proxy経由でdnfリポジトリを使う

# 経緯
AWS環境でプライベートサブネット上のEC2からインターネット上のdnfリポジトリを使いたい。
多くは、パブリックサブネット上にNATゲートウェイを置いて、そこをインターネットGWを経由して外へ出る構成だと思う。
今回は、NATゲートウェイの代わりにプロキシサーバを構築して、外へ出る構成を作ってみる。

# 構成図
![proxy.drawio (1).png](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/478546/5570ff57-7bff-f472-322f-8f31754fc9ab.png)

# やってみる
※インスタンスの構築の流れはここでは省略します。一般的な構築なので。

### 【セキュリティグループの設定】
※検証用なので、セキュリティはガバガバの設定です。本番はしっかり設計してください。
・Bastion/Proxy
最低でも個人環境からSSH接続できること、プロキシ通信を受信できるようにすることが大切です。
（マイIPを設定しているので伏せています）
![スクリーンショット 2024-06-29 23.11.22.png](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/478546/c34f842d-2a95-b419-0795-9062575c1765.png)

・検証用Webサーバ
今回は、この後にALBを立ててインターネット経由でWebサーバが覗けることを確認するため、ALBについているセキュリティグループから受信できるようにしています。
基本的に踏み台からHTTP通信をすることはないです（癖で入れてしまっただけなので…）
SSH接続も踏み台サーバのプライベートIPのみで必要最低限の接続になるのでご自身の環境で設定してください。
![スクリーンショット 2024-06-29 23.17.04.png](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/478546/cbc0b735-7ac8-f838-e3ba-6c2cd7773048.png)
![スクリーンショット 2024-06-29 23.18.16.png](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/478546/d279850f-4a1f-ce7e-733f-00e74ce5c658.png)

### 【プロキシサーバ構築】
今回はSquidを入れていきます。
まずは、dnfのアップデートをします。

```
[root@ip-10-0-100-246 ~]# dnf -y update
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register.

Red Hat Enterprise Linux 9 for x86_64 - AppStre  55 MB/s |  36 MB     00:00    
Red Hat Enterprise Linux 9 for x86_64 - BaseOS   50 MB/s |  25 MB     00:00    
Red Hat Enterprise Linux 9 Client Configuration  32 kB/s | 3.0 kB     00:00    
Dependencies resolved.
================================================================================
 Package         Arch   Version               Repository                   Size
================================================================================
Installing:
 kernel          x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms     5.5 M
 kernel-core     x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms      20 M
 kernel-modules  x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms      39 M
 kernel-modules-core
                 x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms      33 M
Upgrading:
 kernel-tools    x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms     5.7 M
 kernel-tools-libs
                 x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms     5.5 M
 python-unversioned-command
                 noarch 3.9.18-3.el9_4.1      rhel-9-appstream-rhui-rpms   10 k
 python3         x86_64 3.9.18-3.el9_4.1      rhel-9-baseos-rhui-rpms      29 k
 python3-libs    x86_64 3.9.18-3.el9_4.1      rhel-9-baseos-rhui-rpms     7.8 M
 python3-perf    x86_64 5.14.0-427.22.1.el9_4 rhel-9-baseos-rhui-rpms     5.6 M
 rh-amazon-rhui-client
                 noarch 4.0.19-1.el9          rhui-client-config-server-9  46 k
 selinux-policy  noarch 38.1.35-2.el9_4.2     rhel-9-baseos-rhui-rpms      53 k
 selinux-policy-targeted
                 noarch 38.1.35-2.el9_4.2     rhel-9-baseos-rhui-rpms     6.9 M
 shim-x64        x86_64 15.8-4.el9_3          rhel-9-baseos-rhui-rpms     476 k

Transaction Summary
================================================================================
Install   4 Packages
Upgrade  10 Packages

Total download size: 130 M
Downloading Packages:
(1/14): kernel-5.14.0-427.22.1.el9_4.x86_64.rpm  20 MB/s | 5.5 MB     00:00    
(2/14): kernel-core-5.14.0-427.22.1.el9_4.x86_6  27 MB/s |  20 MB     00:00    
(3/14): python-unversioned-command-3.9.18-3.el9 781 kB/s |  10 kB     00:00    
(4/14): shim-x64-15.8-4.el9_3.x86_64.rpm         16 MB/s | 476 kB     00:00    
(5/14): selinux-policy-38.1.35-2.el9_4.2.noarch 4.3 MB/s |  53 kB     00:00    
(6/14): selinux-policy-targeted-38.1.35-2.el9_4  32 MB/s | 6.9 MB     00:00    
(7/14): kernel-tools-5.14.0-427.22.1.el9_4.x86_  29 MB/s | 5.7 MB     00:00    
(8/14): kernel-modules-5.14.0-427.22.1.el9_4.x8  26 MB/s |  39 MB     00:01    
(9/14): kernel-modules-core-5.14.0-427.22.1.el9  24 MB/s |  33 MB     00:01    
(10/14): python3-3.9.18-3.el9_4.1.x86_64.rpm    2.5 MB/s |  29 kB     00:00    
(11/14): kernel-tools-libs-5.14.0-427.22.1.el9_ 9.6 MB/s | 5.5 MB     00:00    
(12/14): rh-amazon-rhui-client-4.0.19-1.el9.noa 1.5 MB/s |  46 kB     00:00    
(13/14): python3-perf-5.14.0-427.22.1.el9_4.x86  15 MB/s | 5.6 MB     00:00    
(14/14): python3-libs-3.9.18-3.el9_4.1.x86_64.r  28 MB/s | 7.8 MB     00:00    
--------------------------------------------------------------------------------
Total                                            63 MB/s | 130 MB     00:02     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch       1/1 
  Preparing        :                                                        1/1 
  Installing       : kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64      1/24 
  Installing       : kernel-core-5.14.0-427.22.1.el9_4.x86_64              2/24 
  Running scriptlet: kernel-core-5.14.0-427.22.1.el9_4.x86_64              2/24 
  Installing       : kernel-modules-5.14.0-427.22.1.el9_4.x86_64           3/24 
  Running scriptlet: kernel-modules-5.14.0-427.22.1.el9_4.x86_64           3/24 
  Upgrading        : selinux-policy-38.1.35-2.el9_4.2.noarch               4/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.2.noarch               4/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch      5/24 
  Upgrading        : selinux-policy-targeted-38.1.35-2.el9_4.2.noarch      5/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch      5/24 
  Upgrading        : python3-libs-3.9.18-3.el9_4.1.x86_64                  6/24 
  Upgrading        : python3-3.9.18-3.el9_4.1.x86_64                       7/24 
  Upgrading        : python-unversioned-command-3.9.18-3.el9_4.1.noarch    8/24 
  Upgrading        : kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64        9/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64        9/24 
  Upgrading        : kernel-tools-5.14.0-427.22.1.el9_4.x86_64            10/24 
  Running scriptlet: kernel-tools-5.14.0-427.22.1.el9_4.x86_64            10/24 
  Upgrading        : python3-perf-5.14.0-427.22.1.el9_4.x86_64            11/24 
  Upgrading        : rh-amazon-rhui-client-4.0.19-1.el9.noarch            12/24 
warning: /etc/yum.repos.d/redhat-rhui.repo saved as /etc/yum.repos.d/redhat-rhui.repo.rpmsave

  Running scriptlet: rh-amazon-rhui-client-4.0.19-1.el9.noarch            12/24 
[INFO:choose_repo] choose_repo:33 2024-06-29 11:31:58,388: Enabling binary repos in redhat-rhui.repo
[INFO:choose_repo] choose_repo:56 2024-06-29 11:31:58,391: Enabling client config repo
[INFO:choose_repo] choose_repo:64 2024-06-29 11:31:58,391: Executing [sed -i 's/enabled=0/enabled=1/' /etc/yum.repos.d/redhat-rhui-client-config.repo]

  Installing       : kernel-5.14.0-427.22.1.el9_4.x86_64                  13/24 
  Upgrading        : shim-x64-15.8-4.el9_3.x86_64                         14/24 
  Running scriptlet: rh-amazon-rhui-client-4.0.18-1.el9.noarch            15/24 
  Cleanup          : rh-amazon-rhui-client-4.0.18-1.el9.noarch            15/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.noarch                16/24 
  Cleanup          : selinux-policy-38.1.35-2.el9_4.noarch                16/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.noarch                16/24 
  Cleanup          : selinux-policy-targeted-38.1.35-2.el9_4.noarch       17/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.noarch       17/24 
  Cleanup          : shim-x64-15.8-3.el9_4.x86_64                         18/24 
  Running scriptlet: kernel-tools-5.14.0-427.20.1.el9_4.x86_64            19/24 
  Cleanup          : kernel-tools-5.14.0-427.20.1.el9_4.x86_64            19/24 
  Running scriptlet: kernel-tools-5.14.0-427.20.1.el9_4.x86_64            19/24 
  Cleanup          : python3-perf-5.14.0-427.20.1.el9_4.x86_64            20/24 
