[squid-users] Squid 6.2 with WCCP

[Amos Jeffries]

On 22/08/23 01:34, Alex Rousskov wrote:
> On 8/21/23 05:06, Callum Haywood wrote:
>> 
>> Does anyone understand what is causing these errors? Are there any 
>> known issues or patches in progress?
> 
> A few years ago, several serious problems were discovered in WCCP code, 
> including security vulnerabilities:
> 
> https://github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82
> 
> Some of the WCCP bugs were fixed without testing; developers fixing 
> those bugs could not easily test WCCP. Some of the old WCCP bugs 
> remained and some of the new fixes were buggy.
> 
> Today, WCCP code remains problematic. If your customers rely on WCCP, 
> consider investing into revamping that neglected and buggy feature.
> 

This PR <https://github.com/squid-cache/squid/pull/970> has some 
progress towards a fix of those. See the latest comment (currently Sept 
2022) for issues that still need to be resolved before that PR is ready 
for merge attempt.

The major issue remains the ability to test.

HTH
Amos