[squid-users] Best way to utilize time constraints with squid?

[Amos Jeffries]

On 26/04/24 17:15, Jonathan Lee wrote:
> 
> aclblock_hourstime01:30-05:00ssl_bumpterminateallblock_hourshttp_accessdenyallblock_hours
> 
> In this a good way to time lock squid with times lock down?
> 

That depends on your criteria/definition of "good".

Be aware that http_access only checks *new* transactions. Large 
downloads, and long-running transactions such as CONNECT tunnel which 
start during an allowed time will continue running across the disallowed 
time(s).


> 
> To essentially terminate all connections and block http access.
> 

The "terminate all connections" is not enforced by 'time` ACL. Once a 
transaction is allowed to start, it can continue until completion - be 
that milliseconds or days later.


HTH
Amos