[squid-dev] [PATCH] Note ACL substrings matching

Christos Tsantilas christos at chtsanti.net
Wed Dec 9 09:56:52 UTC 2015


There are several use cases where an annotation may contain a list of 
values for a single key. Today it is only possible to match the full 
annotation value.

This patch investigates the -m flag which can be used to enable 
delimiter separated substrings matching on annotations:

    acl aclname note [-m[=delimiters]] name value ...

The '-m' flag by default matches comma separated substrings. The 
optional  "delimiters" parameter is a list of non-alphanumeric 
characters, which can be used as alternate delimiters.

E.g. if an external ACL sets an annotation like:
    "applications=http,facebook,facebook-chat"
the following ACLs can be used to block access to certain applications:

acl fb_chat      note -m applications facebook-chat
acl db_upload    note -m  applications dropbox-upload
http_access      deny fb_chat
http_access      deny db_upload

This is a Measurement Factory project
-------------- next part --------------
A non-text attachment was scrubbed...
Name: note-acl-regex-support-t10.patch
Type: text/x-patch
Size: 38717 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20151209/3876f447/attachment-0001.bin>


More information about the squid-dev mailing list