Per-range IP address
acl slowhost src 192.168.0.15-192.168.0.250
delay_pools 1
delay_class 1 1
delay_access 1 allow slowhost
delay_parameters 1 8000/8000 # 64 kbits == 8 kbytes per second
Per specific url:
acl magic_words url_regex -i abracadabra
delay_pool_count 1
delay_class 1 1
delay_parameters 1 16000/16000
delay_access 1 allow magic_words
By combining multiple ACLs, you can do interesting things with delay
pools. Here are some examples:
By using time-based acls, you can limit people's speed during working
hours, but allow them full-speed access outside hours.
Again (with time-based acl lists), you can allocate a very small
amount of bandwidth to http during working hours, discouraging people
from browsing the Web during office hours.
By using acls that match specific source IP addresses, you can ensure
that sibling caches have full-speed access to your cache.
You can prioritize access to a limited set of destination sites by
using the dst or dstdomain acl types by inverting the
rules we used to slow access to some sites down.
You can combine username/password access-lists and speed-limits. You
can, for example. allow users that have not logged into the cache
access to the Internet, but at a much slower speed than users who have
logged in. Users that are logged in get access to dedicated bandwidth,
but are charged for their downloads.
reff:
http://www.uniar.ukrnet.net/tools/Squid/x2087.htmhttp://www.firewall.cx/ftopic-2104-0-days0-orderasc-.html