On 2025-10-17 05:57, Gonzalo Vázquez Enjamio wrote:

Is it possible to handle HTTPS requests and log them in a transparent proxy with Squid without using an SSL Bump?

If you are asking about intercepted TLS connections (i.e. https_port), then all Squid can do with them (without SslBump) is to log TCP-level details of each connection. No individual HTTP requests are visible to Squid in this setup.

If you are asking about plain text HTTP requests for "https://..."; targets/URLs arriving on an intercepted plain TCP connection (i.e. http_port), then Squid should be able to handle (e.g., deny, forward, cache, and log) those requests individually.

If you do not know which case applies to you, it is most likely the first case because plain "GET https://..."; requests are rare and are usually seen in non-intercepting setups.


HTH,

Alex.

_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users

Reply via email to