[squid-users] ACL dst handled differently in intercept after rewrite

2017-02-14 Thread Craig Gowing
Hi all, I've got a squid server running which allows direct proxy and also can intercept traffic: http_port 10.0.0.1:3128 http_port 10.0.0.1:3129 intercept --- There is a URL rewriter which allows the incoming requests (this is just an example, I don't really allow all): url_rewrite_access all

Re: [squid-users] Reverse proxy for HTTPS cloudfront server

2017-02-14 Thread Craig Gowing
From what I can tell the SNI is not added for cache peers. In Ssl::PeerConnector::initializeSsl if "peer" is set then the call to Ssl::setClientSNI is skipped. Also the SSL context doesn't have the hostname or a callback set, and sslCreateClientContext doesn't appear to be able to set it either. I