Can squid add X-Forworded-For header in https request

squidx-forwarded-for

I know squid can perform as a mitm,so I want to know can squid add X-Forworded-For header in https request?
If can add, how to configure it?

Best Answer

I Dont think so it can be done currently there are following options only

If set to "on", Squid will append your client's IP address in the HTTP requests it forwards. By default it looks like: X-Forwarded-For: 192.1.2.3
If set to "off", it will appear as X-Forwarded-For: unknown
If set to "transparent", Squid will not alter the X-Forwarded-For header in any way.
If set to "delete", Squid will delete the entire X-Forwarded-For header.
If set to "truncate", Squid will remove all existing X-Forwarded-For entries, and place the client IP as the sole entry

Related Solutions

Adding an HTTP request header with Squid

Do you can with new Squid 3.3 that support the command "request_header_add". I used CentOS for do it.

My Squid.conf is:

acl CONNECT method CONNECT
visible_hostname MySERVER.local
acl local src 192.168.0.0/24
http_access allow local
ssl_bump client-first all
always_direct allow all
http_port 3128 ssl_bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/local/squid/etc/cert.pem
request_header_add X-GoogApps-Allowed-Domains "mycompany.com" all
cache_dir ufs /usr/local/squid/var/cache 8192 32 256

For SSL certificates, do you need to generate with openSSL:

openssl req -new -newkey rsa:1024 -days 36500 -nodes -x509 -keyout /usr/local/squid/etc/cert.pem -out /usr/local/squid/etc/cert.pem

And for users can't view errors in browsers, install this as a root trusted in each computer or add into your Active Directory (google may help for this).

openssl x509 -in /usr/local/squid/etc/cert.pem -outform DER -out /usr/local/squid/etc/cert.der

Squid proxy overrides the host header, what can I do

Standard Squid installations don't do so, unless with some faulty directives. If you are using a standard version, please redo the config from scratch. If it's a custom compilation, you should review the code and compile options.

Best Answer

Related Solutions

Adding an HTTP request header with Squid

Squid proxy overrides the host header, what can I do

Related Topic