Ah, good to know, thanks for the info.

Thanks,
     Dean Weimer
     Network Administrator
     Orscheln Management Co

> -----Original Message-----
> From: Henrik Nordström [mailto:hen...@henriknordstrom.net]
> Sent: Friday, May 28, 2010 10:00 AM
> To: Dean Weimer
> Cc: squid-users@squid-cache.org
> Subject: RE: [squid-users] Google SSL searches
> 
> fre 2010-05-28 klockan 09:46 -0500 skrev Dean Weimer:
> > Henrik,
> >     In cases like this, is it better to use the port 443 acl like you did
> > in your example, instead of the proto HTTPS option?  Just curious if
> > the port acl is faster or has some other advantage over the proto acl.
> 
> The proto acl won't work in this case as the protocol is not known on
> CONNECT requests. All Squid knows about https requests when running as a
> proxy is that the client wants to connect to hostname:port.
> 
> proto https acls only works when Squid is operating as a proxy at the
> https level, i.e. when used as a reverse proxy or when using sslbump.
> 
> Regards
> Henrik
> 
> 

Reply via email to