  Cleanup          : python3-3.9.18-3.el9.x86_64                          21/24 
  Cleanup          : python-unversioned-command-3.9.18-3.el9.noarch       22/24 
  Cleanup          : python3-libs-3.9.18-3.el9.x86_64                     23/24 
  Cleanup          : kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64       24/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64       24/24 
  Running scriptlet: kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64     24/24 
  Running scriptlet: kernel-core-5.14.0-427.22.1.el9_4.x86_64                          24/24 
  Running scriptlet: kernel-modules-5.14.0-427.22.1.el9_4.x86_64                       24/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                  24/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    24/24 
  Verifying        : kernel-5.14.0-427.22.1.el9_4.x86_64                                1/24 
  Verifying        : kernel-core-5.14.0-427.22.1.el9_4.x86_64                           2/24 
  Verifying        : kernel-modules-5.14.0-427.22.1.el9_4.x86_64                        3/24 
  Verifying        : kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                   4/24 
  Verifying        : python-unversioned-command-3.9.18-3.el9_4.1.noarch                 5/24 
  Verifying        : python-unversioned-command-3.9.18-3.el9.noarch                     6/24 
  Verifying        : shim-x64-15.8-4.el9_3.x86_64                                       7/24 
  Verifying        : shim-x64-15.8-3.el9_4.x86_64                                       8/24 
  Verifying        : selinux-policy-38.1.35-2.el9_4.2.noarch                            9/24 
  Verifying        : selinux-policy-38.1.35-2.el9_4.noarch                             10/24 
  Verifying        : selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                  11/24 
  Verifying        : selinux-policy-targeted-38.1.35-2.el9_4.noarch                    12/24 
  Verifying        : kernel-tools-5.14.0-427.22.1.el9_4.x86_64                         13/24 
  Verifying        : kernel-tools-5.14.0-427.20.1.el9_4.x86_64                         14/24 
  Verifying        : kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                    15/24 
  Verifying        : kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    16/24 
  Verifying        : python3-perf-5.14.0-427.22.1.el9_4.x86_64                         17/24 
  Verifying        : python3-perf-5.14.0-427.20.1.el9_4.x86_64                         18/24 
  Verifying        : python3-3.9.18-3.el9_4.1.x86_64                                   19/24 
  Verifying        : python3-3.9.18-3.el9.x86_64                                       20/24 
  Verifying        : python3-libs-3.9.18-3.el9_4.1.x86_64                              21/24 
  Verifying        : python3-libs-3.9.18-3.el9.x86_64                                  22/24 
  Verifying        : rh-amazon-rhui-client-4.0.19-1.el9.noarch                         23/24 
  Verifying        : rh-amazon-rhui-client-4.0.18-1.el9.noarch                         24/24 
Installed products updated.

Upgraded:
  kernel-tools-5.14.0-427.22.1.el9_4.x86_64                                                  
  kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                                             
  python-unversioned-command-3.9.18-3.el9_4.1.noarch                                         
  python3-3.9.18-3.el9_4.1.x86_64                                                            
  python3-libs-3.9.18-3.el9_4.1.x86_64                                                       
  python3-perf-5.14.0-427.22.1.el9_4.x86_64                                                  
  rh-amazon-rhui-client-4.0.19-1.el9.noarch                                                  
  selinux-policy-38.1.35-2.el9_4.2.noarch                                                    
  selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                                           
  shim-x64-15.8-4.el9_3.x86_64                                                               
Installed:
  kernel-5.14.0-427.22.1.el9_4.x86_64                                                        
  kernel-core-5.14.0-427.22.1.el9_4.x86_64                                                   
  kernel-modules-5.14.0-427.22.1.el9_4.x86_64                                                
  kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                                           

Complete!
```

次にSquidをインストール
```
[root@ip-10-0-100-246 ~]# dnf -y install squid
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register.

Red Hat Enterprise Linux 9 for x86_64 - AppStream from RHUI   78 kB/s | 4.5 kB     00:00    
Red Hat Enterprise Linux 9 for x86_64 - BaseOS from RHUI (RP  76 kB/s | 4.1 kB     00:00    
Red Hat Enterprise Linux 9 Client Configuration               29 kB/s | 1.5 kB     00:00    
Dependencies resolved.
=============================================================================================
 Package                  Arch     Version                Repository                    Size
=============================================================================================
Installing:
 squid                    x86_64   7:5.5-12.el9_4         rhel-9-appstream-rhui-rpms   3.9 M
Installing dependencies:
 httpd-filesystem         noarch   2.4.57-8.el9           rhel-9-appstream-rhui-rpms    15 k
 libecap                  x86_64   1.0.1-10.el9           rhel-9-appstream-rhui-rpms    28 k
 libtool-ltdl             x86_64   2.4.6-45.el9           rhel-9-appstream-rhui-rpms    39 k
 perl-AutoLoader          noarch   5.74-481.el9           rhel-9-appstream-rhui-rpms    21 k
 perl-B                   x86_64   1.80-481.el9           rhel-9-appstream-rhui-rpms   184 k
 perl-Carp                noarch   1.50-460.el9           rhel-9-appstream-rhui-rpms    31 k
 perl-Class-Struct        noarch   0.66-481.el9           rhel-9-appstream-rhui-rpms    22 k
 perl-DBI                 x86_64   1.643-9.el9            rhel-9-appstream-rhui-rpms   729 k
 perl-Data-Dumper         x86_64   2.174-462.el9          rhel-9-appstream-rhui-rpms    59 k
 perl-Digest              noarch   1.19-4.el9             rhel-9-appstream-rhui-rpms    29 k
 perl-Digest-MD5          x86_64   2.58-4.el9             rhel-9-appstream-rhui-rpms    39 k
 perl-Digest-SHA          x86_64   1:6.02-461.el9         rhel-9-appstream-rhui-rpms    66 k
 perl-DynaLoader          x86_64   1.47-481.el9           rhel-9-appstream-rhui-rpms    26 k
 perl-Encode              x86_64   4:3.08-462.el9         rhel-9-appstream-rhui-rpms   1.7 M
 perl-English             noarch   1.11-481.el9           rhel-9-appstream-rhui-rpms    14 k
 perl-Errno               x86_64   1.30-481.el9           rhel-9-appstream-rhui-rpms    15 k
 perl-Exporter            noarch   5.74-461.el9           rhel-9-appstream-rhui-rpms    34 k
 perl-Fcntl               x86_64   1.13-481.el9           rhel-9-appstream-rhui-rpms    22 k
 perl-File-Basename       noarch   2.85-481.el9           rhel-9-appstream-rhui-rpms    17 k
 perl-File-Path           noarch   2.18-4.el9             rhel-9-appstream-rhui-rpms    38 k
 perl-File-Temp           noarch   1:0.231.100-4.el9      rhel-9-appstream-rhui-rpms    63 k
 perl-File-stat           noarch   1.09-481.el9           rhel-9-appstream-rhui-rpms    17 k
 perl-FileHandle          noarch   2.03-481.el9           rhel-9-appstream-rhui-rpms    16 k
 perl-Getopt-Long         noarch   1:2.52-4.el9           rhel-9-appstream-rhui-rpms    64 k
 perl-Getopt-Std          noarch   1.12-481.el9           rhel-9-appstream-rhui-rpms    16 k
 perl-HTTP-Tiny           noarch   0.076-462.el9          rhel-9-appstream-rhui-rpms    57 k
 perl-IO                  x86_64   1.43-481.el9           rhel-9-appstream-rhui-rpms    92 k
