Using few ICAP services at one time

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Using few ICAP services at one time

Никита Серёгин
Hi All.

I need to use Squid with few ICAP services, to be able to check files for viruses with few antivirus services.

But if i use the chain, the first service modifies the response and the object isn't being sent to the second service. Instead, the modified content (blocking page) is being sent to the second service.

Is it possible to send the same original request/response to few ICAP services separately?

Thanks in advance.

Nick.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Using few ICAP services at one time

Alex Rousskov
On 7/31/19 6:47 AM, Nikita Seregin wrote:

> if i use the chain, the first service modifies the response and the
> object isn't being sent to the second service. Instead, the modified
> content (blocking page) is being sent to the second service.

If you can modify/configure the first ICAP service to _annotate_ the
transaction (via ICAP and/or HTTP headers that would mark the response
as virus free/infected) instead of generating a brand new HTTP response,
then you can still chain your ICAP services and feed the (mostly or
100%) virgin response to the second service.


> Is it possible to send the same original request/response to few ICAP
> services separately?

Yes, but only using a custom "broadcasting" ICAP or eCAP service. You
would have to write such a service yourself (or purchase it). Squid does
not come with one. From Squid point of view, there will be just one
service to deal with in this setup.


Alex.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users