt option, database authentication options
  • about / Configuring database authentication
• Safe_ports ACL / Time for action – building ACL lists using destination ports
• Samba's NTLM authentication
  • about / Samba's NTLM authentication
• SASL authentication
  • about / SASL authentication
  • configuring / Time for action – configuring Squid to use SASL authentication
• signals, sending to Squid process
  • configuration file, reloading / Reloading a new configuration file in a running process
  • Squid process, shutting down / Shutting down the Squid process
  • Squid process, interrupting / Interrupting or killing a running Squid process
  • status of Squid process, checking / Checking the status of a running Squid process
  • return value, checking / Have a go hero – check the return value
• slow ACL types
  • about / Fast and slow ACL types
• SMB authentication
  • about / SMB authentication
• SNMP port / SNMP port
• snmp_access rule / SNMP port
• snmp_community ACL type / SNMP port
• sockstat command / For FreeBSD and DragonFlyBSD
• source and destination domain names, ACLs
  • about / Source and destination domain names
  • ACL lists, constructing using domain names / Time for action – constructing ACL lists using domain names
• source and destination IP address, ACLs
  • about / Source and destination IP address
  • ACL lists, constructing using IP addresses / Time for action – constructing ACL lists using IP addresses
  • ACL lists, constructing using range of IP addresses / Time for action – using a range of IP addresses to build ACL lists, What just happened?
• source archive
  • uncompressing / Uncompressing the source archive
• source code
  • obtaining, Bazaar used / Time for action – using Bazaar to obtain source code
  • fetching / Have a go hero – fetching the source code
• Squid
  • downloading / Getting Squid, Using source archives
  • about / Getting Squid
  • recommended versions / Time for action – identifying the right version
  • versions / Time for action – identifying the right version
  • installation methods / Methods of obtaining Squid
  • installing / Installing Squid, Time for action – installing Squid
  • minimal configuration / Quick start
  • HTTP port / HTTP port
  • ACLs / Access control lists
  • proxy server access, controlling / Controlling access to the proxy server
  • HTTP access control / HTTP access control
  • HTTP access, controlling with ACLs / Time for action – combining ACLs and HTTP access
  • HTTP reply access / HTTP reply access
  • ICP access / ICP access
  • HTCP access / HTCP access
  • HTCP CLR access / HTCP CLR access
  • Miss access / Miss access
  • Ident lookup access / Ident lookup access
  • cache peers or neighbors / Cache peers or neighbors
  • web documents, caching / Caching web documents
  • tuning / Tuning Squid for enhanced caching
  • HTTP headers / Playing around with HTTP headers
  • DNS server configuration / DNS server configuration
  • log formats / Log formats
  • configuration directives / Other configuration directives
  • command line options / Command line options
  • available options, listing / Getting a list of available options, What just happened?
  • version, checking / Time for action – finding out the Squid version, What just happened?
  • cache directories, creating / Creating cache or swap directories
  • cache directories, adding / Have a go hero – adding cache directories
  • different configuration file, using / Using a different configuration file
  • verbose output, getting / Getting verbose output
  • output, debugging in console / Time for action – debugging output in the console
  • output, debugging in terminal / Full debugging output on the terminal
  • normal process, running / Running as a normal process
  • signals, sending to Squid process / Sending various signals to a running Squid process
  • storage metadata, forcing to rebuild / Forcing the storage metadata to rebuild
  • swap, double checking / Double checking swap during rebuild
  • configuring, to start with system startup / Automatically starting Squid at system startup
  • automatic start, at system startup / Automatically starting Squid at system startup
  • access list rules / Access list rules
  • log messages / Log messages
  • cache manager / Cache manager
  • log file analyzers / Log file analyzers
  • authentication issues / Common issues with authentication
