-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 # Disable alternate protocols request_header_access Alternate-Protocol deny all reply_header_access Alternate-Protocol deny all + (additional recommended) on network equipment: ! Cisco, for example remark Deny alternate protocols deny udp any any eq 80 deny udp any any eq 443 31.12.15 19:45, Massimo.Sala@xxxxxxxxxxxxxx пишет: > When you request a video on Youtube, its web servers send two new HTTP > headers to the browser : > > alt-svc > alternate-protocol > > suggesting to the browser to switch to the new protocol QUIC. > > > Unfortunately > > 1) QUIC, working over UDP, is not cacheable by squid 3.4 > > 2) even if cacheable, IT admins have to upgrade many tools to support and > account videos over QUIC ( proxy, firewall, bandwidth shaping, etc... ) > > See : > http://wiki.squid-cache.org/KnowledgeBase/Block%20QUIC%20protocol > > > We want to disable QUIC, so the servers and browsers fallbacks to normal > HTTP for videos. > > --- > > I asked in another thread > > 3) support for Alternate-Protocol HTTP header. > > > Amos' answer : > > As for #3, the Alternate-Protocol header patch is just automating these > squid.conf settings, which you can use explicitly in any Squid version: > > acl AP rep_header_regex Alternate-Protocol . > reply_header_access deny AP > > > With that syntax : > > squid3 -k reconfigure > > 2015/12/31 14:34:21| FATAL: Invalid ACL type 'rep_header_regex' > FATAL: Bungled /etc/squid3/squid.conf line 43: acl AP rep_header_regex > alternate-protocol . > Squid Cache (Version 3.4.8): Terminated abnormally. > CPU Usage: 0.016 seconds = 0.008 user + 0.008 sys > Maximum Resident Size: 37936 KB > Page faults with physical i/o: 0 > > > > Is it rep_header, not rep_header_regex ? > > Is it reply_header_access with 3 parameters ? > > From > http://www.squid-cache.org/Versions/v3/3.4/cfgman/reply_header_access.html > Usage: reply_header_access header_name allow|deny [!]aclname ... > > > Which is the correct syntax to suppress in the replies these headers ? > alt-svc > alternate-protocol > > best regards, Sala > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWhTd3AAoJENNXIZxhPexGNnMH/0FVWtBmJqQwmuPEaT3ykdgH 7Y6Zcpwdg0JhwTLFPVhV9j95k/bueukzERZwQpwosppqEUhnhVGQx+GzXqhpsM4F kH88zvu1Jca4Pu63gUqymeISUI36hdQtkuWFx/ZEuzoPIRaqDC7YV1CN4MKW3Jh5 B+o4O8vXCeb82PoKLQCADCVuLKG5W2I5CAswkcbx8YM62f2wYNDIkVuk5UeLcCiL pC9/doExY3xKI6nuGDhNa9cTe1i6AUNvYM1m6t5VDfvqWjZ2PZQF43+ZNyOGLm/o HMwx/w36YUQbhKm3ZgyLs3nQPJ+SJVfguJtfNc3yFIxiyzMjHZcDtDRfpGj+nNQ= =bm4R -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
