Zorp – Open source proxy firewall with deep protocol analysis

Re:Zorp – Open source proxy firewall with deep protocol anal... by sgt on Monday January 21, 2019 @04:26AM (#18958980)

First sentence mentions deep packet analysis for protocols like HTTP. But that's not really relevant anymore is it? Most modern websites will automatically redirect HTTP to HTTPS and then you can't apply deep packet analysis anymore. I can see some other fairly nice features here but not really enough to make me switch.

[ Parent | on HN ]

Re:Zorp – Open source proxy firewall with deep protocol anal... by amanzi on Monday January 21, 2019 @04:41AM (#18959054)

I guess it's terminating the HTTPS traffic and then proxying on to the respective server.

[ Parent | on HN ]

Re:Zorp – Open source proxy firewall with deep protocol anal... by tgragnato on Monday January 21, 2019 @05:00AM (#18959171)

Yes, TLS offloading is there

https://github.com/Balasys/zorp/blob/master/lib/proxyssl.cc https://github.com/Balasys/zorp/blob/master/lib/pyx509.cc

It's able to inspect and relay the connection as well as passing it to another proxy

https://github.com/Balasys/zorp/blob/master/lib/proxystack.c...

[ Parent | on HN ]

Re:Zorp – Open source proxy firewall with deep protocol anal... by c0r0n3r on Thursday January 24, 2019 @08:03AM (#18988239)

3.2. Configuring TLS and SSL encrypted connections

https://www.balasys.hu/content/documents/zorp-gpl-guide-refe...

[ Parent | on HN ]