Featured resource
2025 Tech Upskilling Playbook
Tech Upskilling Playbook

Build future-ready tech teams and hit key business milestones with seven proven plays from industry leaders.

Check it out
  • Lab
    • Libraries: If you want this lab, consider one of these libraries.
    • Cloud
Google Cloud Platform icon
Labs

Installing and Configuring Squid

In this learning activity, you will need to install and configure squid so that it only permits web access to *linuxacademy.com*.

Google Cloud Platform icon
Lab platform
Lab Info
Level
Intermediate
Last updated
Sep 22, 2025
Duration
1h 30m

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.
Table of Contents
  1. Challenge

    Install Squid

    You will need to install Squid on Server1 (10.0.1.10):

    yum install squid

  2. Challenge

    Enable and Start Squid

    You will need to enable Squid:

    systemctl enable squid

    And start it:

    systemctl start squid

  3. Challenge

    Permit Squid Client Access through the Firewall

    You will need to permit clients to connect to the Squid service through the firewall:

    firewall-cmd --permanent --add-service=squid

    And reload the firewall configuration to pick up the change:

    firewall-cmd --reload

  4. Challenge

    Configure Squid

    You'll want to create an ACL that only allows clients to access linuxacademy.com. These go in /etc/squid/squid.conf after the line that says # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS.

    ...
    # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
    
    acl whitelist dstdomain .linuxacademy.com
    http_access allow whitelist
    ...
    

    You'll also need to comment out or remove the line:

    #http_access allow localnet

    And restart Squid:

    systemctl restart squid

  5. Challenge

    Test from a Client

    You'll need to export the http_proxy value to use Server1:

    export http_proxy="http://10.0.1.10:3128"

    And try curling the header of linuxacademy.com:

    curl -I linuxacademy.com

    This should work. Verify this is the only site that works by curling a different address:

    curl -I apache.org

    This should come back as forbidden.

About the author

Pluralsight Skills gives leaders confidence they have the skills needed to execute technology strategy. Technology teams can benchmark expertise across roles, speed up release cycles and build reliable, secure products. By leveraging our expert content, skill assessments and one-of-a-kind analytics, keep up with the pace of change, put the right people on the right projects and boost productivity. It's the most effective path to developing tech skills at scale.

Real skill practice before real-world application

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Learn by doing

Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.

Follow your guide

All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.

Turn time into mastery

On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.

Get started with Pluralsight