[squid-users] Centralized Squid - design and implementation

[brendan kearney]

Https is no issue.  The ssl session will persist to the same proxy for the
duration of the session.  I have no problems at all.
On Nov 16, 2014 3:58 PM, "alberto" <alberto.furia at gmail.com> wrote:

> Ok, thank you very much. I think this is a good solution, maybe with an
> active/passive HAProxy with keepalived.
> Are you able to serve also https without any problem through HAProxy or
> only http request?
>
> regards,
> a.
>
>
>
> On Sun, Nov 16, 2014 at 8:00 PM, brendan kearney <bpk678 at gmail.com> wrote:
>
>> I use kerberos auth and do not have issues.  You have to pay attention to
>> the details with kerberos auth (dns name and principals need to match,
>> specific  options set in squid configs), but it is working very well for me
>> On Nov 16, 2014 12:32 PM, "alberto" <alberto.furia at gmail.com> wrote:
>>
>>> Hi Brendan
>>>
>>> On Sun, Nov 16, 2014 at 5:51 PM, Brendan Kearney <bpk678 at gmail.com>
>>> wrote:
>>>
>>>> i use HAProxy to load balance based on the least number of connections
>>>>
>>>
>>> Do you use kerberos/AD authentication?
>>> Any issues with HAPROXY in front of the squid nodes?
>>>
>>> Thx,
>>> a.
>>>
>>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141116/29985b75/attachment-0001.html>