Skip to content

SSLproxy 0.10.0

Latest

Choose a tag to compare

@sonertari sonertari released this 02 Nov 19:15

This release showcases major new features:

  • Icap mode of operation for content inspection by ICAP services
  • icapsuricata support for HTTP/1.1, HTTP/2, HTTP/3 (QUIC), POP3, and SMTP protocols
  • HTTP/2 protocol support
  • HTTP/3 and QUIC protocol support (disabled by default via the WITHOUT_HTTP3 switch)

Icap services can be configured using one line or structured Icap specifications, globally, per-proxyspec, or per-filter rule.

IcapFailOpen (yes|no)
IcapConnFailOpen (yes|no)
IcapTimeout 30
IcapPreviewSize 1024
IcapMaxBodySize 4096
IcapMaxInspectionSize 16384
IcapAllow204 (yes|no)
IcapAllow206 (yes|no)
IcapSanitizeRequestLine (yes|no)

Icap icap://host:port,reqmod,respmod,icap_fail_open,conn_fail_open,timeout,preview_size,max_body_size,max_inspection_size,allow_204,allow_206,echo_header,sanitize_request_line
Icap {
    Proto icap
    Server host
    Port port
    Reqmod reqmod
    Respmod respmod
    FailOpen (yes|no)
    ConnFailOpen (yes|no)
    Timeout 30
    PreviewSize 1024
    MaxBodySize 4096
    MaxInspectionSize 16384
    Allow204 (yes|no)
    Allow206 (yes|no)
    EchoHeader x-header-to-echo (e.g. X-Response-Vars)
    SanitizeRequestLine (yes|no)
}