 perl-IO-Socket-IP        noarch   0.41-5.el9             rhel-9-appstream-rhui-rpms    45 k
 perl-IO-Socket-SSL       noarch   2.073-1.el9            rhel-9-appstream-rhui-rpms   223 k
 perl-IPC-Open3           noarch   1.21-481.el9           rhel-9-appstream-rhui-rpms    24 k
 perl-MIME-Base64         x86_64   3.16-4.el9             rhel-9-appstream-rhui-rpms    34 k
 perl-Math-BigInt         noarch   1:1.9998.18-460.el9    rhel-9-appstream-rhui-rpms   194 k
 perl-Math-Complex        noarch   1.59-481.el9           rhel-9-appstream-rhui-rpms    47 k
 perl-Mozilla-CA          noarch   20200520-6.el9         rhel-9-appstream-rhui-rpms    14 k
 perl-Net-SSLeay          x86_64   1.92-2.el9             rhel-9-appstream-rhui-rpms   392 k
 perl-POSIX               x86_64   1.94-481.el9           rhel-9-appstream-rhui-rpms    98 k
 perl-PathTools           x86_64   3.78-461.el9           rhel-9-appstream-rhui-rpms    92 k
 perl-Pod-Escapes         noarch   1:1.07-460.el9         rhel-9-appstream-rhui-rpms    22 k
 perl-Pod-Perldoc         noarch   3.28.01-461.el9        rhel-9-appstream-rhui-rpms    92 k
 perl-Pod-Simple          noarch   1:3.42-4.el9           rhel-9-appstream-rhui-rpms   229 k
 perl-Pod-Usage           noarch   4:2.01-4.el9           rhel-9-appstream-rhui-rpms    43 k
 perl-Scalar-List-Utils   x86_64   4:1.56-461.el9         rhel-9-appstream-rhui-rpms    77 k
 perl-SelectSaver         noarch   1.02-481.el9           rhel-9-appstream-rhui-rpms    12 k
 perl-Socket              x86_64   4:2.031-4.el9          rhel-9-appstream-rhui-rpms    58 k
 perl-Storable            x86_64   1:3.21-460.el9         rhel-9-appstream-rhui-rpms    98 k
 perl-Symbol              noarch   1.08-481.el9           rhel-9-appstream-rhui-rpms    14 k
 perl-Term-ANSIColor      noarch   5.01-461.el9           rhel-9-appstream-rhui-rpms    51 k
 perl-Term-Cap            noarch   1.17-460.el9           rhel-9-appstream-rhui-rpms    24 k
 perl-Text-ParseWords     noarch   3.30-460.el9           rhel-9-appstream-rhui-rpms    18 k
 perl-Text-Tabs+Wrap      noarch   2013.0523-460.el9      rhel-9-appstream-rhui-rpms    25 k
 perl-Time-Local          noarch   2:1.300-7.el9          rhel-9-appstream-rhui-rpms    37 k
 perl-URI                 noarch   5.09-3.el9             rhel-9-appstream-rhui-rpms   125 k
 perl-base                noarch   2.27-481.el9           rhel-9-appstream-rhui-rpms    16 k
 perl-constant            noarch   1.33-461.el9           rhel-9-appstream-rhui-rpms    25 k
 perl-if                  noarch   0.60.800-481.el9       rhel-9-appstream-rhui-rpms    14 k
 perl-interpreter         x86_64   4:5.32.1-481.el9       rhel-9-appstream-rhui-rpms    73 k
 perl-libnet              noarch   3.13-4.el9             rhel-9-appstream-rhui-rpms   134 k
 perl-libs                x86_64   4:5.32.1-481.el9       rhel-9-appstream-rhui-rpms   2.2 M
 perl-mro                 x86_64   1.23-481.el9           rhel-9-appstream-rhui-rpms    29 k
 perl-overload            noarch   1.31-481.el9           rhel-9-appstream-rhui-rpms    46 k
 perl-overloading         noarch   0.02-481.el9           rhel-9-appstream-rhui-rpms    13 k
 perl-parent              noarch   1:0.238-460.el9        rhel-9-appstream-rhui-rpms    16 k
 perl-podlators           noarch   1:4.14-460.el9         rhel-9-appstream-rhui-rpms   118 k
 perl-subs                noarch   1.03-481.el9           rhel-9-appstream-rhui-rpms    12 k
 perl-vars                noarch   1.05-481.el9           rhel-9-appstream-rhui-rpms    13 k
Installing weak dependencies:
 perl-NDBM_File           x86_64   1.15-481.el9           rhel-9-appstream-rhui-rpms    23 k

Transaction Summary
=============================================================================================
Install  67 Packages

Total download size: 12 M
Installed size: 39 M
Downloading Packages:
(1/67): perl-Digest-MD5-2.58-4.el9.x86_64.rpm                700 kB/s |  39 kB     00:00    
(2/67): perl-Data-Dumper-2.174-462.el9.x86_64.rpm            966 kB/s |  59 kB     00:00    
(3/67): perl-IO-Socket-SSL-2.073-1.el9.noarch.rpm             17 MB/s | 223 kB     00:00    
(4/67): perl-Mozilla-CA-20200520-6.el9.noarch.rpm            1.3 MB/s |  14 kB     00:00    
(5/67): perl-Term-Cap-1.17-460.el9.noarch.rpm                2.8 MB/s |  24 kB     00:00    
(6/67): perl-Pod-Simple-3.42-4.el9.noarch.rpm                 14 MB/s | 229 kB     00:00    
(7/67): perl-Time-Local-1.300-7.el9.noarch.rpm               4.3 MB/s |  37 kB     00:00    
(8/67): perl-Pod-Escapes-1.07-460.el9.noarch.rpm             3.0 MB/s |  22 kB     00:00    
(9/67): perl-Encode-3.08-462.el9.x86_64.rpm                   16 MB/s | 1.7 MB     00:00    
(10/67): perl-Storable-3.21-460.el9.x86_64.rpm               4.4 MB/s |  98 kB     00:00    
(11/67): perl-podlators-4.14-460.el9.noarch.rpm              5.5 MB/s | 118 kB     00:00    
(12/67): libecap-1.0.1-10.el9.x86_64.rpm                     1.5 MB/s |  28 kB     00:00    
(13/67): perl-Digest-SHA-6.02-461.el9.x86_64.rpm             4.2 MB/s |  66 kB     00:00    
(14/67): libtool-ltdl-2.4.6-45.el9.x86_64.rpm                1.8 MB/s |  39 kB     00:00    
(15/67): perl-Exporter-5.74-461.el9.noarch.rpm               3.3 MB/s |  34 kB     00:00    
(16/67): perl-File-Temp-0.231.100-4.el9.noarch.rpm           6.2 MB/s |  63 kB     00:00    
(17/67): perl-Getopt-Long-2.52-4.el9.noarch.rpm              5.8 MB/s |  64 kB     00:00    
(18/67): perl-MIME-Base64-3.16-4.el9.x86_64.rpm              3.2 MB/s |  34 kB     00:00    
(19/67): perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch.rpm    3.2 MB/s |  25 kB     00:00    
(20/67): perl-parent-0.238-460.el9.noarch.rpm                1.9 MB/s |  16 kB     00:00    
(21/67): perl-Digest-1.19-4.el9.noarch.rpm                   2.9 MB/s |  29 kB     00:00    
(22/67): perl-File-Path-2.18-4.el9.noarch.rpm                4.0 MB/s |  38 kB     00:00    
(23/67): perl-DBI-1.643-9.el9.x86_64.rpm                      29 MB/s | 729 kB     00:00    
(24/67): perl-IO-Socket-IP-0.41-5.el9.noarch.rpm             3.0 MB/s |  45 kB     00:00    
(25/67): perl-Pod-Usage-2.01-4.el9.noarch.rpm                3.0 MB/s |  43 kB     00:00    
(26/67): perl-Scalar-List-Utils-1.56-461.el9.x86_64.rpm      8.3 MB/s |  77 kB     00:00    
(27/67): perl-Socket-2.031-4.el9.x86_64.rpm                  7.6 MB/s |  58 kB     00:00    
(28/67): perl-Term-ANSIColor-5.01-461.el9.noarch.rpm         3.5 MB/s |  51 kB     00:00    
(29/67): perl-Text-ParseWords-3.30-460.el9.noarch.rpm        1.3 MB/s |  18 kB     00:00    
(30/67): perl-URI-5.09-3.el9.noarch.rpm                      9.3 MB/s | 125 kB     00:00    
(31/67): perl-constant-1.33-461.el9.noarch.rpm               2.7 MB/s |  25 kB     00:00    
(32/67): perl-Pod-Perldoc-3.28.01-461.el9.noarch.rpm         8.9 MB/s |  92 kB     00:00    
(33/67): perl-libnet-3.13-4.el9.noarch.rpm                    12 MB/s | 134 kB     00:00    
(34/67): perl-Carp-1.50-460.el9.noarch.rpm                   2.7 MB/s |  31 kB     00:00    
(35/67): perl-Math-BigInt-1.9998.18-460.el9.noarch.rpm        15 MB/s | 194 kB     00:00    
(36/67): perl-PathTools-3.78-461.el9.x86_64.rpm              8.0 MB/s |  92 kB     00:00    
(37/67): perl-AutoLoader-5.74-481.el9.noarch.rpm             2.5 MB/s |  21 kB     00:00    
(38/67): perl-Net-SSLeay-1.92-2.el9.x86_64.rpm                20 MB/s | 392 kB     00:00    
(39/67): perl-Math-Complex-1.59-481.el9.noarch.rpm           3.4 MB/s |  47 kB     00:00    
(40/67): perl-SelectSaver-1.02-481.el9.noarch.rpm            1.1 MB/s |  12 kB     00:00    
(41/67): perl-if-0.60.800-481.el9.noarch.rpm                 1.5 MB/s |  14 kB     00:00    
(42/67): perl-overloading-0.02-481.el9.noarch.rpm            1.5 MB/s |  13 kB     00:00    
