http_port 17.0.0.1:3128
http_port 17.0.0.1:8888 intercept
#Setup cache
cache_dir aufs /var/spool/squid3 20480 16 256
cache_mem 512 MB
cache_swap_low 85
cache_swap_high 98
maximum_object_size 512 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 32 KB
buffered_logs on
pipeline_prefetch on
#cache_effective_user squid
fqdncache_size 1024
#ipcache_size 2048
#ipcache_low 90
#ipcache_high 95
request_header_max_size 256 KB
half_closed_clients off
max_filedesc 65535
check_hostnames off
forwarded_for delete
via offvisible_hostname Gestapo
acl localhost src 127.0.0.1/32 # ::1
acl home_network src 17.0.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow localhost
http_access allow home_network
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
hierarchy_stoplist cgi-bin ?
#refresh patterns for caching static files
refresh_pattern -i ^ftp: 66000 90% 200000
refresh_pattern -i ^gopher: 1440 0% 1440
refresh_pattern -i .\.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(bin|deb|rpm|drpm|exe|zip|tar|tgz|bz2|ipa|bz|ram|rar|bin|uxx|gz|crl|msi|dll|hz|cab|cab\?|psf|vidt|apk|wtex|hz) 220000 90% 500000 override-expire reload-into-ims ignore-reload ignore-no-store ignore-private store-stale
refresh_pattern -i \.(ppt|ppt\?|pptx|pptx\?|doc|doc\?|docx|docx\?|pdf|pdf\?|xls|xls\?|xlsx|xlsx\?|csv|txt) 220000 90% 200000 override-expire reload-into-ims ignore-reload ignore-no-store ignore-private refresh-ims store-stale max-stale=100000
refresh_pattern -i .\.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|html\?|htm|css|js)$|htm\?|crl) 9440 90% 100000 override-expire reload-into-ims ignore-reload ignore-no-store ignore-private ignore-must-revalidate store-stale max-stale=100000
refresh_pattern -i \.(gif|gif\?|png|png\?|jpg|jpg\?|jpeg|jpeg\?|ico|bmp|tiff|webp|bif|ver|pict|pixel|pixel\?) 220000 90% 300000 override-expire reload-into-ims ignore-reload ignore-no-cache ignore-private ignore no-store store-stale refresh-ims max-stale=150000 ignore-auth
refresh_pattern -i \.(swf|js|wav|css|class|dat|zsci|do|ver|advcs|woff|eps|ttf|svg|svgz|ps|acsm) 220000 90% 300000 override-expire reload-into-ims ignore-reload ignore-no-store ignore-private refresh-ims store-stale max-stale=150000
refresh_pattern -i \.(xml|flow) 0 90% 100000 reload-into-ims
refresh_pattern -i \.(json|json\?) 1440 90% 5760 reload-into-ims
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern -i ^http:\/\/liveupdate.symantecliveupdate.com.*\(zip) 0 0% 0
refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i windows.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i . 0 90% 5760
dns_nameservers 208.67.222.222 ; 208.67.220.220
pinger_enable off
memory_replacement_policy heap GDSF
cache_replacement_policy heap LRU
memory_pools on
reload_into_ims on
vary_ignore_expire on
#Add visible_hostname if you need