[squid-users] SSLBUMP for specific domains

Amos Jeffries squid3 at treenet.co.nz
Thu Jan 12 19:13:25 UTC 2023


On 13/01/2023 6:37 am, andre.bolinhas wrote:
>
> Hi
>
> It’s possible configure squid to intercept ssl traffic just for a 
> group of domain and leave the all of rest out of ssl interceptation?
>

Yes, with one caveat: that Squid is able to identify the domain/server 
to make the decision.

> If so, can you send me an example of config?
>
> I have try search for this on Google and in forums but I just find 
> config to intercept all.
>

You will find a simple example here:
<https://wiki.squid-cache.org/Features/SslPeekAndSplice#peek-at-sni-and-bump>


Amos



More information about the squid-users mailing list