(43/67): httpd-filesystem-2.4.57-8.el9.noarch.rpm            1.6 MB/s |  15 kB     00:00    
(44/67): perl-B-1.80-481.el9.x86_64.rpm                       16 MB/s | 184 kB     00:00    
(45/67): perl-Class-Struct-0.66-481.el9.noarch.rpm           2.0 MB/s |  22 kB     00:00    
(46/67): perl-English-1.11-481.el9.noarch.rpm                1.2 MB/s |  14 kB     00:00    
(47/67): perl-Errno-1.30-481.el9.x86_64.rpm                  1.7 MB/s |  15 kB     00:00    
(48/67): perl-File-Basename-2.85-481.el9.noarch.rpm          1.5 MB/s |  17 kB     00:00    
(49/67): perl-File-stat-1.09-481.el9.noarch.rpm              1.4 MB/s |  17 kB     00:00    
(50/67): perl-FileHandle-2.03-481.el9.noarch.rpm             1.5 MB/s |  16 kB     00:00    
(51/67): perl-Getopt-Std-1.12-481.el9.noarch.rpm             1.8 MB/s |  16 kB     00:00    
(52/67): perl-HTTP-Tiny-0.076-462.el9.noarch.rpm             6.6 MB/s |  57 kB     00:00    
(53/67): perl-IPC-Open3-1.21-481.el9.noarch.rpm              3.0 MB/s |  24 kB     00:00    
(54/67): perl-IO-1.43-481.el9.x86_64.rpm                     5.9 MB/s |  92 kB     00:00    
(55/67): perl-NDBM_File-1.15-481.el9.x86_64.rpm              2.7 MB/s |  23 kB     00:00    
(56/67): perl-POSIX-1.94-481.el9.x86_64.rpm                  9.7 MB/s |  98 kB     00:00    
(57/67): perl-Symbol-1.08-481.el9.noarch.rpm                 1.7 MB/s |  14 kB     00:00    
(58/67): perl-base-2.27-481.el9.noarch.rpm                   1.8 MB/s |  16 kB     00:00    
(59/67): perl-interpreter-5.32.1-481.el9.x86_64.rpm          7.7 MB/s |  73 kB     00:00    
(60/67): perl-mro-1.23-481.el9.x86_64.rpm                    2.6 MB/s |  29 kB     00:00    
(61/67): perl-overload-1.31-481.el9.noarch.rpm               3.3 MB/s |  46 kB     00:00    
(62/67): perl-vars-1.05-481.el9.noarch.rpm                   1.4 MB/s |  13 kB     00:00    
(63/67): perl-DynaLoader-1.47-481.el9.x86_64.rpm             3.0 MB/s |  26 kB     00:00    
(64/67): perl-libs-5.32.1-481.el9.x86_64.rpm                  39 MB/s | 2.2 MB     00:00    
(65/67): perl-Fcntl-1.13-481.el9.x86_64.rpm                  860 kB/s |  22 kB     00:00    
(66/67): perl-subs-1.03-481.el9.noarch.rpm                   1.6 MB/s |  12 kB     00:00    
(67/67): squid-5.5-12.el9_4.x86_64.rpm                        43 MB/s | 3.9 MB     00:00    
---------------------------------------------------------------------------------------------
Total                                                         27 MB/s |  12 MB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: squid-7:5.5-12.el9_4.x86_64                                         1/1 
  Preparing        :                                                                     1/1 
  Installing       : perl-Digest-1.19-4.el9.noarch                                      1/67 
  Installing       : perl-Digest-MD5-2.58-4.el9.x86_64                                  2/67 
  Installing       : perl-FileHandle-2.03-481.el9.noarch                                3/67 
  Installing       : perl-B-1.80-481.el9.x86_64                                         4/67 
  Installing       : perl-libnet-3.13-4.el9.noarch                                      5/67 
  Installing       : perl-Data-Dumper-2.174-462.el9.x86_64                              6/67 
  Installing       : perl-AutoLoader-5.74-481.el9.noarch                                7/67 
  Installing       : perl-base-2.27-481.el9.noarch                                      8/67 
  Installing       : perl-URI-5.09-3.el9.noarch                                         9/67 
  Installing       : perl-Time-Local-2:1.300-7.el9.noarch                              10/67 
  Installing       : perl-if-0.60.800-481.el9.noarch                                   11/67 
  Installing       : perl-Mozilla-CA-20200520-6.el9.noarch                             12/67 
  Installing       : perl-Pod-Escapes-1:1.07-460.el9.noarch                            13/67 
  Installing       : perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch                      14/67 
  Installing       : perl-File-Path-2.18-4.el9.noarch                                  15/67 
  Installing       : perl-Net-SSLeay-1.92-2.el9.x86_64                                 16/67 
  Installing       : perl-IO-Socket-IP-0.41-5.el9.noarch                               17/67 
  Installing       : perl-IO-Socket-SSL-2.073-1.el9.noarch                             18/67 
  Installing       : perl-Term-ANSIColor-5.01-461.el9.noarch                           19/67 
  Installing       : perl-Class-Struct-0.66-481.el9.noarch                             20/67 
  Installing       : perl-Term-Cap-1.17-460.el9.noarch                                 21/67 
  Installing       : perl-File-Temp-1:0.231.100-4.el9.noarch                           22/67 
  Installing       : perl-IPC-Open3-1.21-481.el9.noarch                                23/67 
  Installing       : perl-POSIX-1.94-481.el9.x86_64                                    24/67 
  Installing       : perl-subs-1.03-481.el9.noarch                                     25/67 
  Installing       : perl-Pod-Simple-1:3.42-4.el9.noarch                               26/67 
  Installing       : perl-HTTP-Tiny-0.076-462.el9.noarch                               27/67 
  Installing       : perl-Socket-4:2.031-4.el9.x86_64                                  28/67 
  Installing       : perl-SelectSaver-1.02-481.el9.noarch                              29/67 
  Installing       : perl-Symbol-1.08-481.el9.noarch                                   30/67 
  Installing       : perl-File-stat-1.09-481.el9.noarch                                31/67 
  Installing       : perl-podlators-1:4.14-460.el9.noarch                              32/67 
  Installing       : perl-Pod-Perldoc-3.28.01-461.el9.noarch                           33/67 
  Installing       : perl-Text-ParseWords-3.30-460.el9.noarch                          34/67 
  Installing       : perl-overloading-0.02-481.el9.noarch                              35/67 
  Installing       : perl-mro-1.23-481.el9.x86_64                                      36/67 
  Installing       : perl-IO-1.43-481.el9.x86_64                                       37/67 
  Installing       : perl-Fcntl-1.13-481.el9.x86_64                                    38/67 
  Installing       : perl-Pod-Usage-4:2.01-4.el9.noarch                                39/67 
  Installing       : perl-parent-1:0.238-460.el9.noarch                                40/67 
  Installing       : perl-MIME-Base64-3.16-4.el9.x86_64                                41/67 
  Installing       : perl-Scalar-List-Utils-4:1.56-461.el9.x86_64                      42/67 
  Installing       : perl-constant-1.33-461.el9.noarch                                 43/67 
  Installing       : perl-Errno-1.30-481.el9.x86_64                                    44/67 
  Installing       : perl-File-Basename-2.85-481.el9.noarch                            45/67 
  Installing       : perl-Getopt-Std-1.12-481.el9.noarch                               46/67 
  Installing       : perl-overload-1.31-481.el9.noarch                                 47/67 
  Installing       : perl-vars-1.05-481.el9.noarch                                     48/67 
  Installing       : perl-Storable-1:3.21-460.el9.x86_64                               49/67 
  Installing       : perl-Getopt-Long-1:2.52-4.el9.noarch                              50/67 
  Installing       : perl-Exporter-5.74-461.el9.noarch                                 51/67 
  Installing       : perl-Carp-1.50-460.el9.noarch                                     52/67 
  Installing       : perl-PathTools-3.78-461.el9.x86_64                                53/67 
  Installing       : perl-NDBM_File-1.15-481.el9.x86_64                                54/67 
