Re: [squid-users] Behavior of Squid with SSL Bump and server persistent connections

2018-07-05 Thread Alex Rousskov
On 07/05/2018 12:49 PM, Vishali Somaskanthan wrote: > PFA - pcap and cachelog. Comments appreciated.  > Curl timings: > /lookup:        0.062/ > /connect:       0.062/ > /appconnect:    0.081/ > /pretransfer:   0.081/ > /redirect:      0.000/ > /starttransfer: 35.193/ > /total:         35.245/ As

Re: [squid-users] Behavior of Squid with SSL Bump and server persistent connections

2018-07-03 Thread Alex Rousskov
On 07/03/2018 12:02 PM, Vishali Somaskanthan wrote: > Consider C1 and S1 connections were created for a HTTPs connection > using ssl-bump. C1 has been served and closed from the client side. Please note that C1/S1 could serve many requests before C1 got closed. However, let's focus on the cross-c

Re: [squid-users] Behavior of Squid with SSL Bump and server persistent connections

2018-07-03 Thread Vishali Somaskanthan
*Thanks for the quick reply. I want to explain my question further.* *Consider C1 and S1 connections were created for a HTTPs connection using ssl-bump. C1 has been served and closed from the client side.* *Now, the client initiates another HTTPS connection, C2. Since, persistent connection is en

Re: [squid-users] Behavior of Squid with SSL Bump and server persistent connections

2018-07-02 Thread Alex Rousskov
On 07/02/2018 05:34 PM, Vishali Somaskanthan wrote: > I am trying out SSL Bump for my connections from Squid to server and > trying to put along server persistent connections as well. I would like > to know how squid behaves with both of these turned on?? In modern Squids, all(*) bumped SSL clien

[squid-users] Behavior of Squid with SSL Bump and server persistent connections

2018-07-02 Thread Vishali Somaskanthan
Hello all, I am trying out SSL Bump for my connections from Squid to server and trying to put along server persistent connections as well. I would like to know how squid behaves with both of these turned on?? I see info in the squid wiki page that SSL Bump creates fake CONNECT requests and Peeking