[squid-users] ACL processing

Alex Rousskov rousskov at measurement-factory.com
Fri Mar 11 01:18:57 UTC 2016


On 03/10/2016 06:12 PM, Alex Samad wrote:

> how can I set it up so that specific URL's are not bumped

You cannot. Peeking or staring at unencrypted SSL client and server
details does not provide Squid with HTTP/URL-level information. Your
splicing/bumping decision has to be made based on unencrypted
SSL/TCP/IP/Ethernet information (SNI, IP addresses, TCP ports, server
certificates, MAC addresses, etc.).

Alex.



More information about the squid-users mailing list