[squid-users] reply_body_max_size not always enforced

[Eduard Weissmann]

Hi,

I've configured Squid to block large resources:

reply_body_max_size 50 MB all

Blocking works for some urls, (HTTP/1.1):
http://download.thinkbroadband.com/1GB.zip

But it does not work for others (HTTP/2):
https://upload.wikimedia.org/wikipedia/commons/0/0b/Sandro_Botticelli_-_La_nascita_di_Venere_-_Google_Art_Project_-_edited.jpg

I'm wondering: why is the second URL not blocked? Is it because the
response is HTTP/2?

I've read in the docs about how the response size is checked twice and how
that all works, but in the case of both URLs the response has a
content-length header defined.

Using curl for tests:
curl --proxy 127.0.0.1:3128 -v -s "
https://upload.wikimedia.org/wikipedia/commons/0/0b/Sandro_Botticelli_-_La_nascita_di_Venere_-_Google_Art_Project_-_edited.jpg"
1> /dev/null

Thank you

Best regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20191101/2fc7224e/attachment-0001.html>