-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Also, Amos. What's happens when I normalize or completely suppress Vary header? 12.08.15 18:51, Amos Jeffries пишет: > On 12/08/2015 11:13 p.m., Yuri Voinov wrote: >> >> Hi all. >> >> Stupid question: >> >> Which protocol uses when Stored-ID object returned by Squid? >> >> I.e., when I use ssl bump, and use next rules: >> >> squid.conf: >> >> acl store_rewrite_list_web url_regex >> ^https?:\/\/(khms|mt)[0-9]+\.google\.[a-z\.]+\/.* >> ^https?:\/\/(kh[0-9]?)+\.google\.[a-z\.]+\/(.*) >> >> store_id_program /usr/local/squid/libexec/storeid_file_rewrite >> /usr/local/squid/etc/storeid.conf >> store_id_access allow store_rewrite_list_web >> store_id_access allow store_rewrite_list_web_CDN >> store_id_access allow adobe_java_updates >> store_id_access deny all >> >> and >> >> ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*) >> http://gmaps.SQUIDINTERNAL/$1/$2 >> ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*) >> http://gearth.SQUIDINTERNAL/$1/$2 >> >> in storeid.conf, >> >> and >> >> user goes to Google Maps via HTTPS (and map is already Stored-ID), >> >> how Squid will be output stored object to client? > > Using the connection to the client. Whatever protocol that uses... > >> Client shows green >> https connection with valid Squid CA. Access.log shows bumped https >> connection. >> >> HTTP or HTTPS? > > > Store-ID is not involved with any protocols. It is simply a way to > adjust the internal hash key used to store or lookup objects in the > cache index. > > > The HTTP/1.0 hash key is URI. > > The HTTP/1.1 hash key is URI, or for responses with Vary: header the URI > plus list of all request headers named in the Vary. > > With Store-ID the URI is swapped with whatever the StoreID helper outputs. > > > You could use a Store-ID helper to map like this and it would still work > perfectly fine: > > ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*) > bwahahahahah@gmaps.SQUIDINTERNAL/$1/$2 > > ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*) > ohnowhatyagonnado::://gearth.SQUIDINTERNAL/$1/$2 > > > This is why we changed the name from Store-URL to Store-ID when > polishing the feature port from 2.7. Its not a URL, its a cache index ID > string. > > Amos > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJVy1XIAAoJENNXIZxhPexGo8UIAMrky2Dr6y7dsvl7M/iyBP6s NQEc0JL32tSvpTVXwVaQadSgrSDV5JQWcyZsKXoZAIwgQLp4Xi6Ds2A4WkT8WkSM yorGKIT74f/HczROklpxei7RzfpJ1HFswa/kmCJeHYQi8mp1FGNhRw+gw+MX1wG6 SR+4mOhtCKG7ua+IEv2bmRtkD6d5fpvLh82/zyQfTHJOPxsJgXzfJnB5kZRAwpmY haoB3FiutLppy0VP+anD9S7S7NSxWR2oWKnL5Xu6orzwMo7FrmOJOswdED+tj1zH tD0O+iWG6Bxpljqkz8wW3Oh9S03Ie9mi9jOrpPcxtnEA62UMLzk4Tj33cxHW2vk= =J0pn -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