  Installing       : perl-Encode-4:3.08-462.el9.x86_64                                 55/67 
  Installing       : perl-libs-4:5.32.1-481.el9.x86_64                                 56/67 
  Installing       : perl-interpreter-4:5.32.1-481.el9.x86_64                          57/67 
  Installing       : perl-Digest-SHA-1:6.02-461.el9.x86_64                             58/67 
  Installing       : perl-Math-Complex-1.59-481.el9.noarch                             59/67 
  Installing       : perl-Math-BigInt-1:1.9998.18-460.el9.noarch                       60/67 
  Installing       : perl-English-1.11-481.el9.noarch                                  61/67 
  Installing       : perl-DynaLoader-1.47-481.el9.x86_64                               62/67 
  Installing       : perl-DBI-1.643-9.el9.x86_64                                       63/67 
  Running scriptlet: httpd-filesystem-2.4.57-8.el9.noarch                              64/67 
  Installing       : httpd-filesystem-2.4.57-8.el9.noarch                              64/67 
  Installing       : libtool-ltdl-2.4.6-45.el9.x86_64                                  65/67 
  Installing       : libecap-1.0.1-10.el9.x86_64                                       66/67 
  Running scriptlet: squid-7:5.5-12.el9_4.x86_64                                       67/67 
  Installing       : squid-7:5.5-12.el9_4.x86_64                                       67/67 
  Running scriptlet: squid-7:5.5-12.el9_4.x86_64                                       67/67 
  Verifying        : perl-Data-Dumper-2.174-462.el9.x86_64                              1/67 
  Verifying        : perl-Digest-MD5-2.58-4.el9.x86_64                                  2/67 
  Verifying        : perl-Encode-4:3.08-462.el9.x86_64                                  3/67 
  Verifying        : perl-IO-Socket-SSL-2.073-1.el9.noarch                              4/67 
  Verifying        : perl-Mozilla-CA-20200520-6.el9.noarch                              5/67 
  Verifying        : perl-Pod-Simple-1:3.42-4.el9.noarch                                6/67 
  Verifying        : perl-Term-Cap-1.17-460.el9.noarch                                  7/67 
  Verifying        : perl-Time-Local-2:1.300-7.el9.noarch                               8/67 
  Verifying        : perl-Pod-Escapes-1:1.07-460.el9.noarch                             9/67 
  Verifying        : perl-Storable-1:3.21-460.el9.x86_64                               10/67 
  Verifying        : perl-podlators-1:4.14-460.el9.noarch                              11/67 
  Verifying        : libecap-1.0.1-10.el9.x86_64                                       12/67 
  Verifying        : libtool-ltdl-2.4.6-45.el9.x86_64                                  13/67 
  Verifying        : perl-Digest-SHA-1:6.02-461.el9.x86_64                             14/67 
  Verifying        : perl-Exporter-5.74-461.el9.noarch                                 15/67 
  Verifying        : perl-File-Temp-1:0.231.100-4.el9.noarch                           16/67 
  Verifying        : perl-Getopt-Long-1:2.52-4.el9.noarch                              17/67 
  Verifying        : perl-MIME-Base64-3.16-4.el9.x86_64                                18/67 
  Verifying        : perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch                      19/67 
  Verifying        : perl-parent-1:0.238-460.el9.noarch                                20/67 
  Verifying        : perl-DBI-1.643-9.el9.x86_64                                       21/67 
  Verifying        : perl-Digest-1.19-4.el9.noarch                                     22/67 
  Verifying        : perl-File-Path-2.18-4.el9.noarch                                  23/67 
  Verifying        : perl-IO-Socket-IP-0.41-5.el9.noarch                               24/67 
  Verifying        : perl-Pod-Usage-4:2.01-4.el9.noarch                                25/67 
  Verifying        : perl-Scalar-List-Utils-4:1.56-461.el9.x86_64                      26/67 
  Verifying        : perl-Socket-4:2.031-4.el9.x86_64                                  27/67 
  Verifying        : perl-Term-ANSIColor-5.01-461.el9.noarch                           28/67 
  Verifying        : perl-Text-ParseWords-3.30-460.el9.noarch                          29/67 
  Verifying        : perl-URI-5.09-3.el9.noarch                                        30/67 
  Verifying        : perl-constant-1.33-461.el9.noarch                                 31/67 
  Verifying        : perl-Pod-Perldoc-3.28.01-461.el9.noarch                           32/67 
  Verifying        : perl-libnet-3.13-4.el9.noarch                                     33/67 
  Verifying        : perl-Carp-1.50-460.el9.noarch                                     34/67 
  Verifying        : perl-Math-BigInt-1:1.9998.18-460.el9.noarch                       35/67 
  Verifying        : perl-PathTools-3.78-461.el9.x86_64                                36/67 
  Verifying        : perl-Net-SSLeay-1.92-2.el9.x86_64                                 37/67 
  Verifying        : perl-AutoLoader-5.74-481.el9.noarch                               38/67 
  Verifying        : perl-Math-Complex-1.59-481.el9.noarch                             39/67 
  Verifying        : perl-SelectSaver-1.02-481.el9.noarch                              40/67 
  Verifying        : perl-if-0.60.800-481.el9.noarch                                   41/67 
  Verifying        : perl-overloading-0.02-481.el9.noarch                              42/67 
  Verifying        : httpd-filesystem-2.4.57-8.el9.noarch                              43/67 
  Verifying        : perl-B-1.80-481.el9.x86_64                                        44/67 
  Verifying        : perl-Class-Struct-0.66-481.el9.noarch                             45/67 
  Verifying        : perl-English-1.11-481.el9.noarch                                  46/67 
  Verifying        : perl-Errno-1.30-481.el9.x86_64                                    47/67 
  Verifying        : perl-File-Basename-2.85-481.el9.noarch                            48/67 
  Verifying        : perl-File-stat-1.09-481.el9.noarch                                49/67 
  Verifying        : perl-FileHandle-2.03-481.el9.noarch                               50/67 
  Verifying        : perl-Getopt-Std-1.12-481.el9.noarch                               51/67 
  Verifying        : perl-HTTP-Tiny-0.076-462.el9.noarch                               52/67 
  Verifying        : perl-IO-1.43-481.el9.x86_64                                       53/67 
  Verifying        : perl-IPC-Open3-1.21-481.el9.noarch                                54/67 
  Verifying        : perl-NDBM_File-1.15-481.el9.x86_64                                55/67 
  Verifying        : perl-POSIX-1.94-481.el9.x86_64                                    56/67 
  Verifying        : perl-Symbol-1.08-481.el9.noarch                                   57/67 
  Verifying        : perl-base-2.27-481.el9.noarch                                     58/67 
  Verifying        : perl-interpreter-4:5.32.1-481.el9.x86_64                          59/67 
  Verifying        : perl-libs-4:5.32.1-481.el9.x86_64                                 60/67 
  Verifying        : perl-mro-1.23-481.el9.x86_64                                      61/67 
  Verifying        : perl-overload-1.31-481.el9.noarch                                 62/67 
  Verifying        : perl-vars-1.05-481.el9.noarch                                     63/67 
  Verifying        : squid-7:5.5-12.el9_4.x86_64                                       64/67 
  Verifying        : perl-DynaLoader-1.47-481.el9.x86_64                               65/67 
  Verifying        : perl-Fcntl-1.13-481.el9.x86_64                                    66/67 
  Verifying        : perl-subs-1.03-481.el9.noarch                                     67/67 
Installed products updated.

