From: hno <> Date: Thu, 17 Jan 2008 17:09:05 +0000 (+0000) Subject: Document the addition of myportname acl X-Git-Tag: BASIC_TPROXY4~187 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=242c83fbe1e84c866f7d7248f9158601905cf49d;p=thirdparty%2Fsquid.git Document the addition of myportname acl --- diff --git a/doc/release-notes/release-3.1.html b/doc/release-notes/release-3.1.html index 23f45698c9..bc3aa3c794 100644 --- a/doc/release-notes/release-3.1.html +++ b/doc/release-notes/release-3.1.html @@ -2,18 +2,18 @@ - Squid 3.1.PRE1 release notes: Changes since Squid-2.6: Changes to ./configure Options + Squid 3.1.PRE1 release notes

Squid 3.1.PRE1 release notes

-

Squid Developers

$Id: release-3.1.html,v 1.4 2008/01/11 03:49:18 amosjeffries Exp $ +

Squid Developers

$Id: release-3.1.html,v 1.5 2008/01/17 10:09:05 hno Exp $
This document contains the release notes for version 3.1 of Squid. Squid is a WWW Cache application developed by the National Laboratory for Applied Network Research and members of the Web Caching community.
-

5. Notice

+

1. Notice

The Squid Team are pleased to announce the release of Squid-3.1.PRE1 for pre-release testing.

This new release is available for download from @@ -24,19 +24,19 @@ While this release is not deemed ready for production use, we believe it is read

We welcome feedback and bug reports. If you find a bug, please see http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-7067fc0034ce967e67911becaabb8c95a34d576d for how to submit a report with a stack trace.

-

6. Known issues

+

2. Known issues

Although this release is deemed good enough for testing in many setups, please note the existence of -open bugs against Squid-3.0.

+open bugs against Squid-3.1.

-

7. Changes since earlier PRE releases of Squid-3.0

+

3. Changes since earlier PRE releases of Squid-3.1

The 3.1 change history can be viewed here.

-

8. Changes since Squid-3.0

+

4. Changes since Squid-3.0

-

8.1 Major new features +

4.1 Major new features

Squid 3.1 represents a new feature release above 3.0.

@@ -112,7 +112,7 @@ A new one will be needed for IPv6 traffic between the helper and server.

with the RADIUS server. A new helper will be needed for IPv6 RADIUS protocol.

-

8.2 Changes to squid.conf +

4.2 Changes to squid.conf

There have been changes to Squid's configuration file since Squid-3.0.

@@ -135,8 +135,7 @@ with the RADIUS server. A new helper will be needed for IPv6 RADIUS protocol.

-
pinger_enable
-

New option to enable/disable the ICMP pinger helper with a reconfigure instead of a full rebuild. +

pinger_enable

New option to enable/disable the ICMP pinger helper with a reconfigure instead of a full rebuild. 

         Control whether the pinger is active at run-time.
         Enables turning ICMP pinger on and off with a simple squid -k reconfigure.
@@ -145,8 +144,7 @@ with the RADIUS server. A new helper will be needed for IPv6 RADIUS protocol.

 

 
-
dns_v4_fallback

-
New option to prevent squid from always looking up IPv4 regardless of whether IPv6 addresses are found.
+
dns_v4_fallback
New option to prevent squid from always looking up IPv4 regardless of whether IPv6 addresses are found.
 Squid will follow a policy of prefering IPv6 links, keeping the IPv4 only as a safety net behind IPv6.
 
         Standard practice with DNS is to lookup either A or AAAA records
@@ -166,8 +164,7 @@ Squid will follow a policy of prefering IPv6 links, keeping the IPv4 only as a s
 

 

 
-
include

-
New option to import entire secondary configuration files into squid.conf.
+
include
New option to import entire secondary configuration files into squid.conf.
 
         Squid will follow the files immediately and insert all their content
         as if it was at that position in squid.conf. As per squid.conf some
@@ -189,18 +186,30 @@ Squid will follow a policy of prefering IPv6 links, keeping the IPv4 only as a s
 
 

 

-
acl

-
New preset content
+
acl dst ipvs
New preset content - ipv6 - available as a preset type in the src and dst ACL matching all of the public IPv6 network space.
 
-        <p>ipv6 - now available as a preset type in the src and dst ACL matching all of the public IPv6 network space.
-        <verb>
-    acl aclname dst ipv6
+        acl aclname dst ipv6
         
 

 

 
-
external_acl_type

-
New options 'ipv4' and 'ipv6' are added to set the IPv4/v6 protocol between squid and its helpers.
+
http(s)_port name= option
New port option to assign internal names to listening ports
+
+           name=        Specifies a internal name for the port. Defaults to
+                        the port specification (port or addr:port)
+        
+

+

+
+
acl myportname
New acl type myportname, matching the name of the http(s)_port where the request was accepted
+
+        acl aclname myportname 3128 ...         # http(s)_port name
+        
+

+

+
+
+
external_acl_type
New options 'ipv4' and 'ipv6' are added to set the IPv4/v6 protocol between squid and its helpers.
 Please be aware of some limits to these options. These options only affet the transport protocol used
 to send data to and from the helpers. Squid in IPv6-mode may still send %SRC addresses in IPv4 or IPv6
 format, so all helpers will need to be checked and converted to cope with such information cleanly.
@@ -214,8 +223,7 @@ format, so all helpers will need to be checked and converted to cope with such i
 

 

 
-
tcp_outgoing_address

-
This option causes some problems when bridging IPv4 and IPv6. A workaround has been provided.
+
tcp_outgoing_address
This option causes some problems when bridging IPv4 and IPv6. A workaround has been provided.
 
