-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Thank you, Amos, for explanation. It is an exhaustive answer to my doubts. :) So, finally, I can write Store-ID map rules without any protocol prefix, or use any, no matter? I.e., ^https?:\/\/(.*?)\/(.*?)\;(?:.*?)$ anysite$1.SQUIDINTERNAL/$2 ? 12.08.15 18:51, Amos Jeffries пишет: > On 12/08/2015 11:13 p.m., Yuri Voinov wrote: >> >> Hi all. >> >> Stupid question: >> >> Which protocol uses when Stored-ID object returned by Squid? >> >> I.e., when I use ssl bump, and use next rules: >> >> squid.conf: >> >> acl store_rewrite_list_web url_regex >> ^https?:\/\/(khms|mt)[0-9]+\.google\.[a-z\.]+\/.* >> ^https?:\/\/(kh[0-9]?)+\.google\.[a-z\.]+\/(.*) >> >> store_id_program /usr/local/squid/libexec/storeid_file_rewrite >> /usr/local/squid/etc/storeid.conf >> store_id_access allow store_rewrite_list_web >> store_id_access allow store_rewrite_list_web_CDN >> store_id_access allow adobe_java_updates >> store_id_access deny all >> >> and >> >> ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*) >> http://gmaps.SQUIDINTERNAL/$1/$2 >> ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*) >> http://gearth.SQUIDINTERNAL/$1/$2 >> >> in storeid.conf, >> >> and >> >> user goes to Google Maps via HTTPS (and map is already Stored-ID), >> >> how Squid will be output stored object to client? > > Using the connection to the client. Whatever protocol that uses... > >> Client shows green >> https connection with valid Squid CA. Access.log shows bumped https >> connection. >> >> HTTP or HTTPS? > > > Store-ID is not involved with any protocols. It is simply a way to > adjust the internal hash key used to store or lookup objects in the > cache index. > > > The HTTP/1.0 hash key is URI. > > The HTTP/1.1 hash key is URI, or for responses with Vary: header the URI > plus list of all request headers named in the Vary. > > With Store-ID the URI is swapped with whatever the StoreID helper outputs. > > > You could use a Store-ID helper to map like this and it would still work > perfectly fine: > > ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*) > bwahahahahah@gmaps.SQUIDINTERNAL/$1/$2 > > ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*) > ohnowhatyagonnado::://gearth.SQUIDINTERNAL/$1/$2 > > > This is why we changed the name from Store-URL to Store-ID when > polishing the feature port from 2.7. Its not a URL, its a cache index ID > string. > > Amos > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJVy0ZBAAoJENNXIZxhPexGgCoIALezJVmzCOSKHlPMmd5oVtWl E9ODopoyV1V29FnSnFhEJtpdXAac9CkygNMXaIBHSwW/X6O68OYiuhg8w2TRrSyS fXGhK7NXILwMEwCY/4GR51L/HSRMo8F8oS5hwYLcHiLd38o/0ceOPHHahoMSPoUI NLatPog1wtjksfR5FxUbFCKL4ATHxHbKRGlLwwbzI7ERH/01kKSGW059sPkV3nfR vMkv/LWS9mYP2LgTxBy2XMiMtAPSpghS9cg6Ewhn2BnKTrDBJX1fGOUWuPMCA+pz CQ62WL3MbRrlQhTGBNIZOn/IO2xh3tFjgr/FOyZ5uauwPtj/kv3PH6pZSqoEGjE= =RThk -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
