Do not set request->flags.no_direct for bumped CONNECT requests

because it precludes them from reaching their [direct] destination
unless allow-direct is set on http_port.

diff --git a/src/client_side.cc b/src/client_side.cc
index a15e60addf6ee541a362cd0046522a49ecbd9d13..e3efdd0eeb4fb55e91d58ec2c963a1484b298ac1 100644 (file)
--- a/src/client_side.cc
+++ b/src/client_side.cc
@@ -2608,7 +2608,9 @@ clientProcessRequest(ConnStateData *conn, HttpParser *hp, ClientSocketContext *c
     request->flags.accelerated = http->flags.accel;
     request->flags.sslBumped = conn->switchedToHttps();
     request->flags.ignore_cc = conn->port->ignore_cc;
-    request->flags.no_direct = request->flags.accelerated ? !conn->port->allow_direct : 0;
+    // TODO: decouple http->flags.accel from request->flags.sslBumped
+    request->flags.no_direct = (request->flags.accelerated && !request->flags.sslBumped) ?
+        !conn->port->allow_direct : 0;
 
     /** \par
      * If transparent or interception mode is working clone the transparent and interception flags