Re: [squid-users] FW: X_FORWARDED_PROTO Support?

Visser, Peter (ZGM) wrote:
> Thanks for your reply.
>
> So is it possible to have Squid send a 302 redirect back to the client, replacing the http with https, instead of the webserver, but only for certain URL/Website? Other sites should remain HTTP.
>

Yes. The deny_info directive will take a URL and redirect with a 302 to
that URL when the ACL its assigned to blocks someone.

Squid 3.2 permits templating in one step like so:

   acl bounce proto HTTP
   http_access deny bounce
   deny_info https://%H%u bounce

For older releases which only provide passing the full original URL (%s)
to a bounce handler. The handler needs to do a second bounce only
altering the http/https protocol piece. Like so:

   acl bounce proto HTTP
   http_access deny bounce
   deny_info https://example.com/bounce?%s bounce

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.6
   Beta testers wanted for 3.2.0.1