[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: APT do not work with Squid as a proxy because of pipelining default



On Wed, May 19, 2010 at 03:28:00PM +0200, Bjørn Mork wrote:
> Pierre Habouzit <madcoder@madism.org> writes:
> > On Wed, May 19, 2010 at 10:42:55AM +0200, Bjørn Mork wrote:
> >
> >> 2) http proxy servers cannot always process pipelined requests due to
> >>    the complexity this adds (complexity is always bad for security), and
> >
> > This is bullshit. It's *VERY* easy to "support" pipelining: parse one
> > request at a time, and until you're done with a given request, you just
> > stop to watch the socket/file-descriptor for reading (IOW you let the
> > consecutive request live in the kernel buffers).
> 
> Yeah, you make it sound easy.

The fact is that it is. And I know it from a fact having implemented
several custom http interfaces in the past. It's just _that_ easy.

And since it's _that_ easy, when the broken proxy is free software, it
shall be fixed.

-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org


Reply to: