Re: [squid-users] reverse SSL proxy with one IP? is that possible?

On 10/06/2013 3:21 p.m., Luis Daniel Lucio Quiroz wrote:
> Hello,
>
> Im a little ut of update (since squid3.1) and I wonder if this is
> possible to do with Squid3.3.
>
> - Reverse proxy with a single IP, able to forward to different servers
> depending on hostname request.
>
> LD

Sort of and maybe.

3.3 development has mostly been in the area of "ssl-bump" interception
and improving the security for intercepted traffic. However, this does
have a small amount of knock-on effects for the reverse proxy usage.

Firstly, I'm not aware of anyone successfully doing this so you are in
experimental areas now...

You could try setting your proxy up as if it were a port 443 / HTTPS
interceptor with server-first ssl-bumping. The logics enabled inside
Squid by the server-first options are what you are asking for, but the
big question is whether that will work in reverse-proxy traffic without
screwing things up.

Amos
Received on Mon Jun 10 2013 - 11:19:42 MDT