Installed:
  httpd-filesystem-2.4.57-8.el9.noarch          libecap-1.0.1-10.el9.x86_64                 
  libtool-ltdl-2.4.6-45.el9.x86_64              perl-AutoLoader-5.74-481.el9.noarch         
  perl-B-1.80-481.el9.x86_64                    perl-Carp-1.50-460.el9.noarch               
  perl-Class-Struct-0.66-481.el9.noarch         perl-DBI-1.643-9.el9.x86_64                 
  perl-Data-Dumper-2.174-462.el9.x86_64         perl-Digest-1.19-4.el9.noarch               
  perl-Digest-MD5-2.58-4.el9.x86_64             perl-Digest-SHA-1:6.02-461.el9.x86_64       
  perl-DynaLoader-1.47-481.el9.x86_64           perl-Encode-4:3.08-462.el9.x86_64           
  perl-English-1.11-481.el9.noarch              perl-Errno-1.30-481.el9.x86_64              
  perl-Exporter-5.74-461.el9.noarch             perl-Fcntl-1.13-481.el9.x86_64              
  perl-File-Basename-2.85-481.el9.noarch        perl-File-Path-2.18-4.el9.noarch            
  perl-File-Temp-1:0.231.100-4.el9.noarch       perl-File-stat-1.09-481.el9.noarch          
  perl-FileHandle-2.03-481.el9.noarch           perl-Getopt-Long-1:2.52-4.el9.noarch        
  perl-Getopt-Std-1.12-481.el9.noarch           perl-HTTP-Tiny-0.076-462.el9.noarch         
  perl-IO-1.43-481.el9.x86_64                   perl-IO-Socket-IP-0.41-5.el9.noarch         
  perl-IO-Socket-SSL-2.073-1.el9.noarch         perl-IPC-Open3-1.21-481.el9.noarch          
  perl-MIME-Base64-3.16-4.el9.x86_64            perl-Math-BigInt-1:1.9998.18-460.el9.noarch 
  perl-Math-Complex-1.59-481.el9.noarch         perl-Mozilla-CA-20200520-6.el9.noarch       
  perl-NDBM_File-1.15-481.el9.x86_64            perl-Net-SSLeay-1.92-2.el9.x86_64           
  perl-POSIX-1.94-481.el9.x86_64                perl-PathTools-3.78-461.el9.x86_64          
  perl-Pod-Escapes-1:1.07-460.el9.noarch        perl-Pod-Perldoc-3.28.01-461.el9.noarch     
  perl-Pod-Simple-1:3.42-4.el9.noarch           perl-Pod-Usage-4:2.01-4.el9.noarch          
  perl-Scalar-List-Utils-4:1.56-461.el9.x86_64  perl-SelectSaver-1.02-481.el9.noarch        
  perl-Socket-4:2.031-4.el9.x86_64              perl-Storable-1:3.21-460.el9.x86_64         
  perl-Symbol-1.08-481.el9.noarch               perl-Term-ANSIColor-5.01-461.el9.noarch     
  perl-Term-Cap-1.17-460.el9.noarch             perl-Text-ParseWords-3.30-460.el9.noarch    
  perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch  perl-Time-Local-2:1.300-7.el9.noarch        
  perl-URI-5.09-3.el9.noarch                    perl-base-2.27-481.el9.noarch               
  perl-constant-1.33-461.el9.noarch             perl-if-0.60.800-481.el9.noarch             
  perl-interpreter-4:5.32.1-481.el9.x86_64      perl-libnet-3.13-4.el9.noarch               
  perl-libs-4:5.32.1-481.el9.x86_64             perl-mro-1.23-481.el9.x86_64                
  perl-overload-1.31-481.el9.noarch             perl-overloading-0.02-481.el9.noarch        
  perl-parent-1:0.238-460.el9.noarch            perl-podlators-1:4.14-460.el9.noarch        
  perl-subs-1.03-481.el9.noarch                 perl-vars-1.05-481.el9.noarch               
  squid-7:5.5-12.el9_4.x86_64                  

Complete!
```

Squidを設定していきますが、こちらも検証用なのでガバガバの設定です。ご容赦くださいませ。
```diff_shell
[root@ip-10-0-100-246 ~]# cat /etc/squid/squid.conf
#
# Recommended minimum configuration:
#

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 0.0.0.1-0.255.255.255	# RFC 1122 "this" network (LAN)
acl localnet src 10.0.0.0/8		# RFC 1918 local private network (LAN)
acl localnet src 100.64.0.0/10		# RFC 6598 shared address space (CGN)
acl localnet src 169.254.0.0/16 	# RFC 3927 link-local (directly plugged) machines
acl localnet src 172.16.0.0/12		# RFC 1918 local private network (LAN)
acl localnet src 192.168.0.0/16		# RFC 1918 local private network (LAN)
acl localnet src fc00::/7       	# RFC 4193 local private network range
acl localnet src fe80::/10      	# RFC 4291 link-local (directly plugged) machines

+ acl all src 0.0.0.0/0

acl SSL_ports port 443
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http

#
# Recommended minimum Access Permission configuration:
#
# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# Only allow cachemgr access from localhost
http_access allow localhost manager
http_access deny manager
+ http_access allow all

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#

# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
- http_port 3128
+ http_port 8080

# Uncomment and adjust the following to add a disk cache directory.
#cache_dir ufs /var/spool/squid 100 16 256

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

+ cache_log /var/log/squid/cache.log
+ access_log /var/log/squid/access.log
+ cache_store_log /var/log/squid/store.log

#
# Add any of your own refresh_pattern entries above these.
#
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
refresh_pattern .		0	20%	4320
[root@ip-10-0-100-246 ~]# 
```

設定したらSquidを再起動
```
[root@ip-10-0-100-246 squid]# systemctl start squid
[root@ip-10-0-100-246 squid]# systemctl status squid
● squid.service - Squid caching proxy
     Loaded: loaded (/usr/lib/systemd/system/squid.service; disabled; preset: disabled)
     Active: active (running) since Sat 2024-06-29 11:44:03 UTC; 4s ago
       Docs: man:squid(8)
    Process: 27936 ExecStartPre=/usr/libexec/squid/cache_swap.sh (code=exited, status=0/SUCC>
   Main PID: 27938 (squid)
      Tasks: 2 (limit: 4400)
     Memory: 14.3M
        CPU: 116ms
     CGroup: /system.slice/squid.service
             ├─27938 /usr/sbin/squid --foreground -f /etc/squid/squid.conf
             └─27940 "(squid-1)" --kid squid-1 --foreground -f /etc/squid/squid.conf

Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal systemd[1]: Starting Squid c>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: Squid Parent: >
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: Squid Parent: >
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal systemd[1]: Started Squid ca>
[root@ip-10-0-100-246 squid]# systemctl enable squid
Created symlink /etc/systemd/system/multi-user.target.wants/squid.service → /usr/lib/systemd/system/squid.service.
