2026-01-13

Author: squidadm

squid-users/2026-January.txt

@@ -1734,3 +1734,211 @@ In this attempt, I tried to visit google. In this case lan dns could not provide
 An HTML attachment was scrubbed...
 URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260113/9378bbe7/attachment.htm>
 
+From ben.goz87 at gmail.com  Tue Jan 13 12:45:30 2026
+From: ben.goz87 at gmail.com (Ben Goz)
+Date: Tue, 13 Jan 2026 14:45:30 +0200
+Subject: [squid-users] Squid integration with Netskope forward to proxy
+In-Reply-To: <02fb7c5d-1f96-4e21-aee6-f19d8ba92227@treenet.co.nz>
+References: <CADAqQfwgPPK-qEFjp8kJzn30GqyKTpefLmA8xm0S76eqQuab4A@mail.gmail.com>
+ <aWS0bVL4_t0a26gP@fantomas.sk>
+ <02fb7c5d-1f96-4e21-aee6-f19d8ba92227@treenet.co.nz>
+Message-ID: <CADAqQfw=rF2NBtTNPvADZbLPh7wNL5i-xsLLnPJbLmJTDBCWzw@mail.gmail.com>
+
+Hi Amos,
+I'm using ssl-bump it's cooperate with https_port?
+
+??????? ??? ??, 12 ????? 2026 ?-19:12 ??? ?Amos Jeffries?? <?
+squid3 at treenet.co.nz??>:?
+
+> On 12/01/2026 21:44, Matus UHLAR - fantomas wrote:
+> > On 11.01.26 16:58, Ben Goz wrote:
+> >> My customer netskope cloud configures forward to proxy to my squid
+> proxy.
+> >> The forwarding works only if Netskope's ssl decryption disabled, If ssl
+> >> decryption enabled
+> >> I can't see in the access log the traffic forwards to squid from
+> >> Netskope.
+> >>
+> >> I suspect that Netskope forwards encrypted data to squid but I'm not
+> sure
+> >> that is the case because the Connect request is never encrypted and I
+> >> don't
+> >> see it on the access log.
+> >
+> >
+> >> Anyones know how Netskope and squid can work together without disabling
+> >> Netskope decryption (MITM)?
+> >
+> > This is completely issue of netskope proxy.
+> >
+> > If netskope proxy decides to forward or not to forward request to squid,
+> > squid can't do anything with it.
+>
+>
+> Nod. If there is no CONNECT tunnel request reaching Squid then it is not
+> being forwarded in the classical "over-HTTP" way.
+>
+> I would check to see what is happening on port 443 when the traffic is
+> "forwarded". HTTPS may actually be routed rather than relayed/proxied.
+> Or perhapse it is being sent to some other port number, though how to
+> find that may require asking your customer or Netskope directly for more
+> details on how it is setup there.
+>
+>
+> FWIW, Squid can receive HTTPS/443 traffic fine. Just use "https_port"
+> (note the 's') to receive it instead of the regular HTTP port, and will
+> need a SSL server certificate (can be self-signed) for your Squid which
+> the customer software trusts.
+>
+>
+> HTH
+> Amos
+>
+> _______________________________________________
+> squid-users mailing list
+> squid-users at lists.squid-cache.org
+> https://lists.squid-cache.org/listinfo/squid-users
+>
+-------------- next part --------------
+An HTML attachment was scrubbed...
+URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260113/86790dfa/attachment.htm>
+
+From jonathanlee571 at gmail.com  Mon Jan 12 23:04:26 2026
+From: jonathanlee571 at gmail.com (Jonathan Lee)
+Date: Mon, 12 Jan 2026 15:04:26 -0800
+Subject: [squid-users] Cache pfSense fix
+In-Reply-To: <F20BED64-EBE4-4559-B8C5-1C207283FED3@gmail.com>
+References: <b5496a0e-7587-4618-9d90-76d302ce39cf@treenet.co.nz>
+ <F20BED64-EBE4-4559-B8C5-1C207283FED3@gmail.com>
+Message-ID: <CD283EB6-3252-4A18-8D3E-E65F86F93D8C@gmail.com>
+
+I think I did this correctly 
+
+https://github.com/squid-cache/squid-cache.github.io/pull/45?
+Add pfSense NVMe cache overlay documentation by JonathanDLee24 ? Pull Request #45 ? squid-cache/squid-cache.github.io
+github.com
+
+> On Jan 12, 2026, at 14:02, Jonathan Lee <jonathanlee571 at gmail.com> wrote:
+> 
+> Sure thing I have a better version to add to it 
+> Sent from my iPhone
+> 
+>> On Jan 12, 2026, at 08:51, Amos Jeffries <squid3 at treenet.co.nz> wrote:
+>> 
+>> ?Nice. Thank you.
+>> 
+>> Would you mind adding this to the Squid wiki?
+>> 
+>> IMO it should go as a new file in this part of the wiki repository:
+>> <https://github.com/squid-cache/squid-cache.github.io/tree/main/docs/ConfigExamples/Caching>
+>> 
