From: Amos Jeffries Date: Fri, 31 Oct 2008 03:05:39 +0000 (+1300) Subject: Make 3.1 Release Notes more config automation friendly X-Git-Tag: SQUID_3_2_0_1~1359 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f01c397c3d72b0e5ce66699e273e4b4bc66f0772;p=thirdparty%2Fsquid.git Make 3.1 Release Notes more config automation friendly --- diff --git a/doc/release-notes/release-3.1.html b/doc/release-notes/release-3.1.html index 0d9d0c82b3..f561b1500a 100644 --- a/doc/release-notes/release-3.1.html +++ b/doc/release-notes/release-3.1.html @@ -975,18 +975,13 @@ DEFAULT: None bypassed.

acl dst ipv6
-

New preset content - ipv6 - available as a preset type in the src and dst ACL matching all of the public IPv6 network space. -

-        acl aclname dst ipv6
-        
-
-

- -
acl myportname peername
-

New acl type myportname, matching the name of the http(s)_port where the request was accepted.

+

New preset content ipv6 available as a preset type in the src and dst ACL matching all of the public IPv6 network space.

+

New acl type myportname, matching the name of the http_port or https_port where the request was accepted.

New acl type peername, matching against a named cache_peer entry where the request will be attempted first. NP: peername currently is limited to only match the first peer possible.

+        acl aclname dst ipv6                    # request for IPv6-enabled site
+        acl aclname src ipv6                    # request from IPv6 address
         acl aclname myportname 3128 ...         # http(s)_port name
         acl aclname peername myPeer ...         # cache_peer ... name=myPeer
         
@@ -1121,11 +1116,9 @@ format, so all helpers will need to be checked and converted to cope with such i
 

-
http_port transparent
+
http_port transparent intercept sslbump connection-auth[=on|off]

Option 'transparent' is being deprecated in favour of 'intercept' which more clearly identifies what the option does. For now option 'tproxy' remains with old behaviour meaning fully-invisible proxy using TPROXY support.

- -
http(s)_port intercept sslbump connection-auth[=on|off]

New port options

            intercept    Rename of old 'transparent' option to indicate proper functionality.
@@ -1160,6 +1153,9 @@ For now option 'tproxy' remains with old behaviour meaning fully-invisible proxy
 

+
https_port intercept sslbump connection-auth[=on|off]
+

New port options. see http_port.

+
maximum_object_size_in_memory

Default size limit increased to 512KB.

diff --git a/doc/release-notes/release-3.1.sgml b/doc/release-notes/release-3.1.sgml index d636042ad2..9a25c6f392 100644 --- a/doc/release-notes/release-3.1.sgml +++ b/doc/release-notes/release-3.1.sgml @@ -776,16 +776,13 @@ NOCOMMENT_START

acl dst ipv6 -

New preset content - ipv6 - available as a preset type in the src and dst ACL matching all of the public IPv6 network space. - - acl aclname dst ipv6 - - - acl myportname peername -

New acl type myportname, matching the name of the http(s)_port where the request was accepted. +

New preset content ipv6 available as a preset type in the src and dst ACL matching all of the public IPv6 network space. +

New acl type myportname, matching the name of the http_port or https_port where the request was accepted.

New acl type peername, matching against a named cache_peer entry where the request will be attempted first. NP: peername currently is limited to only match the first peer possible. + acl aclname dst ipv6 # request for IPv6-enabled site + acl aclname src ipv6 # request from IPv6 address acl aclname myportname 3128 ... # http(s)_port name acl aclname peername myPeer ... # cache_peer ... name=myPeer @@ -906,11 +903,9 @@ NOCOMMENT_START X-Forwarded-For entries, and place itself as the sole entry. - http_port transparent + http_port transparent intercept sslbump connection-auth[=on|off]

Option 'transparent' is being deprecated in favour of 'intercept' which more clearly identifies what the option does. For now option 'tproxy' remains with old behaviour meaning fully-invisible proxy using TPROXY support.

- - http(s)_port intercept sslbump connection-auth[=on|off]

New port options intercept Rename of old 'transparent' option to indicate proper functionality. @@ -943,6 +938,9 @@ NOCOMMENT_START the SslBump feature. + https_port intercept sslbump connection-auth[=on|off] +

New port options. see http_port. + maximum_object_size_in_memory

Default size limit increased to 512KB.