Re: [squid-users] SSL Peek-n-Splice and exclusions by SNI

2015-03-09 Thread Nathan Hoad
Hi Amos, After digging through debug logs, I noticed this: 2015/03/09 14:40:12.467 | client_side.cc(2902) concurrentRequestQueueFilled: local=74.125.23.95:443 remote=10.3.20.249:40083 FD 11 flags=33 max concurrent requests reached (1) 2015/03/09 14:40:12.467 | client_side.cc(2903) concurrentReque

Re: [squid-users] SSL Peek-n-Splice and exclusions by SNI

2015-03-08 Thread Amos Jeffries
On 9/03/2015 5:52 p.m., Nathan Hoad wrote: > Hi folks, > > I'm playing with 3.5.2 and Peek-n-Splice, I was wondering if it's > actually possible to exclude requests based on the SNI host and have > Squid still bump correcty. It is supposed to work, but there have been troubles. So YMMV. > I've b

[squid-users] SSL Peek-n-Splice and exclusions by SNI

2015-03-08 Thread Nathan Hoad
Hi folks, I'm playing with 3.5.2 and Peek-n-Splice, I was wondering if it's actually possible to exclude requests based on the SNI host and have Squid still bump correcty. I've been trying with this configuration, using a simple external acl: https_port 60443 intercept ssl-bump cert=/path/to/insp