Page MenuHomePhabricator

Migrate 'service webproxy' to python/xml
In progress, NormalPublicFEATURE REQUEST

Description

Squid proxy is old and inefficient
while it done great job in the past, it's now really meets current needs

My proposal is to move to Apache Traffic Server

Lot of benefits:

  • no squid
  • better performance
  • better flexibility

see https://www.slideshare.net/bryan_call/choosing-a-proxy-server-apachecon-2014

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible

Related Objects

Event Timeline

syncer triaged this task as Low priority.Feb 25 2018, 7:42 PM
syncer created this task.
dmbaturin moved this task from Need Triage to Wishlist on the VyOS 1.2 Crux board.May 24 2018, 5:33 PM
pasik added a subscriber: pasik.Mar 12 2019, 6:13 PM
hagbard claimed this task.Jan 21 2020, 9:00 PM
hagbard added a comment.EditedJan 21 2020, 9:06 PM

Notes:

  • trafficserver (buster native - 19.7 MB of additional disk space will be used)
  • looks like squidguard can't be integrated (removing it entirely?)

cli options:

  • append-domain (ts uses the local domain, can't be configured anymore)
  • transparent mode won't be the default anymore, since it requires a few iptables rules
  • default-port will be removed
  • domain-block, domain-noncache will be removed, doesn't exist in TS
  • reply-block-mime, reply-body-max-size will be removed as it doesn't exist in TS
  • url-filtering, whitelist will be removed as it doesn't exist in TS (whitelist defines a list trusted proxy IPs instead)

Input appreciated.

hagbard raised the priority of this task from Low to High.Jan 21 2020, 9:08 PM
hagbard changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).
hagbard set Is it a breaking change? to Perfectly compatible.
hagbard changed Difficulty level from Normal (likely a few hours) to Hard (possibly days).Jan 21 2020, 9:28 PM
hagbard changed the task status from Open to On hold.Jan 23 2020, 4:51 PM

@syncer After all considerations, because of the authentication modules squid brings in, I would rather stay with squid for now. Let me know what you think.

hagbard changed the task status from On hold to Confirmed.Sun, Jan 26, 10:54 PM

All right, we stay with squid, however I may drop squidguard but ask in the forum first if that feature would be required by many users.

hagbard lowered the priority of this task from High to Normal.Sun, Jan 26, 10:59 PM
hagbard renamed this task from Migrate web proxy from squid to apache traffic server to Migrate 'service webproxy' to python/xml.Tue, Feb 11, 11:16 PM
hagbard changed the task status from Confirmed to In progress.
hagbard moved this task from Need Triage to In Progress on the VyOS 1.3 Equuleus board.