  • cache hierarchies / Cache hierarchies
  • hierarchical caching / Reasons to use hierarchical caching
  • cache hierarchy, joining / Joining a cache hierarchy
  • peer communication, controlling / Controlling communication with peers
  • peer communication protocols / Peer communication protocols
  • cache digest configuration / Squid and cache digest configuration
  • reverse proxy mode / What is reverse proxy mode?, Exploring reverse proxy mode
  • configuring, as server surrogate / Configuring Squid as a server surrogate
  • backend web servers, adding / Adding backend web servers, Time for action – adding backend web servers
  • surrogate protocol / Support for surrogate protocol
  • surrogate protocol, working / Understanding the surrogate protocol
  • configuring, for ESI support / Configuring Squid for ESI support
  • access control configuration / Access controls in reverse proxy mode
  • communicating, with URL redirector / Squid, URL redirectors, and rewriters
  • issues / Some common issues
  • troubleshooting / Some common issues
  • hostname checks, enforcing / Enforce hostname checks
  • underscore, allowing in URLs / Allow underscore
  • access control, debugging / Time for action – debugging access control
  • HTTP responses, debugging / Have a go Hero – debugging HTTP responses
  • reference link / Getting help online and reporting bugs
• Squid, in reverse proxy mode
  • HTTP requests, accepting / HTTP port
  • HTTPS requests, accepting / HTTPS port
  • web server log format, logging in / Logging messages in web server log format
  • access controls / Access controls in reverse proxy mode
• Squid, starting with system startup
  • Squid command, adding to /etc/rc.local file / Adding Squid command to /etc/rc.local file
  • init script, adding / Adding init script, Time for action – adding the init script
• Squid, tuning
  • selective caching / Selective caching
  • caching, preventing of local content / Time for action – preventing the caching of local content
  • refresh_pattern, using / Refresh patterns for cached objects
  • cached objects freshness, calculating / Time for action – calculating the freshness of cached objects
  • options, for refresh pattern / Options for refresh pattern
  • Google homepage, caching / Have a go hero – forcing the Google homepage to be cached for longer
  • partial retrievals, aborting / Aborting the partial retrievals
  • failed requests, caching / Caching the failed requests
• Squid-URL redirector communication
  • about / Squid, URL redirectors, and rewriters
  • communication interface / Communication interface
  • message flow, exploring / Time for action – exploring the message flow between Squid and redirectors
• squid.conf
  • about / etc/squid.conf
• Squid 3.1.4
  • downloading / Time for action – downloading Squid
• Squid authentication
  • HTTP authentication / HTTP authentication
  • basic authentication / Basic authentication
  • Digest authentication / Digest authentication
  • Microsoft NTLM authentication / Microsoft NTLM authentication
  • Negotiate authentication / Negotiate authentication
  • multiple authentication schemes, using / Using multiple authentication schemes
  • custom authentication helper, writing / Writing a custom authentication helper
• Squid binary packages
  • about / Using binary packages, Installing Squid from binary packages
• squidclient
  • about / bin/squidclient, Testing access control with squidclient
  • options / Options for squidclient
  • supported options / Options for squidclient
  • implementing / Using the squidclient
• Squid code repository / Obtaining the latest source code from Bazaar VCS
• Squid configuration, for URL redirector program
  • about / Configuring Squid
  • URL redirector program, specifying / Specifying the URL redirector program
  • redirector children, controlling / Controlling redirector children
  • requests, controlling / Controlling requests passed to the redirector program
  • URL redirector program, bypassing when under heavy load / Bypassing URL redirector programs when under heavy load
  • Host HTTP header, rewriting / Rewriting the Host HTTP header
• Squid configuration file
  • syntax / Syntax of the configuration file
  • types of directives / Types of directives
  • DNS name servers, adding / Time for action – adding DNS name servers
  • parsing, for errors / Parsing the Squid configuration file for errors or warnings