+>> (you can use the existing WindowsUpdates page there as an example/template layout to match the rest of the ConfigExamples section).
+>> 
+>> 
+>> 
+>> Cheers
+>> Amos
+>> 
+>>> On 10/01/2026 09:07, Jonathan Lee wrote:
+>>> Great find
+>>> pfSense Squid Cache on NVMe (Persistent Across Reboots)
+>>> ======================================================
+>>> Goal:
+>>> -----
+>>> Use an existing directory on an already-mounted NVMe drive
+>>> as Squid?s cache, while satisfying pfSense?s requirement
+>>> that the cache live under /var/squid.
+>>> This method:
+>>> - Works across reboots
+>>> - Survives pfSense & Squid upgrades
+>>> - Does NOT use symlinks (which do not work)
+>>> - Does NOT destroy existing data on the drive
+>>> --------------------------------------------------------
+>>> Prerequisites:
+>>> --------------
+>>> - NVMe drive already mounted (example: /nvme)
+>>> - Existing cache directory on the drive:
+>>>  /nvme/LOGS_Optane/Squid_Cache
+>>> - Squid package installed
+>>> --------------------------------------------------------
+>>> Step 1: Create the mount point under /var/squid
+>>> ------------------------------------------------
+>>> (Only creates an empty directory if it doesn?t exist)
+>>> mkdir -p /var/squid/cache
+>>> --------------------------------------------------------
+>>> Step 2: Bind-mount (nullfs) the existing directory
+>>> --------------------------------------------------
+>>> (This makes the NVMe directory appear inside /var/squid)
+>>> mount_nullfs /nvme/LOGS_Optane/Squid_Cache /var/squid/cache
+>>> NOTE:
+>>> - No data is moved or copied
+>>> - Existing cache contents are used directly
+>>> --------------------------------------------------------
+>>> Step 3: Make the mount persistent (IMPORTANT)
+>>> ------------------------------------------------
+>>> pfSense GUI:
+>>> 1. Go to:
+>>>   System ? Advanced ? fstab
+>>> 2. Click "Add"
+>>> 3. Set the following:
+>>>   - Type:        nullfs
+>>>   - Device:      /nvme/LOGS_Optane/Squid_Cache
+>>>   - Mount point: /var/squid/cache
+>>>   - Options:     rw
+>>> 4. Save
+>>> 5. Apply Changes
+>>> --------------------------------------------------------
+>>> Step 4: Configure Squid to use the new path
+>>> -------------------------------------------
+>>> pfSense GUI:
+>>> Services ? Squid Proxy Server ? Local Cache
+>>> Set:
+>>> Cache directory:
+>>>  /var/squid/cache
+>>> Save and restart Squid.
+>>> --------------------------------------------------------
+>>> Step 5: Verify
+>>> --------------
+>>> Check that the mount is active:
+>>> df -h | grep squid
+>>> mount | grep nullfs
+>>> You should see the NVMe filesystem mounted at:
+>>>  /var/squid/cache
+>>> --------------------------------------------------------
+>>> Behavior After Reboot:
+>>> ----------------------
+>>> - Mount persists across reboots
+>>> - pfSense package manager no longer complains
+>>> - Squid cache cleanup works normally
+>>> - No manual remounting required
+>>> --------------------------------------------------------
+>>> Important Notes:
+>>> ----------------
+>>> - Symlinks do NOT work (pfSense resolves real paths)
+>>> - nullfs is the correct and supported workaround
+>>> - MSDOS/FAT filesystems work but are not ideal long-term
+>>> - UFS or ZFS is recommended if you ever reformat
+>>> --------------------------------------------------------
+>>> End of file
+>>> Sent from my iPhone
+>>> _______________________________________________
+>>> squid-users mailing list
+>>> squid-users at lists.squid-cache.org
+>>> https://lists.squid-cache.org/listinfo/squid-users
+>> 
+>> _______________________________________________
+>> squid-users mailing list
+>> squid-users at lists.squid-cache.org
+>> https://lists.squid-cache.org/listinfo/squid-users
+
+-------------- next part --------------
+An HTML attachment was scrubbed...
+URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260112/ff7dd0c6/attachment-0001.htm>
+-------------- next part --------------
+A non-text attachment was scrubbed...
+Name: 45.png
+Type: image/png
+Size: 137279 bytes
+Desc: not available
+URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260112/ff7dd0c6/attachment-0001.png>
+

