[squid-users] About intercept https

Yurii yurakirychuk at gmail.com
Tue Feb 25 19:49:25 UTC 2020


Hi to all. I need help.
The task is to configure squid in intercept mode to proxy http/https
traffic.

Installed Squid 4.10 (configuration: https://pastebin.com/Gg2VPr0v) Ubuntu
18.04. Redirect traffic from Mikrotik to Ubuntu (ip firewall mangle & ip
route: https://pastebin.com/5UrNcsEc), and there 80, 443 traffic to Squid
3129, 3130 (iptables: https://pastebin.com/kXxy8zHb). 

DNS squid use the same as on client machines. In squid.conf /dns_v4_first
on/. DNS lookup time in access.log: https://pastebin.com/zdwHjRHk

There is a problem - long loading of http/https pages.  In the case of https
- /"Creating a secure connection"/, http - /"Waiting..."/ and so for 5-10
seconds.
Please, tell me what is wrong?

/*Squid.conf* is here -  https://pastebin.com/MX5mNi5q
*Localnet* - 10.3.198.0/24
*Mikrotik* - 10.3.198.254
*Squid* - 10.3.198.224/



--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html


More information about the squid-users mailing list