VMware Communities
kingneutron
Expert
Expert

Virtual appliance - KingNeutron's Squid proxy server V4 based on Ubuntu 8.04 JEOS - new upgrade available for download

--Previous announcement:

http://communities.vmware.com/message/1367134#1367134

2010.0909 - Announcing the latest V4 of the KingNeutron (Minimalist) Squid Proxy VM

o Still Based on Long-Term-Support Ubuntu 8.04.4 ( Hardy ) -- JEOS ( Just Enough OS )

o Minimal download size

o ESX* Compatible with SCSI vdisks - or should be, anyway -- Please Test!

o Takes minimal resources to run -- 128MB RAM alloc, 1.7 GB Disk ( +2GB Optional 2nd disk on sdb1, INCLUDED! ++ Pre-formatted for Reiserfs )

    • ROOT SSH logins are DENIED, out of the box -- login as " user " instead and SUDO or SU from there

    • Vmware Tools is NOT installed, for space reasons.

    • NO FIREWALL rules

    • NO GUI

o Bridged networking is used by default, and the VM is expecting to grab a DHCP address on bootup. IPV6 support has again been left Enabled in this release.

(Static MAC address assigned in VMX file - should Just Work anywhere)

o Default STATIC IP: 10.0.244.250

+ This can be changed by editing " /etc/network/interfaces " and then issuing ' /etc/init.d/networking restart '.

    • Note, this is a TESTING release - PLEASE let me know if there are any bugs!

    • I have not been able to test Logfile rotation - please report if it works Ok out of the box:)

    • IMPORTANT NOTE: When powering on the VM, tell Vmware you MOVED IT - not Copied it -- this should eliminate the hassle that some users have been seeing with " NIC creep ", where eth0 migrates to eth1;-)

      • DISCLAIMER *** - Run at your own risk, default build only includes SSH ( port 22 ) and Squid ( 10.0.244.250, port 3128 )

      • Not Responsible if this Virtual Appliance captivates your birdcatlizardfishwolverine, and makes it cheep in excitement! ***

MD5SUM:

0424c7e542fedaef1e9fda083f8390a6 squidserverv4-kn-201009.rar

Filesize: 87,654,361 / ~86 MB

  • Download Link:

ID / password:

root / vmroot

user / vmware

    • SECURITY NOTE: ** End-users are HIGHLY ENCOURAGED to change these default passwords as soon as possible, to avoid cracker attacks.

    • As root, ' passwd root ' and ' passwd user '.

--Please note that the Ubuntu Hardy Linux distro uses " upstart " instead of /etc/inittab, so TTY changes should be made in " /etc/event.d " now.

    • Ctrl-Alt-Del has been set to SHUTDOWN the VM, NOT REBOOT **

Features:

Alt-F5: Bandwidth monitor, updates every (2) sec

Alt-F9: " Top " display, slightly customized

--Suggested additional software: (' apt-get update; apt-get install pkgname ')

o webmin -- For system configuration (Browser-based config: https://10.0.244.250:10000 )

o webmin-squid

o calamaris -- Log analyzer

o sarg -- Squid analysis report generator

o webmin-sarg

o srg -- Detailed log analysis for squid

o squid-cgi -- Cache manager interface

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA

Message was edited by: kingneutron to correct crazy whitespace formatting by horrible forum software

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA
0 Kudos
4 Replies
kingneutron
Expert
Expert

-- FYI: Some of you may be wondering, But KN - What can you do with it??

o It Slices, it dices, it caches AND Filters your web requests!!

Quick instruction:

- Fire up the VM

- Hit Alt-F5 and you can watch the bandwidth monitor

Hit Alt+F1, LOGIN AS ROOT and ** CHANGE THE PASSWORDS!! 1st thing **

- Set ALL of your browser's Cache setting really low, like to 5 MB - and Delete it! Huge disk space savings!

- Point your browser's Proxy setting to the VM's IP address ( default 10.0.244.250 , port 3128 ) - you can point it to the DHCP address for fast/temporary testing (issue ' ifconfig ' at the root or user prompt to see the DHCP IP address) or change it to whatever matches your home network. I put it as a Class A address by default so it matches my home setup and ((hopefully)) shouldn't interfere with other setups.

