![\"How](\"https:\/\/webhostinggeeks.com\/howto\/wp-content\/uploads\/2023\/07\/How-to-Install-and-Configure-Squid-Proxy-Server-for-Private-Connections-on-CentOS-1024x768.jpg\")
<\/p>\n<\/p>\n
As server administrators and webmasters, we are often faced with the challenge of ensuring our connections remain private and secure. One solution to this problem is the use of a proxy server<\/a>. A proxy server acts as an intermediary between your server and the internet, providing an additional layer of security and privacy.<\/p>\n One of the most popular proxy server<\/a> software is Squid<\/a>. Squid is a highly flexible, widely-used, caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages.<\/p>\n In this tutorial, we will guide you through the process of setting up Squid Proxy on a CentOS server. This setup will allow you to establish private connections, enhancing your security and privacy while online. Whether you’re using a dedicated<\/a>, VPS<\/a>, or cloud hosting<\/a> machine, this guide will be applicable.<\/p>\n By the end of this tutorial, you will have a fully functional Squid Proxy server ready to use. This will not only enhance your server’s security but also improve its performance by caching and reusing frequently-requested web pages. <\/p>\n So, let’s dive in and start setting up your Squid Proxy for private connections on CentOS.<\/p>\n The first step in setting up Squid Proxy on CentOS is to ensure that your system is up to date. This can be done by running the following command:<\/p>\n This command will update all the packages on your CentOS system to their latest versions.<\/p>\n Once your system is up to date, the next step is to install Squid. This can be done by running the following command:<\/p>\n This command will install Squid on your CentOS system.<\/p>\n After installing Squid, the next step is to configure it. This involves editing the Squid configuration file, which is located at \/etc\/squid\/squid.conf. You can open this file in a text editor by running the following command:<\/p>\n In the configuration file, you can specify the settings for your Squid Proxy server. For example, you can specify the port that Squid listens on, the maximum object size that can be cached, and the access control lists (ACLs) that determine who can access the proxy server.<\/p>\n Once you have made the necessary changes to the configuration file, save and close the file.<\/p>\n After configuring Squid, the next step is to start the Squid service and enable it to start on boot. This can be done by running the following commands:<\/p>\n These commands will start the Squid service and enable it to start on boot.<\/p>\n The final step in setting up Squid Proxy on CentOS is to verify that the installation was successful. This can be done by checking the status of the Squid service. Run the following command:<\/p>\n If Squid has been installed and configured correctly, you should see an output indicating that the Squid service is active and running.<\/p>\n Here are some examples of how you can configure Squid for different purposes:<\/p>\n To block specific websites, you can add the following lines to your Squid configuration file:<\/p>\n This will block access to Facebook and YouTube.<\/p>\n If you want to allow access to only specific websites, you can use the following configuration:<\/p>\n This will only allow access to Google and Wikipedia, and deny all other websites.<\/p>\n To set up a transparent proxy, add the following line to your Squid configuration file:<\/p>\n This will set up Squid as a transparent proxy on port 3128.<\/p>\n To limit access to specific IP addresses, use the following configuration:<\/p>\n This will only allow access to the IP addresses in the range 192.168.1.0 to 192.168.1.255.