[squid-users] Which protocol uses when Stored-ID object returned by Squid?

Yuri Voinov yvoinov at gmail.com
Wed Aug 12 13:12:33 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Thank you, Amos, for explanation.

It is an exhaustive answer to my doubts. :)

So, finally, I can write Store-ID map rules without any protocol prefix,
or use any, no matter?

I.e., ^https?:\/\/(.*?)\/(.*?)\;(?:.*?)$    anysite$1.SQUIDINTERNAL/$2

?

12.08.15 18:51, Amos Jeffries пишет:
> On 12/08/2015 11:13 p.m., Yuri Voinov wrote:
>>
>> Hi all.
>>
>> Stupid question:
>>
>> Which protocol uses when Stored-ID object returned by Squid?
>>
>> I.e., when I use ssl bump, and use next rules:
>>
>> squid.conf:
>>
>> acl store_rewrite_list_web url_regex
>> ^https?:\/\/(khms|mt)[0-9]+\.google\.[a-z\.]+\/.*
>> ^https?:\/\/(kh[0-9]?)+\.google\.[a-z\.]+\/(.*)
>>
>> store_id_program /usr/local/squid/libexec/storeid_file_rewrite
>> /usr/local/squid/etc/storeid.conf
>> store_id_access allow store_rewrite_list_web
>> store_id_access allow store_rewrite_list_web_CDN
>> store_id_access allow adobe_java_updates
>> store_id_access deny all
>>
>> and
>>
>> ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*)      
>> http://gmaps.SQUIDINTERNAL/$1/$2
>> ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*)          
>> http://gearth.SQUIDINTERNAL/$1/$2
>>
>> in storeid.conf,
>>
>> and
>>
>> user goes to Google Maps via HTTPS (and map is already Stored-ID),
>>
>> how Squid will be output stored object to client?
>
> Using the connection to the client. Whatever protocol that uses...
>
>> Client shows green
>> https connection with valid Squid CA. Access.log shows bumped https
>> connection.
>>
>> HTTP or HTTPS?
>
>
> Store-ID is not involved with any protocols. It is simply a way to
> adjust the internal hash key used to store or lookup objects in the
> cache index.
>
>
> The HTTP/1.0 hash key is URI.
>
> The HTTP/1.1 hash key is URI, or for responses with Vary: header the URI
> plus list of all request headers named in the Vary.
>
> With Store-ID the URI is swapped with whatever the StoreID helper outputs.
>
>
> You could use a Store-ID helper to map like this and it would still work
> perfectly fine:
>
>  ^https?:\/\/(khms[\d]|mt[\d])+\.google\.[a-z\.]+\/(.*)
>   bwahahahahah at gmaps.SQUIDINTERNAL/$1/$2
>
>  ^https?:\/\/(kh[\d]?)+\.google\.[a-z\.]+\/(.*)
>  ohnowhatyagonnado::://gearth.SQUIDINTERNAL/$1/$2
>
>
> This is why we changed the name from Store-URL to Store-ID when
> polishing the feature port from 2.7. Its not a URL, its a cache index ID
> string.
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJVy0ZBAAoJENNXIZxhPexGgCoIALezJVmzCOSKHlPMmd5oVtWl
E9ODopoyV1V29FnSnFhEJtpdXAac9CkygNMXaIBHSwW/X6O68OYiuhg8w2TRrSyS
fXGhK7NXILwMEwCY/4GR51L/HSRMo8F8oS5hwYLcHiLd38o/0ceOPHHahoMSPoUI
NLatPog1wtjksfR5FxUbFCKL4ATHxHbKRGlLwwbzI7ERH/01kKSGW059sPkV3nfR
vMkv/LWS9mYP2LgTxBy2XMiMtAPSpghS9cg6Ewhn2BnKTrDBJX1fGOUWuPMCA+pz
CQ62WL3MbRrlQhTGBNIZOn/IO2xh3tFjgr/FOyZ5uauwPtj/kv3PH6pZSqoEGjE=
=RThk
-----END PGP SIGNATURE-----



More information about the squid-users mailing list