[squid-users] Passing Proxy Protocol Headers to external ACL

Amos Jeffries squid3 at treenet.co.nz
Mon Jun 21 12:39:10 UTC 2021


On 20/06/21 6:55 pm, Frida Safran wrote:
> As far as I understand the ecap service should be called for each step:
> 
>   * In step1 there is no SNI, and X-PMeta-Splice should be set in the
>     ecap to 'no'.
>   * In step2 there should be an SNI, and X-PMeta-Splice should be set to
>     'yes', and the classifyRequest acl should return true, causing the
>     request to be spliced.
> 
> In the debug log however, I see prints saying that it was decided to 
> bump the request, suggesting that step2 is not working as expected.
> Please advise how to proceed?

Since the thing deciding between splice and stare at step2 is an ACL
test I would add debug_options "28,5 82,5" to your log output to see
what the ACL is doing to get the bump.

Amos


More information about the squid-users mailing list