On 10/7/20 9:29 AM, Vieri wrote:
>> To allow WebSocket tunnels, you need http_upgrade_request_protocols 
>> available since v5.0.4

> What would the easiest way be to allow websockets through in v. 4?

Backport (the essential parts of) v5 changes to v4.


> That is, for trusted domains, allow a direct connection maybe?

Direct connections are allowed by default. That is not the issue here.

To proxy a WebSocket handshake, Squid has to, at a minimum, send an
Upgrade header to the origin server, forward the HTTP 101 response from
the origin server to the client, and then become a TCP tunnel. The last
part is impossible to accomplish in v4 with configuration options alone:
There is simply no "become a tunnel" directive that is checked after
forwarding a 1xx control message.

Alex.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to