On 10/7/20 9:29 AM, Vieri wrote: >> To allow WebSocket tunnels, you need http_upgrade_request_protocols available since v5.0.4 > What would the easiest way be to allow websockets through in v. 4? Backport (the essential parts of) v5 changes to v4. > That is, for trusted domains, allow a direct connection maybe? Direct connections are allowed by default. That is not the issue here. To proxy a WebSocket handshake, Squid has to, at a minimum, send an Upgrade header to the origin server, forward the HTTP 101 response from the origin server to the client, and then become a TCP tunnel. The last part is impossible to accomplish in v4 with configuration options alone: There is simply no "become a tunnel" directive that is checked after forwarding a 1xx control message. Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users