Re: [squid-users] Squid test-suite / benchmarks

2018-06-07 Thread Panagiotis Bariamis
n Thu, Jun 7, 2018 at 1:54 PM, Amos Jeffries wrote: > On 07/06/18 22:24, Panagiotis Bariamis wrote: > > Hello, > > I just finished a same project . Only platform that worked well with > > most configurations of Squid is Web Polygraph. > > > > > >

Re: [squid-users] Squid test-suite / benchmarks

2018-06-07 Thread Panagiotis Bariamis
Hello, I just finished a same project . Only platform that worked well with most configurations of Squid is Web Polygraph. On Thu, Jun 7, 2018, 13:17 Stoica Bogdan Alexandru wrote: > Hi all, > > > > We’re a small research team interested in benchmarking Squid for a > research project. > > Ideal

Re: [squid-users] Auth bearer support for forward proxy

2018-05-20 Thread Panagiotis Bariamis
On Sun, May 20, 2018 at 12:04 AM, Amos Jeffries wrote: > On 18/05/18 04:32, Panagiotis Bariamis wrote: > >> Hello , > >> Only thing I have found concerning the subject is this 4 years old > thread : > >> > >>>From: Amos Jeffries > >>&g

[squid-users] Auth bearer support for forward proxy

2018-05-17 Thread Panagiotis Bariamis
Hello , Only thing I have found concerning the subject is this 4 years old thread : >From: Amos Jeffries >Date: Sun, 08 Jun 2014 14:46:09 +1200 >Message-ID: <5393ce71.5070...@treenet.co.nz> >To: "ietf-http...@w3.org" >I have implemented Bearer authentication support in Squid and have found >a n

[squid-users] Kerberos Heimdal Server Authentication

2018-05-09 Thread Panagiotis Bariamis
Hello my setup is as follows : Freebsd 11 Heimdal Kerberos Server and DNS properly configured (testlab enviroment for example.com domain) Freebsd 11 squid proxy server Windows Client I have created a keytab from the Kerberos Server for http/squid.example.com Proxy server machine has no problem ki

Re: [squid-users] Kerberos authentication on mobile phones

2018-05-08 Thread Panagiotis Bariamis
On Tue, May 8, 2018 at 9:03 AM, Amos Jeffries wrote: > On 08/05/18 10:22, Panagiotis Bariamis wrote: > > > > >> A second question. If a non domain joined machine tries to use the proxy > >> will there be a username password prompt where if correct credentials >

[squid-users] Kerberos authentication on mobile phones

2018-05-07 Thread Panagiotis Bariamis
Hello, Is it possible with a squid kerberos only authentication setup be able to authenticate ie android phones to squid? A second question. If a non domain joined machine tries to use the proxy will there be a username password prompt where if correct credentials are presented he will be able to

[squid-users] SSL accelerator

2018-04-30 Thread Panagiotis Bariamis
Hello , Has anyone used ssl accelerators cards for squid under FreeBSD ? I want mostly to offload processors of ssl bump . ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Client to proxy encryption for Internet Explorer

2018-04-22 Thread Panagiotis Bariamis
ing to need to authenticate again . Unfortunately src ip tagging cannot be performed as all clients are behind NAT. On Sun, Apr 22, 2018 at 3:32 PM, Amos Jeffries wrote: > On 22/04/18 22:52, Panagiotis Bariamis wrote: > >>LDAP is a database type, it is not specifically tied to the t

Re: [squid-users] Client to proxy encryption for Internet Explorer

2018-04-22 Thread Panagiotis Bariamis
the traffic based on url . On Sat, Apr 21, 2018 at 12:19 AM, Amos Jeffries wrote: > On 21/04/18 06:55, Panagiotis Bariamis wrote: > >>"credentials" does not necessarily mean passwords. > > > >>TLS also sends credentials in clear. It just happens those cred

Re: [squid-users] Client to proxy encryption for Internet Explorer

2018-04-20 Thread Panagiotis Bariamis
to credentials I mean basic ldap authentication for squid servers. Those are sent in plain text (well base64) in every request. So my concern is the client to proxy encryption so as to protect those credentials. On Fri, Apr 20, 2018 at 9:48 PM, Amos Jeffries wrote: > On 21/04/18 06:40,

Re: [squid-users] Client to proxy encryption for Internet Explorer

2018-04-20 Thread Panagiotis Bariamis
edentials sent over clear text to proxies . Thank you for the clarifications. On Fri, Apr 20, 2018 at 9:25 PM, Amos Jeffries wrote: > On 21/04/18 05:53, Panagiotis Bariamis wrote: > > Hello , > > I have managed to set up a forward Secure squid proxy (tls) . > > Although

[squid-users] Client to proxy encryption for Internet Explorer

2018-04-20 Thread Panagiotis Bariamis
Hello , I have managed to set up a forward Secure squid proxy (tls) . Although Mozzila (through a pac file with "RETURN HTTPS x.y.z:443) and chrome (with command line argument "--proxy-server="https://x.y.z"; ) work OK with the squid proxy , Internet Explorer seems as if doesn't support that functi

Re: [squid-users] Secure Web Proxy Stress Testing

2018-04-14 Thread Panagiotis Bariamis
Thank you , Bariamis Panagiotis On Tue, Apr 10, 2018 at 10:14 PM, Panagiotis Bariamis wrote: > Thank you for the clarification. > > On Tue, Apr 10, 2018, 21:11 Alex Rousskov com> wrote: > >> >> >> >Polygraph supports HTTPS proxies and HTTPS servers.

Re: [squid-users] Secure Web Proxy Stress Testing

2018-04-10 Thread Panagiotis Bariamis
Thank you for the clarification. On Tue, Apr 10, 2018, 21:11 Alex Rousskov wrote: > On 04/10/2018 11:24 AM, Panagiotis Bariamis wrote: > > Thank you for your answer but as far as I can understand this setup is > > for a regular proxy that just proxies https protocol wi

Re: [squid-users] Secure Web Proxy Stress Testing

2018-04-10 Thread Panagiotis Bariamis
you have an http connect request inside a tls tunnel. On Tue, Apr 10, 2018, 17:22 Alex Rousskov wrote: > On 04/10/2018 06:31 AM, Panagiotis Bariamis wrote: > > Is there any stress testing tool to test with a load of 1k to 5k > > simultaneous connections ? > > Web Polygraph (

[squid-users] Secure Web Proxy Stress Testing

2018-04-10 Thread Panagiotis Bariamis
Hello , I am trying to stress test a squid proxy (Secure Web Proxy , meaning that client to proxy connection is encrypted ) . I tried with Jmeter but it does not support Secure Web Proxy . To make thing clear I use squid with option https_port and clients get the config from a pac file that states