[squid-users] Squid not allowing HTTPS access

[Amos Jeffries]

On 15/06/2016 4:59 a.m., Eliezer Croitoru wrote:
> Hey,
> 
>  
> 
> The issue is that CONNECT request can be passed only directly to the origin
> server on 3.1.
> Try to add:
> never_direct allow all
> 

Not quite. CONNECT is a type of message that makes no sense sending
through another proxy if its able to go direct.


So while the never_direct rule above will make it go through the peer.
It will also make everything go through the peer, always. If the peer
goes down traffic stops going anywhere.
  If you want that, then fine above is fine.


An alternative which leaves DIRECT, but only as a backup when the peer
is down is to configure:

 nonhierarchical_direct off
 prefer_direct on


Amos