Hermes Agent
4a1d949e41
完整 Web 管理平台,涵盖: P0 生产加固: - 会话超时(空闲+绝对) + CSRF 防护 + 登录失败限流 - HTTPS/TLS 证书管理(自签生成/上传/删除/过期提醒) - SSL Bump (HTTPS 透明代理) 可视化配置 - 配置文件 diff 预览 + 二次确认才写入 - 服务控制二次确认 + 操作期间按钮锁定 P1 运维能力: - 日志轮转管理(logrotate) + 日志状态监控 - 告警规则(5xx/命中率/磁盘/客户端流量) - 多 Squid 实例管理 + 一键切换 - squidclient mgr 实时性能指标 - 流量异常检测(突增/大文件/高频小包/新客户端) P2 日志分析增强: - 日志持久化到 SQLite + 历史时间范围查询 - 导出 CSV/JSON(日志/KPI/异常/审计) - GeoIP 地图(Leaflet + ip-api.com 离线可选 GeoLite2) - 每客户端 24h 趋势图 - 自定义 Squid logformat 解析器 P3 体验锦上添花: - 暗/亮主题切换(cookie 持久化) - WebSSH 终端(xterm.js + paramiko) - 完整审计日志 + 用户管理 技术栈: Flask 3.0 + SQLAlchemy 2.0 + SQLite + Chart.js + Leaflet 总代码量: ~16500 行 (15 Python 模块 + 34 模板 + CSS) 路由数: 73
48 lines
1.2 KiB
Plaintext
48 lines
1.2 KiB
Plaintext
# ============================================================
|
|
# squid.conf - managed by Squid Web Manager
|
|
# WARNING: this file is regenerated by the web UI.
|
|
# Manual edits may be lost - use the Raw Editor tab
|
|
# if you need to add directives not covered by the UI.
|
|
# ============================================================
|
|
|
|
# ---- Network ----
|
|
http_port 3128
|
|
visible_hostname proxy.example.com
|
|
|
|
# ---- Cache ----
|
|
cache_mem 256 MB
|
|
cache_dir ufs /var/spool/squid 100 16 256
|
|
|
|
# ---- ACLs ----
|
|
acl localhost src 127.0.0.1/32
|
|
acl to_localhost dst 127.0.0.0/8
|
|
acl safeports port 80 443 21 70 80-1024
|
|
acl sslports port 443 563
|
|
acl CONNECT method CONNECT
|
|
acl all src 0.0.0.0/0
|
|
acl manager proto cache_object
|
|
acl local_lan src 172.16.0.0/12 #局域网测试
|
|
|
|
# ---- Refresh patterns ----
|
|
refresh_pattern ^ftp: 1440 20% 10080
|
|
refresh_pattern ^gopher: 1440 0% 1440
|
|
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
|
|
refresh_pattern . 0 20% 4320
|
|
|
|
# ---- Access rules ----
|
|
http_access deny manager
|
|
http_access deny !safeports
|
|
http_access deny !sslports CONNECT
|
|
http_access allow localhost
|
|
http_access deny all
|
|
|
|
# ---- Logging ----
|
|
|
|
# ---- DNS ----
|
|
|
|
# ---- Timeouts ----
|
|
|
|
# ---- Admin ----
|
|
cache_mgr admin@example.com
|
|
|