Re: [squid-users] Splice certain SNIs which served by the same IP

On 22/2/22 9:45 μ.μ., Eliezer Croitoru wrote: Just To mention that once Squid is not splicing the connection it would have full control in the URL level. Exactly. For many HTTP2 sites the SNI does not provide enough info for splicing/bumping decision. The google sites is one of them. You

Re: [squid-users] Splice certain SNIs which served by the same IP

Hi Ben, When HTTP/2 is used, requests for two different domains may served using the same TLS connection if both domains are served from the same remote server and use the same TLS certificate. There is a description here: https://daniel.haxx.se/blog/2016/08/18/http2-connection-coalescing/

Re: [squid-users] websockets through Squid

Hi Vieri, I attached a patch to bug5084 which may help us to debug the issue: https://bugs.squid-cache.org/attachment.cgi?id=3772 The patch is for squid-v5 and produces debug messages at debug level 1. Regards, Christos On 17/10/20 11:36 μ.μ., Alex Rousskov wrote: On 10/16/20 11:58

Re: [squid-users] sslBump adventures in enterprise production environment

On 11/16/2015 08:00 AM, Eugene M. Zheganin wrote: Hi. On 16.11.2015 00:14, Yuri Voinov wrote: It's common knowledge. Squid is unable to pass an unknown protocol on the standard port. Consequently, the ability to proxy this protocol does not exist. If it was simply a tunneling ... It is not

Re: [squid-users] how to get c-icap url category from squid access lo

On 11/04/2015 08:34 AM, Murat K wrote: Hi guys, please can someone tell me if it is possible to send url category info from c-icap to squid access log? The ICAP response headers can be logged using the "adapt::

Re: [squid-users] Assert(call-dialer.handler == callback)

Hi Steve, We have similar crashes. I created a new bug report in squid bugzilla (I did not found any other similar report), using your stack trace: http://bugs.squid-cache.org/show_bug.cgi?id=4238 Also I attached a patch here, which probably fixes this problem. Can you please test it?

Re: [squid-users] Correctly implementing peak-splice

On 11/04/2014 02:26 PM, James Lay wrote: Thanks a bunch Christos, That list of IP's is things like apple.com, textnow.me, and windows updates...IP's that simply don't bump well. My setup is a linux box that's a router...one NIC internal IP, the other external IP. Via iptables redirect, I'm

Re: [squid-users] Correctly implementing peak-splice

On 10/30/2014 02:06 PM, James Lay wrote: Hello all, Here is my complete config for trying out peek/splice. This currently does not work..is there something obvious that I'm mission? Current error is: Oct 30 06:03:14 gateway squid: 192.168.1.110 - - [30/Oct/2014:06:03:14 -0600] GET

Re: [squid-users] squid-3.4.8 sslbump breaks facebook

A patch for this bug attached to 4102 bug report. Please test it and report any problem. Regards, Christos On 10/16/2014 12:14 PM, Amm wrote: On 10/16/2014 02:35 PM, Jason Haar wrote: On 16/10/14 20:54, Jason Haar wrote: I also checked the ssl_db/certs dir and removed the facebook