[squid-users] Passing Proxy Protocol Headers to external ACL

[Alex Rousskov]

On 6/13/21 7:31 AM, Frida Safran wrote:

>  1. Is it possible to pass proxy protocol headers to an external acl as
>     part of the format?

It should be possible. Use %proxy_protocol::>h logformat %code in your
external_acl_type FORMAT configuration. We added that support to Squid
v5. Not available in the official v4.


>  2. Is it possible to pass all/specific icap headers to an external acl?
>     I have been trying to use %icap::>h to pass all the icap headers to
>     an external acl, but it resolves to "-"

It should be possible if your external ACL is evaluated _after_ the
corresponding ICAP headers are received, but I would not be surprised if
there are bugs in this area -- the ICAP headers may be available but not
 provided to the ACL evaluation code. Which squid.conf directive is
triggering your external ACL evaluation in this use case?


HTH,

Alex.