  • testing / Time for action – testing our configuration file
• Squid files
  • exploring / Time for action – exploring Squid files
• SquidGuard
  • about / SquidGuard
  • features / SquidGuard
  • URL / SquidGuard
• Squid installation, from binary packages
  • about / Installing Squid from binary packages
  • on Fedora, CentOS or Red Hat / Fedora, CentOS or Red Hat
  • on Debian or Ubuntu / Debian or Ubuntu
  • on FreeBSD / FreeBSD
  • on OpenBSD or NetBSD / OpenBSD or NetBSD
  • on Dragonfly BSD / Dragonfly BSD
  • on Gentoo / Gentoo
  • on Arch Linux / Arch Linux
• Squid installation, from source code
  • about / Installing Squid from source code
  • compiling Squid / Compiling Squid
  • source archive, uncompressing / Uncompressing the source archive
  • configure or system check / Configure or system check
  • file descriptors / Have a go hero – file descriptors
  • configure command, running / Time for action – running the configure command
  • configure errors, debugging / Have a go hero – debugging configure errors
  • source, compiling / Time for action – compiling the source
  • Squid, installing / Time for action – installing Squid
  • Squid files, exploring / Time for action – exploring Squid files
• Squid process
  • running / Sending various signals to a running Squid process
  • configuration file, reloading / Reloading a new configuration file in a running process
  • shutting down / Shutting down the Squid process
  • interrupting / Interrupting or killing a running Squid process
  • status, checking / Checking the status of a running Squid process
  • return value, checking / Have a go hero – check the return value
  • sending, in debug mode / Sending a running process in to debug mode
  • log files, rotating / Rotating the log files
• Squid proxy server
  • setting up / Have a go hero – set up a Squid proxy server in reverse proxy mode
• Squid server
  • using as bridge, for diverting HTTP request / Using Squid server as a bridge, Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
• Squirm
  • features / Squirm
  • URL / Squirm
• src, ACL types / Time for action – constructing ACL lists using IP addresses
• srcdomain, ACL types
  • about / Fast and slow ACL types
  / Source and destination domain names
• srcdom_regex, ACL types / Regular expressions for domain names
• sslcontext, HTTPS options
  • about / sslcontext
• sslflags, HTTPS options
  • about / sslflags
  • NO_DEFAULT_CA / NO_DEFAULT_CA
  • NO_SESSION_RESUE / NO_SESSION_REUSE
  • VERIFY_CRL / VERIFY_CRL
  • VERIFY_CRL_ALL / VERIFY_CRL_ALL
• SSL or HTTPS options, cache hierarchy
  • about / no-digest
  • ssl / ssl
  • sslcert / sslcert
  • sslkey / sslkey
  • sslversion / sslversion
  • ssloptions / ssloptions
  • sslcafile / sslcafile
  • sslcapath / sslcapath
  • sslcrlfile / sslcrlfile
  • sslflags / sslflags
  • ssldomain / ssldomain
  • front-end-https / front-end-https
• SSL_ports ACL / Time for action – building ACL lists using destination ports
• stdio module, access log / Time for action – analyzing a syntax to specify access log
• supported options, squidclient
  • -a / Options for squidclient
  • -g count / Options for squidclient
  • -h host / Options for squidclient
  • -H 'string' / Options for squidclient
  • -i IMS / Options for squidclient
  • -I interval / Options for squidclient
  • -j hosthdr / Options for squidclient
  • -k / Options for squidclient
  • -l host / Options for squidclient
  • -m method / Options for squidclient
  • -p port / Options for squidclient
  • -P filename / Options for squidclient
  • -r / Options for squidclient
  • -s / Options for squidclient
  • -t count / Options for squidclient
  • -T timeout / Options for squidclient
  • -u username / Options for squidclient
  • -U username / Options for squidclient
  • -v / Options for squidclient
  • -V version / Options for squidclient
  • -w password / Options for squidclient
  • -W password / Options for squidclient
• surrogate protocol
  • about / Support for surrogate protocol
  • working / Understanding the surrogate protocol
  • reference link / Understanding the surrogate protocol
  • configuration options / Configuration options for surrogate support
• swap directories
  • creating / Time for action – creating swap directories
• syslog module, access log / Time for action – analyzing a syntax to specify access log

