Re: [squid-users] Using MySQL for ips acl and urls

From: José Illescas Pérez <jip_at_jccm.es>
Date: Thu, 03 Dec 2009 00:00:29 +0100

Amos Jeffries escribió:
> On Wed, 02 Dec 2009 20:36:38 +0100, José Illescas Pérez <jip_at_jccm.es>
> wrote:
>> Hello,
>>
>> I'm interesed in install squid for my organization.
>>
>> I want to configure large acl's of ip lists, 20.000 more o less.
>>
>> Can I use external acl with MySQL for create this acl ip list?. What's
>> the performance in this case?.
>>
>> I want to configure large acl of url lists in MySQL too, for example a
>> blacklist with categories. What's the performance in this case?.
>>
>> Perhaps, is more convenient use squidguard for blacklist of urls and
>> create the group categories. Any ideas?.
>>
>> Greetings.
>
> Individual IPs with individual blocklists? this is extremely inefficient.
>
> If you must, you can easily use external_acl_type to pull details from
> mysql during live traffic processing. Speed depends on the query efficiency
> and network lag to mysql server.
>
> If you find that too slow look at ufdbGuard.
>
> Amos
>

We have five or six ip groups, with permissions in categories of
blacklist for each group. Each group contains between 1,000 and 10,000
ip addresses.

The blacklist categories can be urlblacklist, for example.

Where can I configure this, in squid or squidguard?.

Greetings.

-- 
      _  ____ ____ __  __
     | |/ ___/ ___|  \/  | Jose Illescas Perez. Linux User #73559
  _  | | |  | |   | |\/| | TFNO: +34 925 266 219 FAX: +34 925 266 300
| |_| | |__| |___| |  | | El Webteam de http://www.jccm.es
  \___/ \____\____|_|  |_| Junta de Comunidades de Castilla-La Mancha
Received on Wed Dec 02 2009 - 23:00:38 MST

This archive was generated by hypermail 2.2.0 : Thu Dec 03 2009 - 12:00:01 MST