[squid-users] URL filtering technical

[Lucas Vicente Pereira]

Good Evening, Community

When thinking about URL filtering (http and or https), Which one is the best technique you recommend for integration with Squid 5.7?

Environment information:
 ~2500 users
3 x Internet links 1 Gbps each
Average HTTP requests per minute since start: 65956.1
Iptables REDIRECT for squid for transparent mode

1 - External_acl (e.g.:

external_acl_type webfilter ipv4 ttl=300 children-startup=40 children-max=256 %>ha{SSLproxy} %ACL %ssl::>sni %>ha{REFERER} %URI %SRC %SRCPORT %DST %PORT %>eui % <h{Content-Type} %>ha{Content-Type} %<h{Content-Length} %>ha{Content-Length} %MYPORT %MYADDR %un %METHOD %>ha{USER-AGENT} /sbin/ webfilter
acl acl_webfilter_access external webfilter
acl acl_webfilter_reply external webfilter

2 - I-CAP Servers

3 - url_rewrite_program (eg:
url_rewrite_program /sbin/webfilter - url_rewrite_children 16 m 4 startup=8 idle=2 concurrency= -l /var/squid/logs 4

Thanks a lot.

Sincerely,
Lucas Pereira

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20221216/a0d6f010/attachment.htm>