Ну что, свершилось в бета ветке появился официальный squid.
установил, настройки из морды ограничены - естественно руки из правильного места растут захотелось добавить функционала, как транспарент и опции кещирования. все понимаем что это squid и можно добавлять руками. пакет после инсталляции лежит в /var/packages/ProxyServer/
что бы добавить то что хотим я поступил тупо, в папке где лежат конфиги создал папку my - /var/packages/ProxyServer/target/squid/etc
основной файл для издевательства это squid.conf, остальное не трогаем так как остальные файлы настраиваются через морду.
в свою папку добавил файлы
-rw-r--r-- 1 root root 4014 Oct 9 21:30 cache_hit.conf
-rw-r--r-- 1 root root 78 Oct 9 17:09 cache_icp.conf
-rw-r--r-- 1 root root 1005 Oct 10 09:18 cache_option.conf
-rw-r--r-- 1 root root 2056 Oct 10 08:58 cache_parent.conf
1. cache_hit.conf
# Add any of your own refresh_pattern entries above these.
refresh_pattern -i \.(iso|dif|crl|advcs|woff|eps|svg|svgz|ps|acsm|bin|msi|vidt|apk|wtex|hz|dat|
dll|asf|ajax|tpl|css|class|js|jar|inf|psf|vidt|wtex|uxx)(\?.*|$) 10080 100% 43200 ignore-reload override-expire ignore-no-cache ignore-private override-lastmod reload-into-ims
refresh_pattern -i \.(ts|mkv|vob|asx|mov|ogm|asf|3gp|m4v|webp|swf|wm[afv]|divx|avi|flv|fmv|rlv|
r[ma]|mpe?g|mp[234]|wav|mid)(\?.*|$) 10080 100% 43200 ignore-reload override-expire ignore-no-cache ignore-private override-lastmod reload-into-ims
refresh_pattern -i \.(rpm|deb|txt|inf|vidt|wtex|uxx|ram|dpkg|ipa|pkg|dmg|zip|rar|arj|lha|lzh|ca
b|exe|bz2|tgz|avc|klb|tar\.gz|tgz|tar\.bz2|tbz2)(\?.*|$) 10080 100% 43200 ignore-reload override-expire ignore-no-cache ignore-private override-lastmod reload-into-ims
refresh_pattern -i \.(bmp|gif|gif\?|png|png\?|jpg|jpg\?|jpeg|jpeg\?|ico|icon|bmp|tif|tiff|bif|ver|pict|pixel|pixel\?)(\?.*|$) 10080 100% 43200 ignore-reload override-expire ignore-no-cache ignore-private override-lastmod reload-into-ims
refresh_pattern -i \.(ppt|ppt\?|pptx|pptx\?|doc|doc\?|docx|docx\?|pdf|pdf\?|xls|xls\?|xlsx|xlsx\?|csv)(\?.*|$) 10080 100% 43200 ignore-reload override-expire ignore-no-cache ignore-private override-lastmod reload-into-ims
refresh_pattern http://ad\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://ads\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://adv\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://click\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://count\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://counter\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://engine\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://img\. 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern http://userpic\.livejournal\.com 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern \.ru/bf-analyze 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern \.ru/bf-si 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern /advs/ 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern /banners/ 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
refresh_pattern /cgi-bin/iframe/ 10080 100% 43200 override-lastmod override-expire ignore-reload ignore-no-cache reload-into-ims
# google maps/earth/etc = min 7 days
refresh_pattern -i google\.com/(flatfile|kh|mt)\? 10080 50% 43200 ignore-reload override-expire override-lastmod reload-into-ims
#
refresh_pattern (get_video\?|videoplayback\?|videodownload\?) 10080 100% 43200 override-expire ignore-reload ignore-private
refresh_pattern ^http://(.*?)/get_video\? 10080 100% 43200 override-expire ignore-no-cache ignore-private
refresh_pattern ^http://(.*?)/videoplayback\? 10080 100% 43200 override-expire ignore-no-cache ignore-private
2. cache_icp.conf - оно если нужно
icp_query_timeout 10000
icp_port 3130
log_icp_queries off
icp_access deny all
3. cache_option.conf
dns_nameservers x.x.x.x
client_db off
check_hostnames off
memory_pools off
#dns_children 5
negative_ttl 1 minutes
positive_dns_ttl 6 hours
negative_dns_ttl 1 minutes
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
ipcache_size 8192
ipcache_low 88
ipcache_high 96
fqdncache_size 8192
reload_into_ims on
half_closed_clients off
ftp_passive on
#ignore_expect_100 on
#httpd_accel_no_pmtu_disc on
relaxed_header_parser on
ie_refresh on
#reply_header_max_size 40 KB
#request_header_max_size 40 KB
#pipeline_prefetch 2
balance_on_multiple_ip on
detect_broken_pconn on
retry_on_error on
uri_whitespace encode
read_timeout 5 minutes
request_timeout 2 minutes
persistent_request_timeout 1 minutes
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
hierarchy_stoplist cgi-bin ?
httpd_suppress_version_string on
via off
forwarded_for off
4. cache_parent.conf если нужен транспарент и что нибуть еще типа паренты прокси
http_port x.x.x.x:3129 transparent disable-pmtu-discovery=always
ну и сам squid.conf после перепиливания
#----------
include /var/packages/ProxyServer/target/squid/etc/auth_setting_syno.conf
#----------
auth_param basic children 5
auth_param basic credentialsttl 2 hours
acl SSL_ports_syno port 80 81 443 563 5001 5190 5222 5223 8089 9443 10000
acl Safe_ports_syno port 80 # http
acl Safe_ports_syno port 21 # ftp
acl Safe_ports_syno port 443 # https
acl Safe_ports_syno port 70 # gopher
acl Safe_ports_syno port 210 # wais
acl Safe_ports_syno port 1025-65535 # unregistered ports
acl Safe_ports_syno port 280 # http-mgmt
acl Safe_ports_syno port 488 # gss-http
acl Safe_ports_syno port 591 # filemaker
acl Safe_ports_syno port 777 # multiling http
acl CONNECT_syno method CONNECT
#----------
include /var/packages/ProxyServer/target/squid/etc/acl_syno.conf
#----------
http_access deny !Safe_ports_syno
http_access deny CONNECT_syno !SSL_ports_syno
http_access allow localhost manager
http_access deny manager
http_access deny to_localhost
http_access allow localhost
#----------
include /var/packages/ProxyServer/target/squid/etc/access_syno.conf
#----------
http_access deny all
coredump_dir /var/packages/ProxyServer/target/squid/var/logs/
#----------
include /var/packages/ProxyServer/target/squid/etc/my/cache_hit.conf
#----------
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
shutdown_lifetime 0 seconds
#----------
include /var/packages/ProxyServer/target/squid/etc/general_setting_syno.conf
include /var/packages/ProxyServer/target/squid/etc/cache_setting_syno.conf
#----------
include /var/packages/ProxyServer/target/squid/etc/my/cache_icp.conf
include /var/packages/ProxyServer/target/squid/etc/my/cache_option.conf
include /var/packages/ProxyServer/target/squid/etc/my/cache_parent.conf
#----------
#dns_multicast_local on