{"id":101556,"date":"2021-10-06T16:22:48","date_gmt":"2021-10-06T14:22:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/stabilnyj-reliz-proksi-servera-squid-5"},"modified":"2021-10-06T16:22:48","modified_gmt":"2021-10-06T14:22:48","slug":"stabilnyj-reliz-proksi-servera-squid-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","title":{"rendered":"Lansare stabil\u0103 a serverului proxy Squid 5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dup\u0103 trei ani de dezvoltare, a fost lansat\u0103 o versiune stabil\u0103 a serverului proxy Squid 5.1, gata de utilizare \u00een sistemele de produc\u021bie (versiunile 5.0.x au avut statut de beta). Dup\u0103 ce ramura 5.x a primit statut stabil, aceasta va primi doar corecturi pentru vulnerabilit\u0103\u021bi \u0219i probleme de stabilitate; de asemenea, sunt permise mici optimiz\u0103ri. Dezvoltarea de noi func\u021bionalit\u0103\u021bi va avea loc \u00een noua ramur\u0103 experimental\u0103 6.0. Utilizatorii ramurii stabile anterioare 4.x sunt sf\u0103tui\u021bi s\u0103 planifice trecerea la ramura 5.x.       <\/p>\n<p>Principalele nout\u0103\u021bi ale Squid 5:  <\/p>\n<ul>\n<li class=\"l\"> \u00cen implementarea protocolului ICAP (Internet Content Adaptation Protocol), utilizat pentru integrarea cu sistemele externe de verificare a con\u021binutului, a fost ad\u0103ugat\u0103 suportul pentru mecanismul de ata\u0219are a datelor (trailer), care permite ata\u0219area de antete suplimentare cu metadate la r\u0103spuns, plasate dup\u0103 corpul mesajului (de exemplu, se poate transmite suma de control \u0219i detalii despre problemele identificate).\n<li class=\"l\"> At the request redirection, the &#171;Happy Eyeballs&#187; algorithm is used, which immediately utilizes the obtained IP address without waiting for the resolution of all potentially available IPv4 and IPv6 target addresses. Instead of considering the &#171;dns_v4_first&#187; setting to determine the order of using the IPv4 or IPv6 address family, the order of the DNS response is now taken into account: if the DNS AAAA response arrives first, the obtained IPv6 address will be used. Thus, the preferred address family setting is now performed at the firewall, DNS, or running with the option &#171;&#8212;disable-ipv6&#187;. The proposed change allows for faster TCP connection establishment times and reduces the impact on performance caused by DNS resolution delays. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/lir\/ipv4\/\"   title=\"adrese IP\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"692\">adrese IP<\/a> if the DNS AAAA response arrives first, the obtained IPv6 address will be used. Thus, the preferred address family setting is now performed at the firewall, DNS, or running with the option &#171;&#8212;disable-ipv6&#187;. The proposed change allows for faster TCP connection establishment times and reduces the impact on performance caused by DNS resolution delays.\n<li class=\"l\"> For use in the &#171;external_acl&#187; directive, the &#171;ext_kerberos_sid_group_acl&#187; handler has been added for authentication with group checks in Active Directory using Kerberos. The ldapsearch utility, provided by the OpenLDAP package, is used to request the group name.\n<li class=\"l\"> Support for the Berkeley DB database format has been declared deprecated due to licensing issues. The Berkeley DB 5.x branch has not been maintained for several years, remaining with unpatched vulnerabilities, and transitioning to newer releases is hindered by the change in license to AGPLv3, whose requirements also apply to applications that use BerkeleyDB as a library \u2014 Squid is distributed under the GPLv2 license, and AGPL is incompatible with GPLv2. Instead of Berkeley DB, the project has been moved to use the TrivialDB database, which, unlike Berkeley DB, is optimized for simultaneous parallel access to the database. Support for Berkeley DB is still preserved, but in the &#171;ext_session_acl&#187; and &#171;ext_time_quota_acl&#187; handlers, the &#171;libtdb&#187; storage type is now recommended instead of &#171;libdb&#187;.\n<li class=\"l\"> A fost ad\u0103ugat suport pentru antetul HTTP CDN-Loop, definit \u00een RFC 8586, care permite identificarea buclelor atunci c\u00e2nd se utilizeaz\u0103 re\u021belele de livrare a con\u021binutului (antetul ofer\u0103 protec\u021bie \u00eempotriva situa\u021biilor \u00een care o solicitare, \u00een procesul de redirec\u021bionare \u00eentre CDN-uri, se \u00eentoarce din anumite motive \u00een CDN-ul ini\u021bial, form\u00e2nd o bucl\u0103 infinit\u0103).\n<li class=\"l\"> Mecanismul SSL-Bump, care permite interceptarea con\u021binutului sesiunilor HTTPS criptate, a ad\u0103ugat suport pentru redirec\u021bionarea solicit\u0103rilor HTTPS modificate (re-criptate) prin alte servere proxy, specificate \u00een cache_peer, utiliz\u00e2nd un tunel obisnuit bazat pe metoda HTTP CONNECT (transmiterea prin HTTPS nu este suportat\u0103, deoarece Squid nu poate transmite TLS \u00een interiorul TLS). SSL-Bump permite, la primirea primei solicit\u0103ri HTTPS interceptate, s\u0103 stabileasc\u0103 o conexiune TLS cu serverul \u021bint\u0103 \u0219i s\u0103 ob\u021bin\u0103 certificatul acestuia. Dup\u0103 aceea, Squid folose\u0219te numele gazdei din certificatul primit de la server \u0219i creeaz\u0103 un certificat fals, cu ajutorul c\u0103ruia imit\u0103 serverul solicitat \u00een interac\u021biunea cu clientul, continu\u00e2nd \u00een acela\u0219i timp s\u0103 utilizeze conexiunea TLS stabilit\u0103 cu serverul \u021bint\u0103 pentru a ob\u021bine date (pentru a evita generarea de avertismente \u00een browserele clientului, este necesar s\u0103 se adauge certificatul s\u0103u, folosit pentru generarea certificatelor false, \u00een magazinul de certificate r\u0103d\u0103cin\u0103).\n<li class=\"l\"> Au fost ad\u0103ugate directivele mark_client_connection \u0219i mark_client_pack pentru a lega etichetele Netfilter (CONNMARK) la conexiunile TCP ale clien\u021bilor sau la pachetele individuale.      <\/ul>\n<p>Urm\u0103toarele pe urmele recente sunt lans\u0103rile Squid 5.2 \u0219i Squid 4.17, care corecteaz\u0103 vulnerabilit\u0103\u021bile:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2021-28116 &#8212; information leak when processing specially crafted WCCPv2 messages. The vulnerability allows an attacker to corrupt the list of known WCCP routers and redirect the proxy server's client traffic to their host. The issue only manifests in configurations with WCCPv2 support enabled and when IP address spoofing of the router is possible.\n<li class=\"l\"> CVE-2021-41611 &#8212; error during verification <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/ssl-sertifikat\/\"   title=\"certificatelor TLS\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"958\">certificatelor TLS<\/a>, care permite accesul folosind certificate de \u00eencredere sc\u0103zut\u0103.      <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55929\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439). \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0442\u043a\u0435 5.x \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439, \u0432 \u043d\u0435\u0439 \u043e\u0442\u043d\u044b\u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u043e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e, \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 6.0. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101556","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-06T14:22:48+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-06T14:22:48+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release stabil al serverului proxy Squid 5 | ProHoster","description":"Dup\u0103 trei ani de dezvoltare, a fost prezentat un release stabil al serverului proxy Squid 5.1, gata pentru utilizare \u00een sisteme de produc\u021bie (versiunile 5.0.x au avut statut de versiuni beta).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid 5.1, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 (\u0432\u044b\u043f\u0443\u0441\u043a\u0438 5.0.x \u0438\u043c\u0435\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0439).","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/stabilnyj-reliz-proksi-servera-squid-5","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-06T14:22:48+00:00","article:modified_time":"2021-10-06T14:22:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101556","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-06 14:38:43","updated":"2026-02-08 21:03:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101556"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101556\/revisions"}],"predecessor-version":[{"id":158150,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101556\/revisions\/158150"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}