Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-21 Thread Amos Jeffries
On 20/06/21 6:55 pm, Frida Safran wrote: As far as I understand the ecap service should be called for each step: * In step1 there is no SNI, and X-PMeta-Splice should be set in the ecap to 'no'. * In step2 there should be an SNI, and X-PMeta-Splice should be set to 'yes', and the cla

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-20 Thread Frida Safran
2021 18:41 To: Frida Safran ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Passing Proxy Protocol Headers to external ACL On 6/17/21 1:55 AM, Frida Safran wrote: > I see that the issue stems from that the %ssl::sni is not getting passed > correctly (evaluated as "-&quo

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-17 Thread Alex Rousskov
> *From:* Alex Rousskov > *Sent:* Wednesday, June 16, 2021 17:38 > *To:* Frida Safran ; > squid-users@lists.squid-cache.org > *Subject:* Re: [squid-users] Passing Proxy Protocol Headers to external ACL >   > On 6/16/21 4:15 AM, Frida Safran wrote: > >> I see that th

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-17 Thread Frida Safran
ss "%adapt:: > *From:* Alex Rousskov > *Sent:* Tuesday, June 15, 2021 21:35 > *To:* Frida Safran ; > squid-users@lists.squid-cache.org > *Subject:* Re: [squid-users] Passing Proxy Protocol Headers to exte

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-16 Thread Alex Rousskov
> This option cannot work AFAICT because the "note" ACL requires a > constant (i.e. known at configuration time) annotation name. Squid will > not substitute %adapt:: > > HTH, > > Alex. > > >> ---

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-16 Thread Frida Safran
: Sent: Tuesday, June 15, 2021 21:35 To: Frida Safran ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Passing Proxy Protocol Headers to external ACL On 6/15/21 4:18 AM, Frida Safran wrote: > In addition to using an external acl to annotate connections and decide > whether spli

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-15 Thread Alex Rousskov
- > *From:* Alex Rousskov > *Sent:* Monday, June 14, 2021 16:24 > *To:* squid-users@lists.squid-cache.org > *Cc:* Frida Safran > *Subject:* Re: [squid-users] Passing Proxy Protocol Headers to external ACL >   > O

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-15 Thread Frida Safran
From: Alex Rousskov Sent: Monday, June 14, 2021 16:24 To: squid-users@lists.squid-cache.org Cc: Frida Safran Subject: Re: [squid-users] Passing Proxy Protocol Headers to external ACL On 6/14/21 2:29 AM, Frida Safran wrote: > Regarding proxy_protocol - is there a known patch for v4 I could

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-14 Thread Alex Rousskov
quid-users@lists.squid-cache.org > *Cc:* Frida Safran > *Subject:* Re: [squid-users] Passing Proxy Protocol Headers to external ACL >   > On 6/13/21 7:31 AM, Frida Safran wrote: > >>  1. Is it possible to pass proxy protocol headers to an external acl as >> part of t

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-14 Thread Frida Safran
tare all ssl_bump bump all Thanks, Frida From: Alex Rousskov Sent: Sunday, June 13, 2021 17:46 To: squid-users@lists.squid-cache.org Cc: Frida Safran Subject: Re: [squid-users] Passing Proxy Protocol Headers to external ACL On 6/13/21 7:31 AM, Frida Safran wrote:

[squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-13 Thread Frida Safran
Hi, 1. Is it possible to pass proxy protocol headers to an external acl as part of the format? 1. Is it possible to pass all/specific icap headers to an external acl? 2. I have been trying to use %icap::>h to pass all the icap headers to an external acl, but it resolves to "-" Than

Re: [squid-users] Passing Proxy Protocol Headers to external ACL

2021-06-13 Thread Alex Rousskov
On 6/13/21 7:31 AM, Frida Safran wrote: > 1. Is it possible to pass proxy protocol headers to an external acl as > part of the format? It should be possible. Use %proxy_protocol::>h logformat %code in your external_acl_type FORMAT configuration. We added that support to Squid v5. Not availab