Re: [squid-users] icap result caching in squid

2019-12-05 Thread Darren Breeze
Hi Amos I have done some digging into your suggestion, and it looks like a better way to go for what I need to do. > Also, are you aware that current Squid versions can generate redirects > (custom headers included) based on output from an external_acl_type helper? > A helper to lookup your per

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Vieri Di Paola
On Thu, Dec 5, 2019 at 11:48 AM Amos Jeffries wrote: > > external_acl_type location_rewriter % acl bad_Location external location_rewriter > > deny_info 302:%note{location-rewrite} bad_Location > acl 302 http_status 302 > http_reply_access deny 302 bad_Location I just read something abo

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Vieri Di Paola
On Thu, Dec 5, 2019 at 11:48 AM Amos Jeffries wrote: > > external_acl_type location_rewriter % acl bad_Location external location_rewriter > > deny_info 302:%note{location-rewrite} bad_Location > acl 302 http_status 302 > http_reply_access deny 302 bad_Location Sorry to bother you again

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Amos Jeffries
On 6/12/19 1:41 am, Vieri Di Paola wrote: > By the way, if I were to upgrade to Squid 4, would the following do the trick? > > reply_header_add Strict-Transport-Security "max-age=31536000; > includeSubDomains; preload" all > Doubtful, but if you want to test it start with a very *small* max-age

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Vieri Di Paola
By the way, if I were to upgrade to Squid 4, would the following do the trick? reply_header_add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" all ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid

Re: [squid-users] Squid caching broken responses

2019-12-05 Thread Amos Jeffries
On 6/12/19 12:23 am, tomsl wrote: >> Please upgrade. Current Squid-4 release is 4.9 and there are quite a few >> very major security issues and bugs resolved since 4.2. Some of which >> are related to cache corruption. > > I have tried using squid 4.9, however am having an issue with the url > rew

Re: [squid-users] Squid caching broken responses

2019-12-05 Thread tomsl
>Please upgrade. Current Squid-4 release is 4.9 and there are quite a few >very major security issues and bugs resolved since 4.2. Some of which >are related to cache corruption. I have tried using squid 4.9, however am having an issue with the url rewriter I am using to translate the urls into ra

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Vieri Di Paola
On Thu, Dec 5, 2019 at 11:48 AM Amos Jeffries wrote: > > Alternative to his would be an eCAP module that just re-writes the > Location headers in place. That would be simpler, but requires some > coding to create the module. Simpler, I like how that sounds... I presume a good starting point would

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Amos Jeffries
On 5/12/19 11:17 pm, Vieri Di Paola wrote: > I could try to use a redirector with location_rewrite_program, but > this directive is not available anymore. > I presume I need to use url_rewrite_program instead. No, that only re-writes the client requested URLs. You can try using a rewriter on the

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-05 Thread Vieri Di Paola
I could try to use a redirector with location_rewrite_program, but this directive is not available anymore. I presume I need to use url_rewrite_program instead. I wonder if it will rewrite the "Location" header the origin server is sending to the client browser. Vieri _

Re: [squid-users] TCP_TUNNEL

2019-12-05 Thread Amos Jeffries
On 5/12/19 10:13 pm, Kassir Bariq wrote: > Hi Awesome Squid Users 😊 > > I’m using Squid transparent proxy on AWS. I’m having a small problem, > but I don’t really know what is happening! > >   > > From an EC2 in Private Subnet I’m making a request to AWS Endpoints > using 443, and the request is

[squid-users] TCP_TUNNEL

2019-12-05 Thread Kassir Bariq
Hi Awesome Squid Users 😊 I’m using Squid transparent proxy on AWS. I’m having a small problem, but I don’t really know what is happening! From an EC2 in Private Subnet I’m making a request to AWS Endpoints using 443, and the request is going via Squid and says Connected, but unfortunately it is

Re: [squid-users] ACL reply_header_access

2019-12-05 Thread Amos Jeffries
On 5/12/19 1:29 pm, creditu wrote: > We have been using several squid servers in accelerator mode for a number of > years mainly for load balancing to send public requests to backend servers. > The requests to the squids typically come via a well known commercial > caching service. The squid

Re: [squid-users] unable to open http socket

2019-12-05 Thread Amos Jeffries
On 5/12/19 1:17 am, yannick.rousseau wrote: > Hi everybody, > > I'm using debianedu (stretch) with squid 3.5.  > I would like to configure my squid through a parent proxy > (172.16.103.254:3128). > I give you my issues at the beginning of this post, and my squid config > at the end. > > -> When I