[squid-users] Squid4 '%<la' empty sometimes

Alex Rousskov rousskov at measurement-factory.com
Fri Apr 6 14:42:51 UTC 2018


On 04/06/2018 07:59 AM, Amos Jeffries wrote:
> On 07/04/18 00:48, Peter Viskup wrote:
>> # splice at step3 for other TLS connections
>> note acl test_splice_http test_s test_ssl
>> ssl_bump splice sslstep3 test_s test_ssl
>>
>> logformat ... acl=%{acl}note ...

> Since the 'note ...' directive is
> ONLY evaluated right at logging time it may show the wrong thing if the
> ACL state changes between the initial directive (ssl_bump) evaluation
> and the logging at the end of the transaction.

Yes, and the correct solution to those problems is the new
annotate_transaction and/or annotate_client ACLs. They can be used to
reliably remember and log ACL-based decisions.

Alex.


More information about the squid-users mailing list