[squid-users] Squid not allowing HTTPS access

Amos Jeffries squid3 at treenet.co.nz
Tue Jun 14 17:13:41 UTC 2016

On 15/06/2016 4:59 a.m., Eliezer Croitoru wrote:
> Hey,
> The issue is that CONNECT request can be passed only directly to the origin
> server on 3.1.
> Try to add:
> never_direct allow all

Not quite. CONNECT is a type of message that makes no sense sending
through another proxy if its able to go direct.

So while the never_direct rule above will make it go through the peer.
It will also make everything go through the peer, always. If the peer
goes down traffic stops going anywhere.
  If you want that, then fine above is fine.

An alternative which leaves DIRECT, but only as a backup when the peer
is down is to configure:

 nonhierarchical_direct off
 prefer_direct on


More information about the squid-users mailing list