[squid-users] reverse proxy and HTTP redirects

Amos Jeffries squid3 at treenet.co.nz
Wed Dec 4 05:15:13 UTC 2019


On 4/12/19 3:02 am, Vieri Di Paola wrote:
>> Hmm, what version of Squid is this?
> 
> 3.5.27 (yes, I'm aware of the security vulnerability, but I'm unable
> to upgrade right now)
> 
>> Can you configure "debug_options 11,2" and see what the HTTP messages
>> look like?
> 
> Everything looks OK until I get:

I'm trying to see for myself if this is actually normal/OK - since I
don't know how familiar you are with HTTP accel mode syntax.

The requests in particular are most interesting, though what responses
are paired with each is also potentially important.



> 
> 2019/12/03 14:52:26.509 kid1| 11,2| http.cc(720) processReplyHeader:
> HTTP Server REPLY:
> ---------
> HTTP/1.1 302 Moved Temporarily
...
> Location: http://whatever.org:50443/whatever/security/afterLogin

That is a very good sign. The server is using the Squid listening port
in its generated URLs.


Amos


More information about the squid-users mailing list