<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Alex,<div class=""><br class=""></div><div class="">Thank you for your response. I’ll be opening up a Bugzilla ticket for opaque messages through ICAP if it doesn’t exist already.</div><div class="">Related to the squid 5.x, I’ve reached out to the debian package maintainer last week for a binary install in the repos but no response as of yet.</div><div class=""><div class="">
<meta charset="UTF-8" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Best regards,<br class="Apple-interchange-newline">Niels Hofmans<br class=""><br class="">SITE <a href="https://ironpeak.be" class="">https://ironpeak.be</a><br class="">BTW BE0694785660<br class="">BANK BE76068909740795</div>
</div>
<div><br class=""><div class="">On 9 Mar 2021, at 16:58, Alex Rousskov <<a href="mailto:rousskov@measurement-factory.com" class="">rousskov@measurement-factory.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 3/8/21 10:10 AM, Niels Hofmans wrote:<br class=""><br class=""><blockquote type="cite" class="">During testing sslbump + icap I noticed that websockets (ws + was) are<br class="">not supported by squid. (Even if using on_unsupported_protocol)<br class="">Are there any plans for supporting this with sslbump?<br class=""></blockquote><br class="">Your question can be misinterpreted in many different ways. I will<br class="">answer the following related question instead:<br class=""><br class="">Q: Are there any plans for Squid to send tunneled traffic through<br class="">adaptation services?<br class=""><br class="">The ICAP and eCAP protocols cannot support opaque/messageless traffic<br class="">natively. Squid can be enhanced to wrap tunneled traffic into something<br class="">resembling HTTP messages so that it can be analyzed using adaptation<br class="">services (e.g., Squid applies similar wrapping to FTP traffic already).<br class=""><br class="">I recall occasional requests for such a feature. I am not aware of<br class="">anybody working on that right now.<br class=""><br class=""><a href="https://wiki.squid-cache.org/SquidFaq/AboutSquid#How_to_add_a_new_Squid_feature.2C_enhance.2C_of_fix_something.3F" class="">https://wiki.squid-cache.org/SquidFaq/AboutSquid#How_to_add_a_new_Squid_feature.2C_enhance.2C_of_fix_something.3F</a><br class=""><br class=""><br class="">HTH,<br class=""><br class="">Alex.<br class="">P.S. Latest Squids support forwarding websocket tunnels that use HTTP<br class="">Upgrade mechanism (see http_upgrade_request_protocols in v5<br class="">squid.conf.documented).<br class=""></div></div></div><br class=""></div></body></html>