-- Now here's the neat thing - multiple PCs on your network can have *multiple browsers* - Firefox, Chrome, Opera, IE, Safari, Lynx, etc all pointing to the Squid proxy, and it will cache and filter ( ad- and some porn-sites, user definable ) requests for *everybody.*

-- You know how AdBlock Plus works in Firefox? Squid does something very similar, only it does it for ANY browser. Somebody loads the Yahoo website? Well now you'll get it to load -faster- for you because it will be pulled from the Squid cache. Virus updates, ad-aware, apt-get and Windows updates should also be faster because they won't have to be downloaded from the Web multiple times. ( And yes, pretty much all of my VMs go through a Squid proxy - I'm "eating my own dog food" here. )

o Basic tutorials here:

http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers

http://wiki.squid-cache.org/SquidFaq/WindowsUpdate

http://ubuntulinuxhelp.com/speed-up-and-improve-web-surfing-with-an-ubuntu-squid-server/

- ACL / file extension filtering:

http://www.cyberciti.biz/faq/squid-content-filter-block-files/

-- There are a *LOT* of config file options; I've done the heavy lifting and marked up /etc/squid.conf with XXX marks wherever things have been changed, and it should Just Work out of the box. The maximum filesize that will get stored in-cache is 20MB, set by me. If you're a tweaker though, you can set it up to pretty much store and filter whatever you want. Smiley Happy

-- If you are really anticipating a lot of usage, you should go ahead and bump up the settings - give the VM 256 MB RAM or more, and activate the built-in 2nd disk for extra cache space. You will also need to dive in and edit /etc/squid/squid.conf, un-comment the cache_dir line for the extra space, and probably tweak some other settings. Repeat as needed - you can always replace the 2nd vdisk with a bigger one, or add more. Smiley Wink

--> Look in /etc/squid dir for ad-blocking settings, and don't forget to ' squid -kreconfigure ' if you change things...

-- Note for people who like SANE text editors, that don't remind you of EDLIN - I've included Joe (' jstar ', for those of us who actually miss WordStar), and Midnight Commander, which comes with ' mcedit ' -- you're NOT limited to VI!!! You should easily be able to apt-get install nano as well, if you're used to it.

Have fun...

/ Post bug reports Smiley Wink

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA
0 Kudos
kingneutron
Expert
Expert

    • Update: V4A ( 2010.09A ) has been uploaded and the old link has been taken down due to new features, Compliance changes, and Security fixes

oo Download V4A from here:

o Filesize:

86,518,390 Bytes / ~85 MB

o MD5sum:

70e1c00d81d491ad046936ff7d509a9c *squidserverv4-kn-201009a.rar

o SHA1Sum:

cbbe8ad6de86c8fd18eb47d25145a646ec9fdc3c *squidserverv4-kn-201009a.rar

o Changes:

- Removed CDROM ( Compliance )

+ 2nd Disk is now Enabled and Mounted by default, but not setup in the Squid .conf file ( Compliance )

+ Added COM port for dialup users, but commented out in the .VMX for compliance/Player users

! Got rid of SSH key files as part of VM cleanup (SECURITY FIX)

+ The appliance will now ask you to change the Root password as part of it's init process when you login as root for the 1st time

+ IP addresses now show up automatically before the Login prompt ( Feature )

    • A conscious decision has been made NOT to pre-install the build-essential dependencies for Vmware Tools; doing so would significantly increase the virtual machine size ( by 140 MB! ) and is IMHO not worth it. The appliance runs fine without Tools, and the end-user still has the opportunity to install the needed dependencies.

Compliance tests link:

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA
0 Kudos
rodge28
Contributor
Contributor

Hi,

I'm planning to put a squid proxy, but i'm a little skeptic if it could handle around 1k clients, where round 75% of them are online during peak and aound 50% on none peak hours. I've already tested your squid proxy v3 and set it up for my friend's computer shop they have 10 computers running and it works great. any suggestions on what the setup would be so that my squid box could handle the 1k clients

thanks.... :smileygrin:

0 Kudos
kingneutron
Expert
Expert

--Please note that this version is now obsolete/deprecated; the new version is at:

http://communities.vmware.com/thread/328648?tstart=0

./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA
0 Kudos