squid-users/2026-January/027739.html

@@ -12,7 +12,7 @@
            }
    </style>
    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
-   <LINK REL="Previous"  HREF="027753.html">
+   <LINK REL="Previous"  HREF="027758.html">
    <LINK REL="Next"  HREF="027742.html">
  </HEAD>
  <BODY BGCOLOR="#ffffff">
@@ -23,7 +23,7 @@ <H1>[squid-users] peer-select.cc, cache_peer and dns queries</H1>
        </A><BR>
     <I>Fri Jan  9 22:19:10 UTC 2026</I>
     <P><UL>
-        <LI>Previous message (by thread): <A HREF="027753.html">[squid-users] Cache pfSense fix
+        <LI>Previous message (by thread): <A HREF="027758.html">[squid-users] Cache pfSense fix
 </A></li>
         <LI>Next message (by thread): <A HREF="027742.html">[squid-users] peer-select.cc, cache_peer and dns queries
 </A></li>
@@ -88,11 +88,12 @@ <H1>[squid-users] peer-select.cc, cache_peer and dns queries</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>
         <!--threads-->
-	<LI>Previous message (by thread): <A HREF="027753.html">[squid-users] Cache pfSense fix
+	<LI>Previous message (by thread): <A HREF="027758.html">[squid-users] Cache pfSense fix
 </A></li>
 	<LI>Next message (by thread): <A HREF="027742.html">[squid-users] peer-select.cc, cache_peer and dns queries
 </A></li>

squid-users/2026-January/027740.html

@@ -72,6 +72,7 @@ <H1>[squid-users] Squid integration with Netskope forward to proxy</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>

squid-users/2026-January/027741.html

@@ -12,7 +12,7 @@
            }
    </style>
    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
-   <LINK REL="Previous"  HREF="027746.html">
+   <LINK REL="Previous"  HREF="027757.html">
    <LINK REL="Next"  HREF="027744.html">
  </HEAD>
  <BODY BGCOLOR="#ffffff">
@@ -23,7 +23,7 @@ <H1>[squid-users] Can I safely increase MAX_URL to 12KByte?</H1>
        </A><BR>
     <I>Mon Jan 12 07:23:32 UTC 2026</I>
     <P><UL>
-        <LI>Previous message (by thread): <A HREF="027746.html">[squid-users] Squid integration with Netskope forward to proxy
+        <LI>Previous message (by thread): <A HREF="027757.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
         <LI>Next message (by thread): <A HREF="027744.html">[squid-users] Can I safely increase MAX_URL to 12KByte?
 </A></li>
@@ -71,11 +71,13 @@ <H1>[squid-users] Can I safely increase MAX_URL to 12KByte?</H1>
 
 
 
+
+
 <!--endarticle-->
     <HR>
     <P><UL>
         <!--threads-->
-	<LI>Previous message (by thread): <A HREF="027746.html">[squid-users] Squid integration with Netskope forward to proxy
+	<LI>Previous message (by thread): <A HREF="027757.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
 	<LI>Next message (by thread): <A HREF="027744.html">[squid-users] Can I safely increase MAX_URL to 12KByte?
 </A></li>

squid-users/2026-January/027742.html

@@ -59,6 +59,7 @@ <H1>[squid-users] peer-select.cc, cache_peer and dns queries</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>

squid-users/2026-January/027743.html

@@ -74,6 +74,7 @@ <H1>[squid-users] Squid integration with Netskope forward to proxy</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>

squid-users/2026-January/027744.html

@@ -73,6 +73,8 @@ <H1>[squid-users] Can I safely increase MAX_URL to 12KByte?</H1>
 
 
 
+
+
 <!--endarticle-->
     <HR>
     <P><UL>

squid-users/2026-January/027746.html

@@ -13,7 +13,7 @@
    </style>
    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
    <LINK REL="Previous"  HREF="027743.html">
-   <LINK REL="Next"  HREF="027741.html">
+   <LINK REL="Next"  HREF="027757.html">
  </HEAD>
  <BODY BGCOLOR="#ffffff">
    <H1>[squid-users] Squid integration with Netskope forward to proxy</H1>
@@ -25,7 +25,7 @@ <H1>[squid-users] Squid integration with Netskope forward to proxy</H1>
     <P><UL>
         <LI>Previous message (by thread): <A HREF="027743.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
-        <LI>Next message (by thread): <A HREF="027741.html">[squid-users] Can I safely increase MAX_URL to 12KByte?
+        <LI>Next message (by thread): <A HREF="027757.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
          <LI> <B>Messages sorted by:</B> 
               <a href="date.html#27746">[ date ]</a>
@@ -90,13 +90,15 @@ <H1>[squid-users] Squid integration with Netskope forward to proxy</H1>
 
 
 
+
+
 <!--endarticle-->
     <HR>
     <P><UL>
         <!--threads-->
 	<LI>Previous message (by thread): <A HREF="027743.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
-	<LI>Next message (by thread): <A HREF="027741.html">[squid-users] Can I safely increase MAX_URL to 12KByte?
+	<LI>Next message (by thread): <A HREF="027757.html">[squid-users] Squid integration with Netskope forward to proxy
 </A></li>
          <LI> <B>Messages sorted by:</B> 
               <a href="date.html#27746">[ date ]</a>

squid-users/2026-January/027747.html

@@ -72,6 +72,7 @@ <H1>[squid-users] peer-select.cc, cache_peer and dns queries</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>

squid-users/2026-January/027748.html

@@ -70,6 +70,7 @@ <H1>[squid-users] peer-select.cc, cache_peer and dns queries</H1>
 
 
 
+
 <!--endarticle-->
     <HR>
     <P><UL>