[squid-users] Passing Proxy Protocol Headers to external ACL

Alex Rousskov rousskov at measurement-factory.com
Sun Jun 13 14:46:56 UTC 2021


On 6/13/21 7:31 AM, Frida Safran wrote:

>  1. Is it possible to pass proxy protocol headers to an external acl as
>     part of the format?

It should be possible. Use %proxy_protocol::>h logformat %code in your
external_acl_type FORMAT configuration. We added that support to Squid
v5. Not available in the official v4.


>  2. Is it possible to pass all/specific icap headers to an external acl?
>     I have been trying to use %icap::>h to pass all the icap headers to
>     an external acl, but it resolves to "-"

It should be possible if your external ACL is evaluated _after_ the
corresponding ICAP headers are received, but I would not be surprised if
there are bugs in this area -- the ICAP headers may be available but not
 provided to the ACL evaluation code. Which squid.conf directive is
triggering your external ACL evaluation in this use case?


HTH,

Alex.


More information about the squid-users mailing list