RE: [squid-users] Trailing Slash / Using Reverse Proxy

From: Brad Taylor <btaylor@dont-contact.us>
Date: Mon, 8 Jan 2007 18:20:13 -0500

>> Request for https://www.example.com/test will not work through Squid
but
>> IIS will add the trailing slash https://www.example.com/test/

>What happens here is that the web server says "Sorry, the URL you
>requested is not valid. You should go to http://my.server.name/test/
>instead.

>> Going through Squid the browser receives "The page cannot be
displayed"
>> with the address as http://10.10.1.108/test/ The IP address is the
>> internal IP address of the IIS web server and the request changed
from
>> https to http.

>Set up the reverse proxy not rewriting the Host name component and
>things will work much better. This way the web server knows it's
>external name and the URLs generated by the web server will be correct.

How would I setup the reverse proxy to not rewrite the host name
componet? Here is my config file:

http_port 80
https_port 443 cert=/etc/squid/example.com-11-07.pem
key=/etc/squid/example.com_key-11-07.pem options=NO_SSLv2
cipher=DEFAULT:!EXPORT:!LOW
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl JS url_regex .js$
no_cache deny JS
acl CSS url_regex .css$
no_cache deny CSS
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
#Suggested default:
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
refresh_pattern -i \.jpg$ 0 100% 10080
refresh_pattern -i \.gif$ 0 100% 10080
refresh_pattern -i \.png$ 0 100% 10080
refresh_pattern -i \.bmp$ 0 100% 10080
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl CONNECT method CONNECT
acl port80 myport 80
acl port443 port 443
acl port563 port 563
acl TheOriginServer dst 10.10.1.100
#Recommended minimum configuration:
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
http_access allow port563
http_access allow port443
http_access deny port80
http_access allow TheOriginServer
http_access deny all
http_reply_access allow all
icp_access allow all
httpd_accel_host 10.10.1.100
httpd_accel_port 80
httpd_accel_single_host on
httpd_accel_with_proxy off
deny_info https://www.example.com/ port80
coredump_dir /var/spool/squid
visible_hostname www.example.com
logfile_rotate 9
Received on Mon Jan 08 2007 - 16:19:14 MST

This archive was generated by hypermail pre-2.1.9 : Thu Feb 01 2007 - 12:00:01 MST