[squid-users] SSL on different ports

2020-10-06 Thread Ronan Lucio
Hi, By default, Squid accepts SSL connection only to port 443. Are there any security concerns when need to accept HTTPS connections on other ports? Thank you, Ronan ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache

Re: [squid-users] SSL on different ports

2020-10-07 Thread Ronan Lucio
Hi Amos, > You are referring to the SSL_ports ACL ? Yes. Got your point. Thanks for the clarification Ronan On Wed, Oct 7, 2020 at 4:55 PM Amos Jeffries wrote: > > On 7/10/20 2:16 pm, Ronan Lucio wrote: > > Hi, > > > > By default, Squid accepts SSL connection on

[squid-users] How to configure squid to not cache

2020-10-12 Thread Ronan Lucio
Hi, I'd like to configure squid for proxy only, no caching any content. Looking at squid docs, it instructs to use "cache deny all", but I didn't find this option for Squid-4: http://www.squid-cache.org/Versions/v4/cfgman/ I didn't set any cache_dir directive, but I'm still wondering about cache_

Re: [squid-users] How to configure squid to not cache

2020-10-12 Thread Ronan Lucio
I'm sorry. My bad. Just found it On Tue, Oct 13, 2020 at 8:20 AM Ronan Lucio wrote: > > Hi, > I'd like to configure squid for proxy only, no caching any content. > > Looking at squid docs, it instructs to use "cache deny all", but I > didn't find

[squid-users] Sending CONNECT method requests over HTTPS

2020-05-19 Thread Ronan Lucio
Hi all, I read a similar thread a couple of weeks ago, but my scenario has some differences. Anyway, my need is sending CONNECT method requests over HTTPS as well. If read the docs and just would like to confirm with you if I got it right: 1) To send CONNECT method requests over HTTPS I'm suppos

Re: [squid-users] Sending CONNECT method requests over HTTPS

2020-05-20 Thread Ronan Lucio
n Thu, May 21, 2020 at 1:43 AM Alex Rousskov wrote: > > On 5/20/20 6:07 AM, Matus UHLAR - fantomas wrote: > > On 20.05.20 05:07, Ronan Lucio wrote: > >> I read a similar thread a couple of weeks ago, but my scenario has > >> some differences. > >>

Re: [squid-users] Sending CONNECT method requests over HTTPS

2020-05-20 Thread Ronan Lucio
Hi Alex, > > My scenario is: > > I have a serverless API that needs to connect to a couple specific > > targets from a static IP. > > As this serverless API doesn't have a static IP, I thought to do this > > through a proxy server. > > That's why I need to enforce security on the authentication la

Re: [squid-users] Sending CONNECT method requests over HTTPS

2020-05-20 Thread Ronan Lucio
ion For sure. I like to add additional security layers. Thank you very much for your time and special attention. Cheers, Ronan On Thu, May 21, 2020 at 7:54 AM Alex Rousskov wrote: > > On 5/20/20 1:38 PM, Ronan Lucio wrote: > >>> My scenario is: > >>> I have a serverl

Re: [squid-users] Squid 4.4 https_port and ssl-bump : Fatal bungled line

2020-05-26 Thread Ronan Lucio
Hi Ben, I made working just using https_port (without ssl-bump). I think it's a good way to secure squid authentication. You can also use some tool (like certbot) to generate and automatically renew certificates, so you can work with a short period expiration time. Hope that helps, Ronan On Tue

Re: [squid-users] HTTPS_PORT AND SSL CERT

2020-05-26 Thread Ronan Lucio
If your server listens on a public IP, you can use a valid certificate. On Tue, May 26, 2020 at 7:24 PM Julien TEHERY wrote: > > Hi there, > > I'm actually facing a problem with Squid 4.6-1 (Debian 10). > I'm using squid with https_port directive, using an SSL certficate ( a true > one, not self

[squid-users] Server monitoring

2020-06-10 Thread Ronan Lucio
Hi guys, How do you suggest to monitor service availability? A know that some people use to monitor a few URLs through the proxy, but, I'd like to know if there is any way to remotly monitor squid service. Thanks, Ronan ___ squid-users mailing list squi

Re: [squid-users] Server monitoring

2020-06-10 Thread Ronan Lucio
uot;is squid running?", regardless of CPU, disk, and memory are fine. Thanks, Ronan On Thu, Jun 11, 2020 at 7:17 AM Antony Stone wrote: > > On Wednesday 10 June 2020 at 21:08:35, Ronan Lucio wrote: > > > Hi guys, > > > > How do you suggest to monitor service availa