[squid-users] https and URL rewriting

Amos Jeffries squid3 at treenet.co.nz
Fri Dec 11 13:50:24 UTC 2015


On 11/12/2015 10:30 p.m., Eugene M. Zheganin wrote:
> Hi.
> 
> I'm using URL rewriting to display instant messages to users. I'm doing
> it using traffic interception and squid in transparent mode, so far I'm
> intercepting http only. But I wonder, how it will behave with https,
> since it's a tunneled connection ?

Depends.

> I suppose, unless using ssl-Bum
> technique, squid will never see the URL in such request ?

Correct.

> But how would
> url rewrite sequence behave itself in these conditions ?
> 

That Depends. Some well written re-writers know how to handle
authority-URI (skip the rewrite). Most don't (try to rewite and mangle
the URI). So the answer is usually "badly".

Amos



More information about the squid-users mailing list