<\/p>\n To set up a cache, add the following lines to your Squid configuration file:<\/p>\n This will set up a cache directory at \/var\/spool\/squid with a maximum size of 100 MB.<\/p>\n To log access, use the following configuration:<\/p>\n This will log all access to \/var\/log\/squid\/access.log.<\/p>\n To disable caching, add the following lines to your Squid configuration file:<\/p>\n This will disable all caching.<\/p>\n To set up a parent proxy, use the following configuration:<\/p>\n This will set up a parent proxy at parentproxy.example.com on port 3128.<\/p>\n To restrict access by time, use the following configuration:<\/p>\n This will only allow access during work hours (Monday to Friday, 9:00 to 17:00).<\/p>\n To set up authentication, add the following lines to your Squid configuration file:<\/p>\n This will set up basic authentication with the usernames and passwords stored in \/etc\/squid\/passwords.<\/p>\n To block specific file types, use the following configuration:<\/p>\n This will block access to .exe, .mp3, and .torrent files.<\/p>\n To redirect URLs, you can use the url_rewrite_program directive:<\/p>\n This will redirect URLs based on the rules defined in the \/usr\/bin\/redirect_script.<\/p>\n To enable SSL Bump, add the following lines to your Squid configuration file:<\/p>\n This will enable SSL Bump on port 3128 with the certificate located at \/etc\/squid\/ssl_cert\/myCA.pem.<\/p>\nStep 1: Update Your System<\/h2>\n
\r\nsudo yum update -y\r\n<\/pre>\n
Step 2: Install Squid<\/h2>\n
\r\nsudo yum install squid -y\r\n<\/pre>\n
Step 3: Configure Squid<\/h2>\n
\r\nsudo nano \/etc\/squid\/squid.conf\r\n<\/pre>\n
Step 4: Start and Enable Squid<\/h2>\n
\r\nsudo systemctl start squid\r\nsudo systemctl enable squid\r\n<\/pre>\n
Step 5: Verify Squid Installation<\/h2>\n
\r\nsudo systemctl status squid\r\n<\/pre>\n
Squid Configuration Examples<\/h2>\n
1. Blocking Specific Websites<\/h3>\n
\r\nacl blocked_websites dstdomain .facebook.com .youtube.com\r\nhttp_access deny blocked_websites\r\n<\/pre>\n
2. Allowing Specific Websites Only<\/h3>\n
\r\nacl allowed_websites dstdomain .google.com .wikipedia.org\r\nhttp_access deny all\r\nhttp_access allow allowed_websites\r\n<\/pre>\n
3. Setting Up a Transparent Proxy<\/h3>\n
\r\nhttp_port 3128 transparent\r\n<\/pre>\n
4. Limiting Access to Specific IP Addresses<\/h3>\n
\r\nacl allowed_ips src 192.168.1.0\/24\r\nhttp_access deny all\r\nhttp_access allow allowed_ips\r\n<\/pre>\n
5. Setting Up a Cache<\/h3>\n
\r\ncache_dir ufs \/var\/spool\/squid 100 16 256\r\n<\/pre>\n
6. Logging Access<\/h3>\n
\r\naccess_log \/var\/log\/squid\/access.log squid\r\n<\/pre>\n
7. Disabling Caching<\/h3>\n
\r\ncache deny all\r\n<\/pre>\n
8. Setting Up a Parent Proxy<\/h3>\n
\r\ncache_peer parentproxy.example.com parent 3128 0 no-query default\r\n<\/pre>\n
9. Restricting Access by Time<\/h3>\n
\r\nacl work_hours time M T W T F 9:00-17:00\r\nhttp_access deny all\r\nhttp_access allow work_hours\r\n<\/pre>\n
10. Setting Up Authentication<\/h3>\n
\r\nauth_param basic program \/usr\/lib\/squid\/basic_ncsa_auth \/etc\/squid\/passwords\r\nauth_param basic children 5\r\nauth_param basic realm Squid proxy-caching web server\r\nauth_param basic credentialsttl 2 hours\r\nacl auth_users proxy_auth REQUIRED\r\nhttp_access deny all\r\nhttp_access allow auth_users\r\n<\/pre>\n
11. Blocking Specific File Types<\/h3>\n
\r\nacl blocked_files urlpath_regex .exe$ .mp3$ .torrent$\r\nhttp_access deny blocked_files\r\n<\/pre>\n
12. Redirecting URLs<\/h3>\n
\r\nurl_rewrite_program \/usr\/bin\/redirect_script\r\n<\/pre>\n
13. Enabling SSL Bump<\/h3>\n
\r\nhttp_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=\/etc\/squid\/ssl_cert\/myCA.pem\r\nssl_bump allow all\r\n<\/pre>\n
14. Setting Up a Reverse Proxy<\/h3>\n