[squid-dev] Drop cache_object protocol support

Eduard Bagdasaryan eduard.bagdasaryan at measurement-factory.com
Tue Jan 24 17:22:40 UTC 2023


Hello,

Today we can query cache manager in two ways:

1. with cache_object:// URL scheme
2. with an HTTP request having the 'squid-internal-mgr' path prefix.

I guess that when (2) was initially added at e37bd29, its implementation 
was somewhat incomplete compared to the old cache_object scheme (e.g., 
it lacked authentication) and both methods existed. Since then, however, 
(2) has been improved and it should be equivalent to (1) by now.  If so, 
can we completely remove the non-standard cache_object scheme support 
from Squid? This would simplify request forwarding logic, including code 
paths where the existing code complexity may result in vulnerability issues.


Thanks,

Eduard.



More information about the squid-dev mailing list