[squid-users] Redirect youtube

[Amos Jeffries]

On 18/12/18 6:24 am, Darvin Rivera Aguilar wrote:
> Hello
> I have Debian 9 and squid from oficial debian repo (Squid Cache: Version
> 3.5.23)
> It's posible to redirect https://www.youtube.com to
> https://m.youtube.com for all users in squid?


Yes. However the Debian official packages do not provide support for
SSL-Bump features. So not with that particular Squid package you
currently have installed.


If you are needing to intercept that HTTPS traffic you will have to
rebuild Squid with SSL-Bump features. Instructions for re-building the
Debian package with OpenSSL are at
<https://wiki.squid-cache.org/KnowledgeBase/Debian>.
(Please use v4 instead of v3.5 for any new installations. Since you are
custom building it is a good idea to build the latest version to get the
most fixes and longest support times.)


If you are using Squid just as a TLS proxy the Squid v4 packages from
Debian Testing/Buster should be fine. There are some issues with TLS
fine tuning still being worked out, but that is separate from this
use-case of yours. Worst-case you can rebuild with OpenSSL as above.


Provided you actually use a proper *redirect* rather than a URL-rewrite
it should work fine:

 acl www_youtube dstdomain www.youtube.com
 deny_info 302:https://m.youtube.com%R www_youtube
 http_access deny www_youtube


Amos