Project

General

Profile

Actions

Bug #7752

closed

Squid 3 reverse proxy - HTTPS==>HTTP fails

Added by Seyed N over 7 years ago. Updated about 7 years ago.

Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Squid
Target version:
-
Start date:
08/03/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
2.3.4_1
Affected Plus Version:
Affected Architecture:
amd64

Description

I configured the package Squid 3 (version 0.4.37 based on Squid-3.5.26) as reverse proxy.

On my pfSense virtual machine (v2.3.4-release-p1), the squid reverse proxy is configured to listen on https port and my web server on http.

The reverse proxy is unable to redirect https flow to http web server.

same bug detailed here : https://forum.pfsense.org/index.php?topic=58905.0

Actions #1

Updated by Jim Pingle over 7 years ago

  • Project changed from pfSense to pfSense Packages
  • Category changed from Unknown to Squid
  • Status changed from New to Feedback
  • Target version deleted (2.3.4-p2)

Using an HTTP backend with an HTTPS frontend works fine in HAProxy if you need it to work right now. The reverse squid feature does not currently have a maintainer, and is not used much, so if this does turn out to be a bug it may be a while before it is fixed.

That thread you linked is very, very old. You should start a new thread detailing your problem to see if anyone has any more up-to-date suggestions.

Actions #2

Updated by Seyed N over 7 years ago

Jim Pingle wrote:

Using an HTTP backend with an HTTPS frontend works fine in HAProxy if you need it to work right now. The reverse squid feature does not currently have a maintainer, and is not used much, so if this does turn out to be a bug it may be a while before it is fixed.

That thread you linked is very, very old. You should start a new thread detailing your problem to see if anyone has any more up-to-date suggestions.

thank you for your quick answer, I will try HAproxy :)

Actions #3

Updated by Kill Bill over 7 years ago

The way the reverse proxy part of the Squid package is written, it will only redirect HTTPS to HTTPS and HTTP to HTTP [1]. Changing this would require pretty much complete redesign. HAproxy is a much better and more flexible option here.

[1] https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/squid_reverse.inc#L254

Actions #4

Updated by Jim Pingle about 7 years ago

  • Status changed from Feedback to Not a Bug
Actions

Also available in: Atom PDF