Hey, What is required for testing the wccp code? I can try to get a Cisco device for a basic testing. Is there a specific bug report we can follow on this issue or maybe we should follow on the PR? Eliezer -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of Amos Jeffries Sent: Tuesday, August 22, 2023 15:16 To: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Squid 6.2 with WCCP On 22/08/23 01:34, Alex Rousskov wrote: > On 8/21/23 05:06, Callum Haywood wrote: >> >> Does anyone understand what is causing these errors? Are there any >> known issues or patches in progress? > > A few years ago, several serious problems were discovered in WCCP code, > including security vulnerabilities: > > https://github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82 > > Some of the WCCP bugs were fixed without testing; developers fixing > those bugs could not easily test WCCP. Some of the old WCCP bugs > remained and some of the new fixes were buggy. > > Today, WCCP code remains problematic. If your customers rely on WCCP, > consider investing into revamping that neglected and buggy feature. > This PR <https://github.com/squid-cache/squid/pull/970> has some progress towards a fix of those. See the latest comment (currently Sept 2022) for issues that still need to be resolved before that PR is ready for merge attempt. The major issue remains the ability to test. HTH Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://lists.squid-cache.org/listinfo/squid-users
