Re: [squid-users] Question regarding TPROXY and sslBump

2020-02-15 Thread Amos Jeffries
On 16/02/20 2:58 am, Felipe Polanco wrote: > Thanks for the reply, > > Speaking strictly about TPROXY, are there any limitations compared to > regular transparent intercept? I assume that by "regular transparent intercept" you mean NAT intercept. The primary difference between TPROXY and NAT ...

Re: [squid-users] Question regarding TPROXY and sslBump

2020-02-15 Thread Felipe Polanco
Thanks for the reply, Speaking strictly about TPROXY, are there any limitations compared to regular transparent intercept? We have full control of the network and TCP routing. We have done regular https intercept in the past and is working fine, but now we would like to try TPROXY in bridging mo

Re: [squid-users] Question regarding TPROXY and sslBump

2020-02-14 Thread Amos Jeffries
On 15/02/20 10:28 am, Felipe Polanco wrote: > Hi, > > Can squid running in TPROXY mode intercept and decrypt HTTPS payload > with sslBump? > Maybe. It can do so about as well as NAT intercept mode can. Wherther TPROXY works depends on what level of access you have to control the TCP packet rout

[squid-users] Question regarding TPROXY and sslBump

2020-02-14 Thread Felipe Polanco
Hi, Can squid running in TPROXY mode intercept and decrypt HTTPS payload with sslBump? This is for an in-line Layer 2 proxy application. Thanks, ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-