• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Bypass squid proxy for gitlab.com on container

Scheduled Pinned Locked Moved Cache/Proxy
1 Posts 1 Posters 973 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • H
    hisrarul
    last edited by Jun 16, 2020, 6:28 PM

    I have configured transparent squid proxy. When I am using below squid configuration to allow access to whitelisted domain list, everything is working fine but I am trying to access gitlab.com/bitbucket.org inside a docker container, I am unable to clone git based repository.

    access.log output:-

    592330218.577 33 192.168.5.39 TAG_NONE/200 0 CONNECT 172.65.251.78:443 gitlab.com HIER_NONE/- -

    Error during git clone:-

    fatal: unable to access 'https://gitlab.com/hisrarul/tanga.git/': gnutls_handshake() failed: The TLS connection was non-properly terminated.

    visible_hostname squid
    cache deny all

    acl localnet src 192.168.0.0/16
    http_access allow localnet

    Log format and rotation

    logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %ssl::>sni %Sh/%<a %mt
    logfile_rotate 10
    debug_options rotate=10

    Handling HTTP requests

    http_port 3128
    http_port 3129 intercept
    acl allowed_http_sites dstdomain "/etc/squid/whitelist.txt"
    http_access allow allowed_http_sites

    Handling HTTPS requests

    https_port 3130 cert=/etc/squid/ssl/squid.pem ssl-bump intercept
    acl SSL_port port 443
    http_access allow SSL_port
    acl allowed_https_sites ssl::server_name "/etc/squid/whitelist.txt"
    acl step1 at_step SslBump1
    acl step2 at_step SslBump2
    acl step3 at_step SslBump3
    ssl_bump peek step1 all
    ssl_bump peek step2 allowed_https_sites
    ssl_bump splice step3 allowed_https_sites
    ssl_bump terminate step2 all
    http_access deny all

    As per the post Bypass squid proxy for domain-name
    When I tried to exclude gitlab.com/bitbucket.org then rest of the url listed in whitelist.txt file become inaccessible.

    1 Reply Last reply Reply Quote 0
    1 out of 1
    • First post
      1/1
      Last post
    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
      This community forum collects and processes your personal information.
      consent.not_received