[squid-users] Question about HTTPS transparent proxy with cache_peer

[Amos Jeffries]

On 9/02/20 5:17 am, Felipe Arturo Polanco wrote:
> Hi,
> 
> Can squid be set up as a transparent proxy for HTTP and HTTPS and at
> the same time use an upstream proxy?
> 
> It means converting GET request from a client to a CONNECT request to an
> upstream server.
> 

That depends on the GET request URL, the Squid version, and upstream
proxy capabilities.

For http:// URLs, yes all Squid versions can relay to an upstream proxy
as normal GET requests.

For https:// URLs all Squid which support SSL-Bump can send requests to
an upstream peer which supports TLS/SSL connections from the Squid as
normal GET requests.

The ability to generate CONNECT tunnels for sending HTTPS traffic
through plain-text peers has been added in Squid-5.

Amos