[squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


22.09.15 1:15, Amos Jeffries пишет:
> On 22/09/2015 6:25 a.m., Yuri Voinov wrote:
>>
>> This is dig result:
>>
>> ;; ANSWER SECTION:
>> torproject.org.         3600    IN      A       93.95.227.222
>> torproject.org.         3600    IN      A       154.35.132.70
>> torproject.org.         3600    IN      A       86.59.30.40
>> torproject.org.         3600    IN      A       82.195.75.101
>> torproject.org.         3600    IN      A       38.229.72.16
>>
>> This IP is banned. Completely. Outgoing packets are dropped by ISP.
>>
>> So this is critical to forward ALL session, starting with first packet,
>> into Privoxy, and, then to Tor tunnel.
>>
>> Otherwise session can't be established.
>>
>> The problem enforces with HSTS onto torproject.org URL. Completely
>> HTTPS. From first GET request.
>>
>> This can be solved with Tor Browser itself, but I want to find common
>> solution.
>>
>> This is very simple. Complete HTTPS session must be forward to parent
>> proxy at whole. Because of only HTTP's forwarding possibility is
>> meaningless in HSTS-enabled world.
>
> HSTS is opt-out. Strip the *response* header on the first contact and it
> disappears.
I can't. Because first connection can't occur during ISP ban by IP.
First contact is never occurs.
>
>
>>
>> This is feature request, Amos. Otherwise Squid lacks some critical
>> functionality.
>>
>
> Feature request implies something that is not supported being added.
> CONNECT relay already is supported and works well for many others, just
> apparently not for you.
>
>  ... why?
Don't understand.
>
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJWAFhzAAoJENNXIZxhPexG158H/3g0rZ4+btzOi7xoDzcArKfa
n1m9nT95raM3r/ry0b/Ray8+K+8ZOWsYPrgxAV/XUUCwYzOBaSeFSiWDDlx1PUB+
/AesUdQcDWW014ejh70pE6a4U8wlwPkZecC71Pknq1qtVfjrjAlFE/hL4yIVnT+w
EGEsY2wbmU3+SZEqa1aujx/RWTilKSGjBir9S7Cu8jg2/RdOfmW/dPumm7nXnThn
zFqI269S+JzN9jWHttk4ISkCjdBEVH25flilhYCoQ3+EmaDV2X94dQiMWgo2xjsD
dnaHUN/qcpRXK+Gjpi1T/SqtIDbHn72CX8mQdPZstWDH8kVgN/zdp4jnS1GClOY=
=CjLG
-----END PGP SIGNATURE-----