[root@ip-10-0-100-246 squid]# 
[root@ip-10-0-100-246 squid]# 
[root@ip-10-0-100-246 squid]# systemctl status squid
● squid.service - Squid caching proxy
     Loaded: loaded (/usr/lib/systemd/system/squid.service; enabled; preset: disabled)
     Active: active (running) since Sat 2024-06-29 11:44:03 UTC; 13s ago
       Docs: man:squid(8)
   Main PID: 27938 (squid)
      Tasks: 2 (limit: 4400)
     Memory: 14.3M
        CPU: 117ms
     CGroup: /system.slice/squid.service
             ├─27938 /usr/sbin/squid --foreground -f /etc/squid/squid.conf
             └─27940 "(squid-1)" --kid squid-1 --foreground -f /etc/squid/squid.conf

Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal systemd[1]: Starting Squid c>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: 2024/06/29 11:>
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: Squid Parent: >
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal squid[27938]: Squid Parent: >
Jun 29 11:44:03 ip-10-0-100-246.ap-northeast-1.compute.internal systemd[1]: Started Squid ca>
[root@ip-10-0-100-246 squid]# 
[root@ip-10-0-100-246 squid]# ss -nlpt | grep 8080
LISTEN 0      4096               *:8080            *:*    users:(("squid",pid=27940,fd=11))
[root@ip-10-0-100-246 squid]#
```

次にWebサーバ側に入って、dnfリポジトリにアクセスできるようにしていきます。
dnfの設定ファイルにプロキシの設定を追加します。
プロキシサーバのIPアドレスと待ち受けているポートを指定。
```diff_shell
[root@ip-10-0-0-158 ~]# cat /etc/dnf/dnf.conf 
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

+ proxy=http://10.0.100.246:8080
```

dnfアップデートできるか確認
```
[root@ip-10-0-0-158 ~]# dnf -y update
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register.

Red Hat Enterprise Linux 9 for x86_64 - AppStream from RHUI   47 MB/s |  36 MB     00:00    
Red Hat Enterprise Linux 9 for x86_64 - BaseOS from RHUI (RP  50 MB/s |  25 MB     00:00    
Red Hat Enterprise Linux 9 Client Configuration               30 kB/s | 3.0 kB     00:00    
Dependencies resolved.
=============================================================================================
 Package                    Arch   Version                 Repository                   Size
=============================================================================================
Installing:
 kernel                     x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms     5.5 M
 kernel-core                x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms      20 M
 kernel-modules             x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms      39 M
 kernel-modules-core        x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms      33 M
Upgrading:
 kernel-tools               x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms     5.7 M
 kernel-tools-libs          x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms     5.5 M
 python-unversioned-command noarch 3.9.18-3.el9_4.1        rhel-9-appstream-rhui-rpms   10 k
 python3                    x86_64 3.9.18-3.el9_4.1        rhel-9-baseos-rhui-rpms      29 k
 python3-libs               x86_64 3.9.18-3.el9_4.1        rhel-9-baseos-rhui-rpms     7.8 M
 python3-perf               x86_64 5.14.0-427.22.1.el9_4   rhel-9-baseos-rhui-rpms     5.6 M
 rh-amazon-rhui-client      noarch 4.0.19-1.el9            rhui-client-config-server-9  46 k
 selinux-policy             noarch 38.1.35-2.el9_4.2       rhel-9-baseos-rhui-rpms      53 k
 selinux-policy-targeted    noarch 38.1.35-2.el9_4.2       rhel-9-baseos-rhui-rpms     6.9 M
 shim-x64                   x86_64 15.8-4.el9_3            rhel-9-baseos-rhui-rpms     476 k

Transaction Summary
=============================================================================================
Install   4 Packages
Upgrade  10 Packages

Total download size: 130 M
Downloading Packages:
(1/14): kernel-5.14.0-427.22.1.el9_4.x86_64.rpm               26 MB/s | 5.5 MB     00:00    
(2/14): kernel-core-5.14.0-427.22.1.el9_4.x86_64.rpm          37 MB/s |  20 MB     00:00    
(3/14): python-unversioned-command-3.9.18-3.el9_4.1.noarch.r 679 kB/s |  10 kB     00:00    
(4/14): shim-x64-15.8-4.el9_3.x86_64.rpm                      19 MB/s | 476 kB     00:00    
(5/14): selinux-policy-38.1.35-2.el9_4.2.noarch.rpm          4.0 MB/s |  53 kB     00:00    
(6/14): selinux-policy-targeted-38.1.35-2.el9_4.2.noarch.rpm  31 MB/s | 6.9 MB     00:00    
(7/14): kernel-tools-5.14.0-427.22.1.el9_4.x86_64.rpm         37 MB/s | 5.7 MB     00:00    
(8/14): kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64.rpm    38 MB/s | 5.5 MB     00:00    
(9/14): kernel-modules-5.14.0-427.22.1.el9_4.x86_64.rpm       29 MB/s |  39 MB     00:01    
(10/14): python3-3.9.18-3.el9_4.1.x86_64.rpm                 2.4 MB/s |  29 kB     00:00    
(11/14): kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64.rp  25 MB/s |  33 MB     00:01    
(12/14): rh-amazon-rhui-client-4.0.19-1.el9.noarch.rpm       1.1 MB/s |  46 kB     00:00    
(13/14): python3-perf-5.14.0-427.22.1.el9_4.x86_64.rpm        11 MB/s | 5.6 MB     00:00    
(14/14): python3-libs-3.9.18-3.el9_4.1.x86_64.rpm             20 MB/s | 7.8 MB     00:00    
---------------------------------------------------------------------------------------------
Total                                                         71 MB/s | 130 MB     00:01     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                    1/1 
  Preparing        :                                                                     1/1 
  Installing       : kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                   1/24 
  Installing       : kernel-core-5.14.0-427.22.1.el9_4.x86_64                           2/24 
  Running scriptlet: kernel-core-5.14.0-427.22.1.el9_4.x86_64                           2/24 
  Installing       : kernel-modules-5.14.0-427.22.1.el9_4.x86_64                        3/24 
  Running scriptlet: kernel-modules-5.14.0-427.22.1.el9_4.x86_64                        3/24 
  Upgrading        : selinux-policy-38.1.35-2.el9_4.2.noarch                            4/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.2.noarch                            4/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                   5/24 
  Upgrading        : selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                   5/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                   5/24 
  Upgrading        : python3-libs-3.9.18-3.el9_4.1.x86_64                               6/24 
  Upgrading        : python3-3.9.18-3.el9_4.1.x86_64                                    7/24 
  Upgrading        : python-unversioned-command-3.9.18-3.el9_4.1.noarch                 8/24 
  Upgrading        : kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                     9/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                     9/24 
  Upgrading        : kernel-tools-5.14.0-427.22.1.el9_4.x86_64                         10/24 
  Running scriptlet: kernel-tools-5.14.0-427.22.1.el9_4.x86_64                         10/24 
  Upgrading        : python3-perf-5.14.0-427.22.1.el9_4.x86_64                         11/24 
  Upgrading        : rh-amazon-rhui-client-4.0.19-1.el9.noarch                         12/24 
warning: /etc/yum.repos.d/redhat-rhui.repo saved as /etc/yum.repos.d/redhat-rhui.repo.rpmsave

  Running scriptlet: rh-amazon-rhui-client-4.0.19-1.el9.noarch                         12/24 
[INFO:choose_repo] choose_repo:33 2024-06-29 11:58:50,028: Enabling binary repos in redhat-rhui.repo
[INFO:choose_repo] choose_repo:56 2024-06-29 11:58:50,029: Enabling client config repo
[INFO:choose_repo] choose_repo:64 2024-06-29 11:58:50,030: Executing [sed -i 's/enabled=0/enabled=1/' /etc/yum.repos.d/redhat-rhui-client-config.repo]

  Installing       : kernel-5.14.0-427.22.1.el9_4.x86_64                               13/24 
  Upgrading        : shim-x64-15.8-4.el9_3.x86_64                                      14/24 
