squid?
Darin Perusich
Darin.Perusich at cognigencorp.com
Thu Aug 14 15:26:51 EDT 2003
there are about 30 https sites, all of which are test sites on our
internal network.
Cyber Source wrote:
> just quickly because I am real busy but here is an excerpt from one of
> my squid setups, it has no problem getting to https sites,
> acl all src 192.168.1.1/192.168.1.255
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 23 25 110 143 1024 1025-65535
> acl Safe_ports port 23
> acl Safe_ports port 1024
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 563 # https, snews
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> Is it just one site? or all https sites?
>
>
> On Thu, 2003-08-14 at 14:33, Darin Perusich wrote:
>
>>does anyone have an experience proxying https with squid? i have a squid
>> running in httpd_accelerator mode and working great for http traffic
>>but the https is not behaving correctly. when the request gets to squid
>>it's doing "GET http://test.cognigencorp.com:443/" instead of "GET
>>https://test.cognigencorp.com/".
>>
>>i've set things up so that you don't need to set any proxy settings in
>>the browser, you just type in the url and go. i'm accomplishing this
>>with split-horizon dns zones. i can explain this in more detail if
>>anyone is interested.
>>
>>i've attached the squid.conf, the majority of these options are
>>defaults. i've modified http_port, https_port, acl vpn_network,
>>http_access, httpd_accel_host, httpd_accel_port, httpd_accel_with_proxy,
>>and httpd_accel_uses_host_header.
>>
>>thanks
>>
> --
> Cyber Source <peter at thecybersource.com <mailto:peter at thecybersource.com>>
>
>
--
Darin Perusich
Unix Systems Administrator
Cognigen Corp.
darinper at cognigencorp.com
More information about the nflug
mailing list