[squid-users] header_access ssl multiple cache_peers? Redirect http to https

[Amos Jeffries]

On 18/02/2017 3:27 a.m., chiasa.men wrote:
> hello
> there a two cache_peers with ssl enabled webservers. Obviously for both the 
> private keys are available. 
> For http_port squid can use header_access to filter headers.
> Can squid make use of the known private keys in order to filter the headers for 
> https_port connetions too?
> How?

When you control the domains you can setup a Squid as CDN proxy in front
of the actual origin servers.

<http://wiki.squid-cache.org/ConfigExamples/Reverse/SslWithWildcardCertifiate>

Then the domains public DNS just needs to present the Squid machine IP
as the server to all visitors.

> Is the any method at all to filter headers in ssl connections?
> 
> Is it possible to make squid redirect http to https? How?
> (http://example.com redirect to  https://example.com)
> 

 acl HTTP proto HTTP
 deny_info 301:https://%H%R HTTP
 http_access deny HTTP


Amos