[squid-users] ICMP and QUIC

[Alex Rousskov]

On 2024-07-08 00:06, Jonathan Lee wrote:

> When watching facebook reels everything works as expected after about
> 15 minutes the system starts to attempt to use QUIC and after my iMac
> fan goes crazy and the website locks up..

Squid does not proxy UDP traffic (including QUIC). UDP traffic should 
not be forwarded/redirected/intercepted/etc. to Squid primary TCP 
listening ports (i.e. http_port, https_port, and ftp_port).

If you see signs of UDP traffic getting to Squid primary TCP ports, then 
something is misconfigured outside of Squid. In either case, the 
solution probably lies outside of Squid.


HTH,

Alex.


> HTTPS was reserved for 443. QUIC is also using UDP 443 and not following proper protocol rules.
> 
> I do understand that QUIC is HTTP3 and uses UDP over 443 only. Again from a cybersecurity perspective how do you set up this protocol in the proxy ?
> 
> Here is the photo of the pcap showing the issue..
> 
> Does anyone know what to do to fix this?
> 
> 
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> https://lists.squid-cache.org/listinfo/squid-users