T

• --table option, database authentication options
  • about / Configuring database authentication
• tcp module, access log / Time for action – analyzing a syntax to specify access log
• TCP outgoing address
  • about / TCP outgoing address
• time-based ACLs
  • about / Time-based ACLs
• time ACL type / Time-based ACLs
• traffic and resource counters
  • about / Traffic and Resource Counters

U

• --usercol option, database authentication options
  • about / Configuring database authentication
• --user option, database authentication options
  • about / Configuring database authentication
• Ubuntu
  • Squid installation / Debian or Ubuntu
• udp module, access log / Time for action – analyzing a syntax to specify access log
• ufs
  • about / Storage types
• unique_hostname directive
  • about / Configuring hostnames for the proxy server
• unlinkd
  • about / --disable-unlinkd
• uri_whitespace directive
  • about / Using the uri_whitespace directive
• uri_whitespace directive, options
  • strip / Strip whitespaces
  • deny / Deny URLs with whitespaces
  • encode / Encode whitespaces in URLs
  • chop / Chop URLs
  • allow / Allow URLs with whitespaces
• URL path-based identification
  • about / URL and URL path-based identification
• urlpath_regex, ACL types / URL and URL path-based identification
• URL redirector program
  • writing / Time for action – writing a simple URL redirector program
  • modifying / Have a go hero – modify the redirector program
  • concurrency / Concurrency
• URL redirectors
  • about / URL rewriters and redirectors, URL redirectors and rewriters, Understanding URL redirectors
  • working / Understanding URL redirectors
  • HTTP status codes / HTTP status codes for redirection
  • deny_info / A special URL redirector – deny_info
  • reference link / Popular URL redirectors
  • SquidGuard / SquidGuard
  • Squirm / Squirm
  • Ad Zapper / Ad Zapper
• URL rewriters
  • about / URL rewriters and redirectors, Understanding URL rewriters
  • working / Understanding URL rewriters
  • issues / Issues with URL rewriters
• url_regex, ACL types / URL and URL path-based identification
• url_rewrite_access directive / Controlling requests passed to the redirector program
• url_rewrite_access list rule / URL rewrite access
• url_rewrite_children directive / Controlling redirector children
• url_rewrite_program directive / Specifying the URL redirector program
• User-Agent header / User-agent or browser
• user agent log
  • about / User agent log
  • enabling / Time for action – enabling user agent logging
• user limits, ACLs
  • maximum number of connections per client / Maximum number of connections per client
  • maximum logins per user / Maximum logins per user
• utf8 parameter
  • about / Time for action – exploring Basic authentication

V

• validate_credentials method / Have a go hero – implementing the validation function
• verbose output
  • getting / Getting verbose output
• verbosity
  • about / Debugging problems
• verbosity levels
  • about / Debugging problems
• version, HTTPS options
  • about / version
• Version Control Systems (VCS)
  • about / Obtaining the latest source code from Bazaar VCS
• vhost, HTTP options
  • about / vhost
• vhost, HTTPS options
  • about / vhost
• visible_hostname directive
  • about / Configuring hostnames for the proxy server
  / Could not determine hostname
• vport, HTTP options
  • about / vport
• vport, HTTPS options
  • about / vport

W

• --with-aufs-threads, configuration options / --with-aufs-threads
• --with-default-user, configuration options / --with-default-user
• --with-filedescriptors, configuration options / --with-filedescriptors
• --with-large-files, configuration options / --with-large-files
• --with-logdir, configuration options / --with-logdir
• --with-openssl, configuration options / --with-openssl
• --with-pidfile, configuration options / --with-pidfile
• --without-pthreads, configuration options / --without-pthreads
• WCCP
  • about / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
• WCCP tunnel
  • using, for diverting HTTP request / Squid serverusing as bridge, for diverting HTTP requestHTTP traffic, diverting to SquidSquid server, using as bridgeUsing WCCP tunnel
• web caching
  • about / Reverse proxy
• web documents
  • caching / Caching web documents
  • caching, RAM used / Using main memory (RAM) for caching
  • caching, hard disk used / Using hard disks for caching
  • cache replacement policies / Cache replacement policies
• web documents caching
  • controlling / Controlled caching of web documents
• Web Proxy Auto-Discovery Protocol, (WPAD)
  • about / Security vulnerabilities
  • reference link / Security vulnerabilities
• web server log format, logging
  • browser reloads, ignoring / Ignoring the browser reloads, Time for action – configuring Squid to ignore the browser reloads
• whitespaces, URLs
  • handling / Handling whitespace in URLs
  • handling, uri_whitespace directive used / Using the uri_whitespace directive

Y

• Yum
  • about / Fedora, CentOS or Red Hat