Thanks for this will about to start some testing in a test environment to see the behaviour of the cache_peer method listed earlier. Sorry to be a pain (will create a new thread for this question if needed), but would I need to recompile with Squid v4.0 to get SNI and ECDHE support for PFS? Have had to make do with normal Diffie-Hellman in 3.5.5 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/High-Availability-in-Squid-tp4672899p4673072.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users