[squid-users] Re: Sibling cache peer for a HTTPS reverse proxy

From: Makson <cdlee123_at_gmail.com>
Date: Mon, 28 Jul 2014 02:37:53 -0700 (PDT)

Amos Jeffries wrote
> 2) explicit hostname "serverb.domain:9443". I find it highly unlikely
> that you will be finding server A being requested for URLs at that
> hostname.

We now have the public URL for app.domain set to servera.domain.

Amos Jeffries wrote
> 1) https:// on the URLs. Squid is not suposed to be sending these over
> un-encrypted peer connections. I dont recall any explicit prevention of
> that, but there might be.

A little progress finally, we have two types of clients for our app server,
one is web browser, and the other is eclipse, for the same request, server B
will try to query server A ONLY if the request is sent by web browser, i
tried to look into the log file in server A, no difference between URLs for
the requests sent by these two types of clients, strange?

# record for request sent by web browser in server B
1406539824.298 3 172.17.210.5 TCP_MISS/200 3736 GET
https://servera.domain:9443/ccm/service/com.ibm.team.scm.common.IVersionedContentService/content/com.ibm.team.filesystem/FileItem/_J-m1gK4-EeOvOJ84krOqLg/_fOPWkv3TEeOaa7Y2RPnTQg/FHFMF8a7A01tlvpKekGYG9gxlVc3bigGpRMSA11YKZ4
- SIBLING_HIT/172.17.192.33 application/octet-stream

# record for request sent by eclipse in server B
1406540067.167 409 172.17.210.5 TCP_MISS/200 3670 GET
https://servera.domain:9443/ccm/service/com.ibm.team.scm.common.IVersionedContentService/content/com.ibm.team.filesystem/FileItem/_J-m1gK4-EeOvOJ84krOqLg/_fOPWkv3TEeOaa7Y2RPnTQg/FHFMF8a7A01tlvpKekGYG9gxlVc3bigGpRMSA11YKZ4
- FIRSTUP_PARENT/172.17.96.148 application/octet-stream

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Sibling-cache-peer-for-a-HTTPS-reverse-proxy-tp4667011p4667076.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Mon Jul 28 2014 - 09:37:57 MDT

This archive was generated by hypermail 2.2.0 : Mon Jul 28 2014 - 12:00:05 MDT