  Running scriptlet: rh-amazon-rhui-client-4.0.18-1.el9.noarch                         15/24 
  Cleanup          : rh-amazon-rhui-client-4.0.18-1.el9.noarch                         15/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.noarch                             16/24 
  Cleanup          : selinux-policy-38.1.35-2.el9_4.noarch                             16/24 
  Running scriptlet: selinux-policy-38.1.35-2.el9_4.noarch                             16/24 
  Cleanup          : selinux-policy-targeted-38.1.35-2.el9_4.noarch                    17/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.noarch                    17/24 
  Cleanup          : shim-x64-15.8-3.el9_4.x86_64                                      18/24 
  Running scriptlet: kernel-tools-5.14.0-427.20.1.el9_4.x86_64                         19/24 
  Cleanup          : kernel-tools-5.14.0-427.20.1.el9_4.x86_64                         19/24 
  Running scriptlet: kernel-tools-5.14.0-427.20.1.el9_4.x86_64                         19/24 
  Cleanup          : python3-perf-5.14.0-427.20.1.el9_4.x86_64                         20/24 
  Cleanup          : python3-3.9.18-3.el9.x86_64                                       21/24 
  Cleanup          : python-unversioned-command-3.9.18-3.el9.noarch                    22/24 
  Cleanup          : python3-libs-3.9.18-3.el9.x86_64                                  23/24 
  Cleanup          : kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    24/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    24/24 
  Running scriptlet: kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                  24/24 
  Running scriptlet: kernel-core-5.14.0-427.22.1.el9_4.x86_64                          24/24 
  Running scriptlet: kernel-modules-5.14.0-427.22.1.el9_4.x86_64                       24/24 
  Running scriptlet: selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                  24/24 
  Running scriptlet: kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    24/24 
  Verifying        : kernel-5.14.0-427.22.1.el9_4.x86_64                                1/24 
  Verifying        : kernel-core-5.14.0-427.22.1.el9_4.x86_64                           2/24 
  Verifying        : kernel-modules-5.14.0-427.22.1.el9_4.x86_64                        3/24 
  Verifying        : kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                   4/24 
  Verifying        : python-unversioned-command-3.9.18-3.el9_4.1.noarch                 5/24 
  Verifying        : python-unversioned-command-3.9.18-3.el9.noarch                     6/24 
  Verifying        : shim-x64-15.8-4.el9_3.x86_64                                       7/24 
  Verifying        : shim-x64-15.8-3.el9_4.x86_64                                       8/24 
  Verifying        : selinux-policy-38.1.35-2.el9_4.2.noarch                            9/24 
  Verifying        : selinux-policy-38.1.35-2.el9_4.noarch                             10/24 
  Verifying        : selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                  11/24 
  Verifying        : selinux-policy-targeted-38.1.35-2.el9_4.noarch                    12/24 
  Verifying        : kernel-tools-5.14.0-427.22.1.el9_4.x86_64                         13/24 
  Verifying        : kernel-tools-5.14.0-427.20.1.el9_4.x86_64                         14/24 
  Verifying        : kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                    15/24 
  Verifying        : kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64                    16/24 
  Verifying        : python3-perf-5.14.0-427.22.1.el9_4.x86_64                         17/24 
  Verifying        : python3-perf-5.14.0-427.20.1.el9_4.x86_64                         18/24 
  Verifying        : python3-3.9.18-3.el9_4.1.x86_64                                   19/24 
  Verifying        : python3-3.9.18-3.el9.x86_64                                       20/24 
  Verifying        : python3-libs-3.9.18-3.el9_4.1.x86_64                              21/24 
  Verifying        : python3-libs-3.9.18-3.el9.x86_64                                  22/24 
  Verifying        : rh-amazon-rhui-client-4.0.19-1.el9.noarch                         23/24 
  Verifying        : rh-amazon-rhui-client-4.0.18-1.el9.noarch                         24/24 
Installed products updated.

Upgraded:
  kernel-tools-5.14.0-427.22.1.el9_4.x86_64                                                  
  kernel-tools-libs-5.14.0-427.22.1.el9_4.x86_64                                             
  python-unversioned-command-3.9.18-3.el9_4.1.noarch                                         
  python3-3.9.18-3.el9_4.1.x86_64                                                            
  python3-libs-3.9.18-3.el9_4.1.x86_64                                                       
  python3-perf-5.14.0-427.22.1.el9_4.x86_64                                                  
  rh-amazon-rhui-client-4.0.19-1.el9.noarch                                                  
  selinux-policy-38.1.35-2.el9_4.2.noarch                                                    
  selinux-policy-targeted-38.1.35-2.el9_4.2.noarch                                           
  shim-x64-15.8-4.el9_3.x86_64                                                               
Installed:
  kernel-5.14.0-427.22.1.el9_4.x86_64                                                        
  kernel-core-5.14.0-427.22.1.el9_4.x86_64                                                   
  kernel-modules-5.14.0-427.22.1.el9_4.x86_64                                                
  kernel-modules-core-5.14.0-427.22.1.el9_4.x86_64                                           

Complete!
```

アップデートできましたね。
最後に、プロキシサーバ側でのログを確認します。
RHELのリポジトリに向けてGETしに行っているので目的は達成ですね。
お疲れ様でした！
```[root@ip-10-0-100-246 squid]# head -20 access.log 
1719662152.629     90 10.0.0.158 TCP_MISS/200 21662 GET http://www.google.co.jp/ - HIER_DIRECT/142.251.42.195 text/html
1719662262.343     48 10.0.0.158 TCP_TUNNEL/200 3251 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662262.377     33 10.0.0.158 TCP_TUNNEL/200 7843 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662263.074    694 10.0.0.158 TCP_TUNNEL/200 5831024 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662263.074    695 10.0.0.158 TCP_TUNNEL/200 29949211 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662263.075    694 10.0.0.158 TCP_TUNNEL/200 2488641 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662271.530     25 10.0.0.158 TCP_TUNNEL/200 3248 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662271.565     33 10.0.0.158 TCP_TUNNEL/200 7380 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662271.991    423 10.0.0.158 TCP_TUNNEL/200 20744366 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662271.991    423 10.0.0.158 TCP_TUNNEL/200 4086815 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662271.991    423 10.0.0.158 TCP_TUNNEL/200 981277 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662276.326     25 10.0.0.158 TCP_TUNNEL/200 3258 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662276.355     28 10.0.0.158 TCP_TUNNEL/200 4772 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662276.400     44 10.0.0.158 TCP_TUNNEL/200 5309 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662276.401     44 10.0.0.158 TCP_TUNNEL/200 4227 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662278.185     25 10.0.0.158 TCP_TUNNEL/200 3248 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662278.211     24 10.0.0.158 TCP_TUNNEL/200 3251 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662278.236     23 10.0.0.158 TCP_TUNNEL/200 3258 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662280.001   1763 10.0.0.158 TCP_TUNNEL/200 40783943 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
1719662280.001   1763 10.0.0.158 TCP_TUNNEL/200 46820813 CONNECT rhui.ap-northeast-1.aws.ce.redhat.com:443 - HIER_DIRECT/3.115.250.18 -
[root@ip-10-0-100-246 squid]# 


```