Re: [squid-users] Squid Reverse - Add custom header

On 30/12/2012 6:04 a.m., captchrisd wrote:
> I am trying to run many HTTP and HTTPS website behind a Squid Reverse Proxy.
> But it is not acceptable to run the site in HTTPS only, so I need to
> redirect to HTTPS on occasion. But my backend web server does not know the
> request was made in HTTPS due to the reverse proxy.
>
> I need to be able to add a custom header the the request as it passes
> through the reverse proxy. I want to add X-FORWARDED-SSL header to each
> request that came in as HTTPS before it is forwarded to the correct
> webserver.
>
> I have seen some discussion about header_replace but that doesn't seem
> appropriate as I need to ADD the header, but only if the request came in as
> HTTPS.
>
> Could someone please help me with how the squid.conf file should be crafted
> to do this? Or is it not possible?

That feature is available squid-3.3.

Be careful though. The best way to present this information is to
*actually* encrypt the link between Squid and the web server. Not to
just inform the webserver that some external link was encrypted while
sending everything in the clear.

Amos
Received on Sun Dec 30 2012 - 07:18:23 MST