Re: [squid-users] confused about ICAP and who's downloading what
On 22/06/2015 7:24 p.m., Jason Haar wrote: > On 21/06/15 10:45, Antony Stone wrote: >> The former - squid does the download and passes the content to ICAP. > > Great. So squid does all the network calls and ICAP simply gets to > review the content (request and/or response) and potentially change it. > Perfect :-) Not quite. ICAP is a network service. So the ICAP server still has to do all the parsing parts for both ICAP and HTTP, then the payload as well. If you just want data passed to your code, go with eCAP module. Squid loads it as a library and passes pre-parsed HTTP data through the eCAP API to it. Then the only parsing necessary is the payload format(s). Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] confused about ICAP and who's downloading what
On 21/06/15 10:45, Antony Stone wrote: > The former - squid does the download and passes the content to ICAP. Great. So squid does all the network calls and ICAP simply gets to review the content (request and/or response) and potentially change it. Perfect :-) Thanks! -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] confused about ICAP and who's downloading what
On Sunday 21 June 2015 at 00:31:45 (EU time), Jason Haar wrote: > When a web page is requested by a client, what component does what? Does > squid do the download, pass the content to ICAP, or does it (like with > parent proxies), just tell the ICAP software to do the download itself? The former - squid does the download and passes the content to ICAP. ICAP is simply a means for modifying, or providing information about, HTTP requests and responses which are fed to the ICAP server. The ICAP server itself doesn't perform any HTTP requests. See https://tools.ietf.org/html/rfc3507 for more details (the diagrams in 3.1 and 3.2 show how the dataflow works). As that RFC says, "ICAP is, in essence, a lightweight protocol for executing a 'remote procedure call' on HTTP messages. It allows ICAP clients to pass HTTP messages to ICAP servers for some sort of transformation or other processing". Squid is the ICAP client in your setup. Regards, Antony. -- "I estimate there's a world market for about five computers." - Thomas J Watson, Chairman of IBM Please reply to the list; please *don't* CC me. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] confused about ICAP and who's downloading what
Hi there I'm starting to use ICAP as an AV content filter, having moved away from using the havp antivirus proxy as a parent proxy Part of the problem with havp was that it stopped being developed years ago and HTTP trickery had moved on in ways that basically it couldn't support - but squid - being the wonderful piece of loved software it is - was keeping up with the times :-) Anyway, now that I'm trialing ICAP, I'm concerned about the same issue. When a web page is requested by a client, what component does what? Does squid do the download, pass the content to ICAP, or does it (like with parent proxies), just tell the ICAP software to do the download itself? You can see where I'm going, the latter would mean "odd" HTTP applications which might work fine through squid might fail if the ICAP software does things differently (btw: "odd" can mean many things: even how dns lookups occur, ipv6 support,etc) Thanks -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
