RE: [squid-users] http and https redirection

From: Elsen Marc <elsen@dont-contact.us>
Date: Fri, 1 Apr 2005 11:16:34 +0200

 
>
> Hi,
>
> Yesterday, I was asking how to redirect a traffic to a
> specific proxy server.
> Again I would like to define the situation first. We have our
> proxy server we
> are goint to connect to an ISP with 2 proxy server, the first
> server is
> proxy.ISP.net port 8080 and the 2nd is ssl-proxy.ISP.net port
> 8080. The
> objective is to serve my clients request, if its port http my
> proxy should
> forward it proxy.ISP.net and if its https it should forward it to
> ssl-proxy.ISP.net.
>
> Now thanks to Elsen Marc he given me some ponits which to
> define Define the two
> isp proxies as parents and use the 'cache_peer_access'
> directive to forward
> http/https to the designated ISP proxy. I try to do my home
> work and I come up
> with this config.
>
> acl SSL method CONNECT
> never_direct allow SSL
> cache_peer proxy.ISP.net parent 8080 0 default
> cache_peer ssl-proxy.ISP.net parent 8080 0 default
> cache_peer_access proxy.ISP.net allow !SSL
>
>
> As I understand with what I did the default parent proxy
> proxy.ISP.net wherein I
> cannot use proxy.ISP.net for ssl request.
>
> My questions: If the request is http then there is no doubt
> that Im using the
> proxy.ISP.net, what if the request is https does my configuration will
> automatically forward it to ssl-proxy.ISP.net?
>
> I'm would highly appreciate it if you you could give a
> solution and example
> configuration this problem.
>
 
 I would be more inclined to write :

    cache_peer_access proxy.ISP.net deny SSL
 
 and also include
 
    never_direct allow all
 
 in squid.conf as I presume you must use the ISP proxies at all times
 and the local squid has no direct internet access.

 This should do it, I guess.

 M.

 
Received on Fri Apr 01 2005 - 02:18:13 MST

This archive was generated by hypermail pre-2.1.9 : Sun May 01 2005 - 12:00:03 MDT