[squid-users] squid http CONNECT

[Alex Rousskov]

On 2/16/21 2:29 AM, Kevin Shell wrote:

> What requirements are needed for smtps imaps pop3s nntps client programs
> to tunnel thru squid proxy?

If your Squid is a forward proxy, then those clients have to support
HTTP (and/or HTTPS) forward proxies. In other words, they should
establish a standard HTTP CONNECT tunnel through Squid.

If you are intercepting their traffic, then there are no special
requirements for those clients. You will have to configure Squid to
splice the intercepted connection before getting to unencrypted bytes so
your Squid will be limited to very basic checks at or below the TLS layer.


HTH,

Alex.