[squid-users] Squid4 '%<la' empty sometimes
Alex Rousskov
rousskov at measurement-factory.com
Fri Apr 6 14:42:51 UTC 2018
On 04/06/2018 07:59 AM, Amos Jeffries wrote:
> On 07/04/18 00:48, Peter Viskup wrote:
>> # splice at step3 for other TLS connections
>> note acl test_splice_http test_s test_ssl
>> ssl_bump splice sslstep3 test_s test_ssl
>>
>> logformat ... acl=%{acl}note ...
> Since the 'note ...' directive is
> ONLY evaluated right at logging time it may show the wrong thing if the
> ACL state changes between the initial directive (ssl_bump) evaluation
> and the logging at the end of the transaction.
Yes, and the correct solution to those problems is the new
annotate_transaction and/or annotate_client ACLs. They can be used to
reliably remember and log ACL-based decisions.
Alex.
More information about the squid-users
mailing list