         Squid is built with a capability of bridging the IPv4 and IPv6 internets.
         tcp_outgoing_address as previously used breaks this bridging by forcing
@@ -239,8 +247,7 @@ format, so all helpers will need to be checked and converted to cope with such i
 

 

 
-
balance_on_multiple_ip

-
The previous default behavour (rotate per-request) of this setting causes failover clashes with IPv6 built-in mechanisms.
+
balance_on_multiple_ip
The previous default behavour (rotate per-request) of this setting causes failover clashes with IPv6 built-in mechanisms.
 It has thus been turned off by default. Making the 'best choice' IP continue in use for any hostname until it encounters a connection failure and failover drops to the next known IP.
 
        Modern IP resolvers in squid sort lookup results by preferred access.
@@ -269,7 +276,7 @@ It has thus been turned off by default. Making the 'best choice' IP continue in
 

 
 
-
8.3 Changes to ./configure Options
+
4.3 Changes to ./configure Options
 

 
 
There have been some changes to Squid's build configuration since Squid-3.0.

@@ -293,24 +300,19 @@ It has thus been turned off by default. Making the 'best choice' IP continue in
 
 

 

-
--enable-ipv6

-
Buildwith IPv6 support. The default is to build without.

+
--enable-ipv6
Buildwith IPv6 support. The default is to build without.

 
-
--with-localhost-ipv6

-
Build support for squid to map all 127.0.0.1 traffic onto ::1.
+
--with-localhost-ipv6
Build support for squid to map all 127.0.0.1 traffic onto ::1.
 The default is to build with 127.0.0.1 and ::1 being considered seperate IP.
 see the IPv6 details above for a better description. 

 
-
--with-ipv6-split-stack

-
Enable special additions for IPv6 support in Windows XP.
+
--with-ipv6-split-stack
Enable special additions for IPv6 support in Windows XP.
 see the IPv6 details above for a better description.

 
-
--with-ipv4-mapped

-
Enable special additions for IPv6 support in Windows Vista.
+
--with-ipv4-mapped
Enable special additions for IPv6 support in Windows Vista.
 see the IPv6 details above for a better description.

 
-
--with-dns-cname

-
Enable CNAME recursion within the Internal DNS resolver stub squid uses.
+
--with-dns-cname
Enable CNAME recursion within the Internal DNS resolver stub squid uses.
 This has no effect on the external DNS helper.
 Please note this extension is still experimental and may encounter problems.
 To see if it is actually needed you can run squid without it for a period and
@@ -324,8 +326,7 @@ but please report the bugs anyway.

 
 

 

-
--disable-internl-dns

-
Better support for Linux using the external DNS helper.
+
--disable-internl-dns
Better support for Linux using the external DNS helper.
 The helper will compile and work with dns_nameservers on more variants of Linux than previously.

 
 

@@ -336,14 +337,11 @@ The helper will compile and work with dns_nameservers on more variants of Linux
 porting one of these from Squid-2 to Squid-3 is most welcome.

 

 

-
--enable-devpoll

-
Support for Solaris /dev/poll

+
--enable-devpoll
Support for Solaris /dev/poll

 
-
--enable-select-simple

-
Basic POSIX select() loop without any binary fd_set optimizations.

+
--enable-select-simple
Basic POSIX select() loop without any binary fd_set optimizations.

 
-
--enable-follow-x-forwarded-for

-
Support following the X-Forwarded-For HTTP header for determining the
+
--enable-follow-x-forwarded-for
Support following the X-Forwarded-For HTTP header for determining the
 client IP address

 

 

diff --git a/doc/release-notes/release-3.1.sgml b/doc/release-notes/release-3.1.sgml
index 48367a8d34..21232f92d2 100644
--- a/doc/release-notes/release-3.1.sgml
+++ b/doc/release-notes/release-3.1.sgml
@@ -2,7 +2,7 @@
 

 Squid 3.1.PRE1 release notes
 Squid Developers
-$Id: release-3.1.sgml,v 1.5 2008/01/17 08:32:28 hno Exp $
+$Id: release-3.1.sgml,v 1.6 2008/01/17 10:09:05 hno Exp $
 
 
 This document contains the release notes for version 3.1 of Squid.
@@ -171,14 +171,26 @@ This section gives a thorough account of those changes in three categories:
 Changes to existing tags