Re: [squid-users] Intercept HTTPS without using certificates - Just apply a QoS on the connexion

If your company allows you, you could look into a relatively
inexpensive Linux-based software router called Mikrotik. They have
something called PCQ which does well as a QOS policy.

Regards

On Fri, May 16, 2014 at 7:03 PM, Antoine Klein <klein.anto_at_gmail.com> wrote:
> Ok i fear to waste many time to understand that, but it could be interesting ^^
>
> Thanks for your replies !
>
> 2014-05-15 15:10 GMT-04:00 Alex Crow <alex_at_nanogherkin.com>:
>> Hi,
>>
>> Welcome to the practically incomprehensible world of QoS on Linux - look up
>> "LARTC" and then feel the fear!
>>
>> It's really powerful but even after 14 years of managing Linux gateways I
>> still prefer you just use shorewall to take away the complexity - and you
>> are welcome to call me lazy ;-)
>>
>> Alex
>>
>>
>> On 15/05/14 20:04, Antoine Klein wrote:
>>>
>>> Ok thanks, it could be a good idea !
>>>
>>> Do you know if we can apply a QoS with the bucket concept of delay
>>> pool using the Linux QoS Tools ?
>>>
>>> 2014-05-15 14:41 GMT-04:00 Leonardo Rodrigues <leolistas_at_solutti.com.br>:
>>>>
>>>> Em 15/05/14 14:59, Antoine Klein escreveu:
>>>>
>>>>> Hi there,
>>>>>
>>>>> I need to install squid to apply a QoS in a private network with the
>>>>> delay
>>>>> pool.
>>>>> In fact, this network offer a public WIFI, so that's not possible to
>>>>> configure a proxy on clients.
>>>>>
>>>>> Is it possible to intercept HTTPS connexion, apply a Delay Pool and
>>>>> forward the request without decipher the SSL packet ?
>>>>>
>>>> I really dont think that's possible. Anyway, you can always use your
>>>> Linux (or whatever OS you're using) QoS tools to acchieve something
>>>> similar
>>>> to delay pools but on NATted connections. You can have squid intercepting
>>>> TCP/80 connections and apply delay pools, the TCP/443 (and all other
>>>> indeed)
>>>> connections can be throttled by QoS SO tools.
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>>
>>>> Atenciosamente / Sincerily,
>>>> Leonardo Rodrigues
>>>> Solutti Tecnologia
>>>> http://www.solutti.com.br
>>>>
>>>> Minha armadilha de SPAM, NÃO mandem email
>>>> gertrudes_at_solutti.com.br
>>>> My SPAMTRAP, do not email it
>>>>
>>>>
>>>>
>>>
>>>
>>
>
>
>
> --
> Antoine KLEIN
Received on Mon Jun 30 2014 - 16:06:15 MDT