Search squid archive

Re: parent for https

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 13/01/2012 4:03 p.m., Xizhen Du wrote:
Hi all,

I am quite new for squid, and now facing a case and no idea how to get it work.

There's 2 proxies:

Proxy A: nearly a default setup, just configured cache_peer to B
Proxy B: as the parent for A, accepts the requests from A

So the simple picture is that: Web clients ---->  A ---->  B, and it is
supposed that all web requests(http, https) are leaving from B to the
destionation servers.
Web browser on clients is with proxy A(for all protocals in settings
including https)

Right now seeing all "http" request are forwarded to B as expected,
but those "https" are reaching outside from A directly, not over B.

Any idea is appreciated, Thanks a lot!

HTTPS is usually passed over HTTP in the form of CONNECT requests establishing a tunnel. It is far more efficient for Squid to simply open the tunnel and relay teh data down it than to relay both the tunenl and data inside via a peer. This is why it "reaches outside from A directly".

You can use "nonhierarchical_direct off" to make these tunnels and a few otehr requets go through the peer.

Amos


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux