{"id":101556,"date":"2021-10-06T16:22:48","date_gmt":"2021-10-06T14:22:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/stabilnyj-reliz-proksi-servera-squid-5"},"modified":"2021-10-06T16:22:48","modified_gmt":"2021-10-06T14:22:48","slug":"stabilnyj-reliz-proksi-servera-squid-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","title":{"rendered":"Stable Release of Squid 5 Proxy Server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>After three years of development, the stable release of the Squid 5.1 proxy server has been presented, ready for use in production systems (versions 5.0.x were in beta status). Now that the 5.x branch has been designated as stable, it will only receive fixes for vulnerabilities and stability issues, and minor optimizations are allowed. Development of new features will take place in the new experimental branch 6.0. Users of the previous stable branch 4.x are advised to plan their transition to the 5.x branch.       <\/p>\n<p>Key Innovations in Squid 5:  <\/p>\n<ul>\n<li class=\"l\"> Support for a trailer data attachment mechanism has been added to the implementation of the ICAP (Internet Content Adaptation Protocol), used for integration with external content verification systems, allowing for additional metadata headers to be attached to the response after the message body (for example, checksums and details about detected issues can be communicated).\n<li class=\"l\"> When redirecting requests, the &#171;Happy Eyeballs&#187; algorithm is used, which immediately utilizes the obtained IP address without waiting for the resolution of all potentially available target addresses IPv4 and IPv6. Instead of considering the &#171;dns_v4_first&#187; setting to determine the order of using the IPv4 or IPv6 address family, the order of the DNS response is now considered: if the DNS AAAA response is received first, the obtained IPv6 address will be used. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/lir\/ipv4\/\"   title=\"an IP address\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"692\">an IP address<\/a> Thus, the preferred address family setting is now performed at the firewall level, DNS, or when starting with the &#171;&#8212;disable-ipv6&#187; option. The proposed change allows for faster TCP connection setup times and reduces the performance impact of DNS resolution delays.\n<li class=\"l\"> A handler &#171;ext_kerberos_sid_group_acl&#187; has been added for use in the &#171;external_acl&#187; directive, which facilitates authentication with group checks in Active Directory using Kerberos. The ldapsearch utility provided by the OpenLDAP package is used to query the group name.\n<li class=\"l\"> Support for the Berkeley DB format has been deprecated due to licensing issues. The Berkeley DB 5.x branch has not been maintained for several years and remains with known vulnerabilities, while the change in licensing to AGPLv3 prevents moving to newer releases. The AGPL requirements extend to applications using BerkeleyDB as a library \u2014 Squid is distributed under the GPLv2 license, and AGPL is incompatible with GPLv2. Instead of Berkeley DB, the project has transitioned to using the TrivialDB database management system, which, unlike Berkeley DB, is optimized for simultaneous concurrent access to the database. Support for Berkeley DB is still retained, but in the &#171;ext_session_acl&#187; and &#171;ext_time_quota_acl&#187; handlers, it is now recommended to use the &#171;libtdb&#187; storage type instead of &#171;libdb&#187;.\n<li class=\"l\"> Support for the HTTP header CDN-Loop has been added, as defined in RFC 8586, which allows for detecting loops when using content delivery networks (the header provides protection against situations where a request, during redirection between CDNs, for some reason returns back to the original CDN, creating an infinite loop).\n<li class=\"l\"> The SSL-Bump mechanism, which allows for intercepting content from encrypted HTTPS sessions, now supports redirecting modified (re-encrypted) HTTPS requests through other proxy servers specified in cache_peer, using a standard tunnel based on the HTTP CONNECT method (transmission over HTTPS is not supported, as Squid currently cannot transmit TLS within TLS). SSL-Bump allows for establishing a TLS connection with the target server upon receiving the first intercepted HTTPS request and obtaining its certificate. After that, Squid uses the hostname from the actual certificate received from the server and creates a fake certificate, which it uses to simulate the requested server when interacting with the client, while still utilizing the TLS connection established with the target server for data retrieval (to avoid warnings in client browsers due to the spoofing, it is necessary to add your certificate, which was used to generate fake certificates, to the root certificate store).\n<li class=\"l\"> The directives mark_client_connection and mark_client_pack have been added to bind Netfilter (CONNMARK) marks to client TCP connections or individual packets.      <\/ul>\n<p>Following closely, the releases of Squid 5.2 and Squid 4.17 have been published, addressing vulnerabilities:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2021-28116 &#8212; information leakage when processing specially crafted WCCPv2 messages. This vulnerability allows an attacker to corrupt the list of known WCCP routers and redirect proxy server client traffic to their host. The issue manifests only in configurations with WCCPv2 support enabled and where IP address spoofing of the router is possible.\n<li class=\"l\"> CVE-2021-41611 &#8212; error in validation <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/ssl-sertifikat\/\"   title=\"for TLS certificates\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"958\">for TLS certificates<\/a>, allowing access using untrusted certificates.      <\/ul>\n<p>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55929\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439). \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0442\u043a\u0435 5.x \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439, \u0432 \u043d\u0435\u0439 \u043e\u0442\u043d\u044b\u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u043e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e, \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 6.0. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101556","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-06T14:22:48+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-06T14:22:48+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Stable release of the Squid 5 proxy server | ProHoster","description":"After three years of development, a stable release of the Squid 5.1 proxy server is now available for use in production systems (versions 5.0.x were considered beta releases).","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-06T14:22:48+00:00","article:modified_time":"2021-10-06T14:22:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101556","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-06 14:38:43","updated":"2026-02-08 21:03:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=101556"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101556\/revisions"}],"predecessor-version":[{"id":158150,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101556\/revisions\/158150"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=101556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=101556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=101556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}