这篇博客介绍了如何使用squid搭建HTTPS透明代理。通过配置squid的访问权限、监听端口和iptables规则，实现了对HTTP和HTTPS流量的代理。配置包括允许来自特定网络的请求，设置安全端口，并启用SSL_BUMP进行中间人解密。同时，还展示了iptables的配置，用于将特定端口的流量重定向到squid代理。
#
# Recommended minimum configuration:
#
# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/24# RFC1918 possible internal network
acl localnet src fc00::/7 # RFC 4193 local private network range
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port443
acl Safe_ports port80 # http
acl Safe_ports port21 # ftp
acl Safe_ports port443 # https
acl Safe_ports port70 # gopher
最低0.47元/天 解锁文章
扫一扫
7005
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
