Re: [squid-dev] [PATCH] Fake CONNECT exceeds concurrent requests limit

2015-02-24 Thread Amos Jeffries
On 2015-02-25 10:02, Tsantilas Christos wrote: Squid closes the SSL client connection with "Failed to start fake CONNECT request for ssl spliced connection". This happens especially often when the pipeline_prefetch configuration parameter is set to "0" (i.e., default). When a transparent SSL co

[squid-dev] [PATCH] Fake CONNECT exceeds concurrent requests limit

2015-02-24 Thread Tsantilas Christos
Squid closes the SSL client connection with "Failed to start fake CONNECT request for ssl spliced connection". This happens especially often when the pipeline_prefetch configuration parameter is set to "0" (i.e., default). When a transparent SSL connection is peeked and then spliced in step

[squid-dev] [PATCH] server_name ACL

2015-02-24 Thread Tsantilas Christos
Hi all, This patch adds server_name ACL matching server name(s) obtained from various sources such as CONNECT request URI, client SNI, and SSL server certificate CN. During each SslBump step, Squid improves its understanding of a "true server name", with a bias towards server-provided (and