Skip to content

Commit

Permalink
init
Browse files Browse the repository at this point in the history
  • Loading branch information
superstes committed Sep 18, 2023
1 parent 27c1011 commit bedf6e0
Show file tree
Hide file tree
Showing 3 changed files with 13 additions and 3 deletions.
12 changes: 9 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ Its focus is set on security filtering for HTTPS.

**Per example**:

* transparent mode - [DNAT not supported](http://www.squid-cache.org/Advisories/SQUID-2011_1.txt)
* intercept/transparent mode - [DNAT not supported](http://www.squid-cache.org/Advisories/SQUID-2011_1.txt)

Related errors:

Expand All @@ -28,15 +28,16 @@ Its focus is set on security filtering for HTTPS.
* `Forwarding loop detected`


* transparent mode - [host verification - using DNS](http://www.squid-cache.org/Doc/config/host_verify_strict/)
* intercept/transparent mode - [host verification - using DNS](http://www.squid-cache.org/Doc/config/host_verify_strict/)

does hit issues with todays DNS-handling of major providers:

* TTLs around <=1 min (*p.e. download.docker.com, debian.map.fastlydns.net*)
* TTLs <= 1 min (*p.e. download.docker.com, debian.map.fastlydns.net*)

Related error: `Host header forgery detected`



## How?

* Use TLS-SNI as target instead of HTTP Host-Header
Expand All @@ -52,6 +53,11 @@ Its focus is set on security filtering for HTTPS.
<img src="https://wiki.superstes.eu/en/latest/_images/squid_remote.png" alt="Proxy forwarder" width="400">


* Transparent traffic interception will be the focus.

Setting the environment-variables 'HTTP_PROXY', 'HTTPS_PROXY', 'http_proxy' and 'https_proxy' for all applications and HTTP-clients may be problematic/too inconsistent


## Roadmap

- [ ] Forwarding
Expand Down
3 changes: 3 additions & 0 deletions go.mod
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
module github.com/superstes/calamary

go 1.20
1 change: 1 addition & 0 deletions main/main.go
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
package main

0 comments on commit bedf6e0

Please sign in to comment.