[squid-users] Squid Websocket Issue

[Hardik Dangar]

can you give me one example please ?
like in the above example.
w4.web.whatsapp.com domain is fixed
are you suggesting i can create acl and by pass it to squid ?



On Sat, Dec 17, 2016 at 8:21 PM, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> On 17/12/2016 10:16 p.m., Hardik Dangar wrote:
> > Here is some information about my squid version,
> >
> > Squid Cache: Version 3.5.22-20161115-r14113
> <snip>
> > Now the issue is whenever someone requests a page which contains web
> socket
> > requests response is always bad request.
> > Here is an example,
> >
> > Request URL:wss://w4.web.whatsapp.com/ws
> > Request Method:GET
> > Status Code:400 Bad Request
> >
>
> Squid does not yet support using Upgrade for "websocket" protocol,
>
>
> > Request Headers
> > #################
> > Connection:Upgrade
> ...
> > Upgrade:websocket
> ...
> >
> > My question is how we can work with web socket requests in squid or if
> not
> > by pass them squid. My squid instance is in interception mode and
> requests
> > are intercepted at instance via iptables and forwarded to squid using
> below
> > rules,
>
> You need to prevent these transactions from being bump'ed. If you want
> that protocol to work they need to be splice'd by your ssl_bump rules.
> How you determine which ones is a bit of a problem.
>
> Amos
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20161219/17704a7e/attachment.html>