On 8/06/20 5:53 am, J. Dierkse wrote:> > I think I found the culprit; I’m exclusively using peer routing, and the knowledgebase mentions that this is disabled when host forgery is detected. > I understand the reasoning behind disabling this, but it renders my setup pointless for SSL connections. > Perhaps anyone has any brilliant ideas to do peer routing with Squid with (sorry to say) misbehaving CDN DNS servers..? This is <https://bugs.squid-cache.org/show_bug.cgi?id=4940>. There is no easy fix. A number of design problems need to be resolved before there is a chance at avoiding this safely. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users