[squid-users] sslbump with squid 4.9 and websockets doesn't work

[Alex Rousskov]

On 1/16/20 11:02 AM, Dieter Bloms wrote:

> Does anybody know how to enable wss support in squid, so the website can
> be reached even sslbump is enabled ?

If the service switches to websocket using an HTTP Upgrade mechanism,
then you need at least https://github.com/squid-cache/squid/pull/481

If the service uses websocket without HTTP Upgrade negotiation, then you
need on_unsupported_protocol (with some way of detecting that service
traffic if you do not want to tunnel everything that is not HTTP(S)).

HTH,

Alex.