Hello,
Here are some excerpts of what I've used, and an example Python helper:
https_port 60099 intercept ssl-bump tcpkeepalive
cert=/path/to/cert.pem key=/path/to/key.pem options=NO_SSLv2,NO_SSLv3
generate-host-certificates=on
external_acl_type sni ttl=30 concurrency=X children-max=Y
children-s
On Mon, 2015-06-01 at 13:00 +1200, Amos Jeffries wrote:
> On 1/06/2015 11:56 a.m., James Lay wrote:
> > So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy
> > even with intercept, ssl-bumping with access control is a little more
> > difficult...jump to the config to skip the chi
No luck
Still not getting result at all I think the issue could be with my Mikrotik
box
# Marking packets with DSCP (for Mikrotik 6.x) for cache hit content coming
from SQUID Proxy
/ip firewall mangle
add action=mark-packet chain=prerouting disabled=no dscp=12
new-packet-mark=squid-connection
On 1/06/2015 11:56 a.m., James Lay wrote:
> So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy
> even with intercept, ssl-bumping with access control is a little more
> difficult...jump to the config to skip the chit chat.
>
> My goal has always been to a content filter based on
Thanks Amos
I will try it.
Rgds
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/TOS-squid-3-5-0-4-tp4671459p4671465.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
On 1/06/2015 11:35 a.m., Marcel Fossua wrote:
> HI Amos thanks for your reply I just upgrade to 3.5.5 but compiling from
> source to get --enable-ecap
> but I can't figure out what you means exactly concerning the TOS part
> did you means what I set is ok or not?
>
> qos_flows tos
The above line d
So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy
even with intercept, ssl-bumping with access control is a little more
difficult...jump to the config to skip the chit chat.
My goal has always been to a content filter based on url regex. This
works just fine for http traffic,
On 31/05/2015 10:24 a.m., James Lay wrote:
> On Sun, 2015-05-31 at 08:45 +1200, Amos Jeffries wrote:
>
>> On 31/05/2015 4:48 a.m., James Lay wrote:
>>> Per the docs:
>>>
>>> # Conditional configuration
>>> #
>>> # If-statements can be used to make configuration directives
>>> # depend
HI Amos thanks for your reply I just upgrade to 3.5.5 but compiling from
source to get --enable-ecap
but I can't figure out what you means exactly concerning the TOS part
did you means what I set is ok or not?
qos_flows tos
qos_flows local-hit=0x30
qos_flows parent-hit=0x32
qos_flows disable-preser
On 31/05/2015 11:38 p.m., Marcel Fossua wrote:
> Hi All
> let see if some of you can help me troubleshoot the issue I have with
> squid-3.5.0.4
Please upgrade. 3.5.5 was released the other day, and Eliezer has new
CentOS 6/7 packages available already.
> on centos 6.6 configure with tproxy
> in f
Hi All
let see if some of you can help me troubleshoot the issue I have with
squid-3.5.0.4
on centos 6.6 configure with tproxy
in fact the issue is relate to qos stuff i just set things according to
manual
qos_flows tos local-hit=0x30
qos_flows mark local-hit=0x30
qos_flows tos sibling-hit=0x31
q
11 matches
Mail list logo
