[squid-users] websockets through Squid

[Alex Rousskov]

On 10/7/20 4:08 AM, Vieri wrote:

> I'd like to allow websockets from specific domains through Squid in
> intercept sslbump mode.

> I am obviously not using on_unsupported_protocol properly.

WebSocket handshake looks like HTTP so on_unsupported_protocol is not
applicable to the WebSocket protocol -- Squid obviously supports HTTP.

To allow WebSocket tunnels, you need http_upgrade_request_protocols
available since v5.0.4. IIRC, the feature is compatible with bumped
connections, but I did not check closely.


HTH,

Alex.