Search squid archive

Re: Peek and splice where SNI not present

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 10/4/19 10:34 PM, washuu wrote:
> ssl_bump peek step1
> ssl_bump splice step2 foo
> ssl_bump terminate step2 bar

FYI: You did not tell Squid what to do when neither foo nor bar ACLs
match during step2. Thus, older Squid will use some hard-to-predict
action, while modern Squids will splice (because a peek action matched
at the previous step). If splicing is the step2 default you want, then
consider making that decision explicit by rewriting this as

  ssl_bump peek step1
  ssl_bump splice foo
  ssl_bump terminate bar
  ssl_bump splice all

Alex.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux