Can someone familiar with squid confirm whether the following specific setup is possible:

  • serve as reverse proxy only
  • accept only TLS 1.2 connections from the internet facing side
  • decrypts TLS 1.2 and forward to web server as clear text HTTP
  • do not cache anything
  • 3
    Why squid? Look at haproxy. – wurtel May 10 at 10:49
  • @wurtel Does your question imply that this is specifically possible with haproxy ? – Waslap May 10 at 11:09
  • Yes, it is designed as a reverse proxy (which squid is not, although it can work as one). – wurtel May 10 at 11:28
  • 1
    HAproxy, pound, varnish, Apache, relayd for FreeBSD/OpenBSD are all more suited than Squid as a reverse proxy. – Rui F Ribeiro May 10 at 11:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.