[squid-users] Passing XML through squid proxy

[Alex Rousskov]

On 5/5/20 10:22 AM, Cindy Yoho wrote:

> They are not actually passing a url to the squid server. The nginx config allowed me to have a line as such:
> 
> proxy_pass https://calcconnect.vertexsmb.com/vertex-ws/services/CalculateTax

> The xml just got passed straight through to the url in the config
> file.    Is there something comparable in squid I can set to tell it
> where to pass the code?   I am working on getting the wireshark
> packets but the  server is in a secure zone so there aren't any easy
> options for getting a file from it.

I am not intimate with nginx, but its proxy_pass configuration sounds
similar to Squid's cache_peer directive:
http://www.squid-cache.org/Doc/config/cache_peer/

Beyond that, without packet traces (or Squid cache.logs with
debug_options set to "ALL,2" or higher), it would be difficult for me to
say anything specific.


Good luck,

Alex.



> -----Original Message-----
> From: Alex Rousskov <rousskov at measurement-factory.com> 
> Sent: Friday, May 1, 2020 11:26 AM
> To: Cindy Yoho <Cyoho at umpublishing.org>; squid-users at lists.squid-cache.org
> Subject: [External] Re: [squid-users] Passing XML through squid proxy
> 
> On 5/1/20 10:56 AM, Cindy Yoho wrote:
> 
>> When the Order Entry server sends the XML code, we get an error 
>> returned to the server making the request
> 
> Perhaps your Order Entry server does not use HTTP when talking to Squid?
> 
> Squid does not really care about the request payload, but the request has to use the HTTP transport protocol. So sending a SOAP/XML request payload over HTTP is OK, but sending raw SOAP (or SOAP over something other than HTTP) is not.
> 
> If you can post a packet capture of the Order Entry server talking to Squid (not the text interpretation of Squid response but the actual packets going from the Order Entry server to Squid; use libpcap format which is often the default for Wireshark export), then we should be able to confirm whether your Order Entry server is using the right protocol to talk to/through Squid.
> 
> The same packet capture can point to HTTP request problems if the Order Entry server is using HTTP but sending some HTTP token that Squid does not like (or not sending an HTTP token that Squid needs).
> 
> 
> HTH,
> 
> Alex.
>