RE: [squid-users] Google SSL searches

Ah, good to know, thanks for the info.

Thanks,
     Dean Weimer
     Network Administrator
     Orscheln Management Co

> -----Original Message-----
> From: Henrik Nordström [mailto:henrik_at_henriknordstrom.net]
> Sent: Friday, May 28, 2010 10:00 AM
> To: Dean Weimer
> Cc: squid-users_at_squid-cache.org
> Subject: RE: [squid-users] Google SSL searches
>
> fre 2010-05-28 klockan 09:46 -0500 skrev Dean Weimer:
> > Henrik,
> > In cases like this, is it better to use the port 443 acl like you did
> > in your example, instead of the proto HTTPS option? Just curious if
> > the port acl is faster or has some other advantage over the proto acl.
>
> The proto acl won't work in this case as the protocol is not known on
> CONNECT requests. All Squid knows about https requests when running as a
> proxy is that the client wants to connect to hostname:port.
>
> proto https acls only works when Squid is operating as a proxy at the
> https level, i.e. when used as a reverse proxy or when using sslbump.
>
> Regards
> Henrik
>
>

Received on Fri May 28 2010 - 15:12:16 MDT