[squid-users] GENEVE?

[Alex Rousskov]

On 8/25/20 3:48 PM, Jonas Steinberg wrote:

> Any advice on where I would find such a protocol wrapper, were one to exist?

Sorry, I do not know enough about GENEVE to suggest GENEVE-specific tool
aggregators.


>  Also I assume this would mean compiling my own squid then?

I would expect Squid to be unaware of that 3rd-party protocol wrapper.

For example, you are probably familiar with stunnel that "wraps"
plain-text TCP traffic into TLS, enabling TLS-unaware applications to
"support" TLS. I speculate one could create a tool that wraps GENEVE
traffic into HTTP CONNECT transactions that GENEVE-unaware HTTP proxies
like Squid can tunnel.

Alex.


> On 8/25/20, 2:39 PM, Alex Rousskov wrote:
> 
>     On 8/25/20 3:21 PM, Jonas Steinberg wrote:
> 
>     > is this something I could submit as a feature request via github or
>     > is it too crazy or out-of-scope for the roadmap?
> 
>     I am not familiar with draft-ietf-nvo3-geneve details, but I see nothing
>     particularly crazy on the surface of that draft: Squid is already
>     capable of tunneling intercepted TLS and forwarded HTTP CONNECT traffic
>     while GENEVE seems like one more way to tell Squid about the desired
>     tunnel end points.
> 
>     Perhaps some form of GENEVE support is already possible via some kind of
>     3rd-party wrappers? FWIW, the possible existence of such protocol
>     wrappers was the primary reason I did not give a straight "no" answer to
>     your original question...
> 
> 
>     You may file a feature request on Squid Bugzilla, keeping the following
>     FAQ in mind:
>     https://wiki.squid-cache.org/SquidFaq/AboutSquid#How_to_add_a_new_Squid_feature.2C_enhance.2C_of_fix_something.3F
> 
> 
>     HTH,
> 
>     Alex.
> 
> 
>     > On 8/25/20, 1:54 PM, Alex Rousskov wrote:
>     > 
>     >     On 8/25/20 2:43 PM, Jonas Steinberg wrote:
>     >     > Do recent versions of Squid support GENEVE?
>     > 
>     >     I believe Squid is unaware of draft-ietf-nvo3-geneve.
>     > 
>     >     Alex.
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>