Repository navigation
This release showcases major new features:
- Icap mode of operation for content inspection by ICAP services
- icapsuricata support for
HTTP/1.1,HTTP/2,HTTP/3 (QUIC),POP3, andSMTPprotocols - HTTP/2 protocol support
- HTTP/3 and QUIC protocol support (disabled by default via the
WITHOUT_HTTP3switch)
Icap services can be configured using one line or structured Icap specifications, globally, per-proxyspec, or per-filter rule.
IcapFailOpen (yes|no)
IcapConnFailOpen (yes|no)
IcapTimeout 30
IcapPreviewSize 1024
IcapMaxBodySize 4096
IcapMaxInspectionSize 16384
IcapAllow204 (yes|no)
IcapAllow206 (yes|no)
IcapSanitizeRequestLine (yes|no)
Icap icap://host:port,reqmod,respmod,icap_fail_open,conn_fail_open,timeout,preview_size,max_body_size,max_inspection_size,allow_204,allow_206,echo_header,sanitize_request_line
Icap {
Proto icap
Server host
Port port
Reqmod reqmod
Respmod respmod
FailOpen (yes|no)
ConnFailOpen (yes|no)
Timeout 30
PreviewSize 1024
MaxBodySize 4096
MaxInspectionSize 16384
Allow204 (yes|no)
Allow206 (yes|no)
EchoHeader x-header-to-echo (e.g. X-Response-Vars)
SanitizeRequestLine (yes|no)
}