Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have installed squid as a non-transparent proxy/cache server with --enable-ssl configuration. It is a child of a parent proxy server

Everything is OK for HTTP URLs, but any HTTPS URL is responded by a 404 Server not found (for example for Gmail or

This is the access.log entries for opening

1279493581.278    544 TCP_MISS/302 1136 GET - DEFAULT_PARENT/ text/html
1279493581.283      0 TCP_MISS/404 0 CONNECT - DIRECT/- -

And squid in terminal says:

2010/07/18 18:52:27| ipcacheParse: No Address records in response to ''

Here is the squid.conf:

http_port 3128

http_access allow all

cache_peer parent 3128 0 no-query default no-digest no-netdb-exchange

cache_dir ufs /usr/local/squid/var/cache 100 16 256
coredump_dir /usr/local/squid/var/cache

There is no problem when i set as the proxy server in browsers so there is nothing wrong in parent proxy server.

share|improve this question
up vote 6 down vote accepted

It looks like the server hosting squid can't resolve the name "", to me.

The second line in your access.log sample is telling you that squid isn't sending the request to the parent cache, but rather is attempting a direct connection to "" (the DIRECT/- is the tip-off). If you want CONNECT requests to be sent to the parent cache, add the never_direct allow CONNECT directive to your squid.conf file and you'll be in business.

share|improve this answer
Thanks Evan! Problem solved! But why squid tries to connect to webserver directly for CONNECT requests while uses parent proxy for GET requests. Is it a default behavior or i am missing something? – Isaac Jul 19 '10 at 6:08
There was same problem with POST method and it is solved in similar way. But why squid just redirect GET requests to parent proxy while tries to other methods (POST and CONNECT) directly to webserver? am I missing a configuration? – Isaac Jul 19 '10 at 7:27
I wasn't aware of the default for POST, but the behavior you saw with CONNECT was because of a default. – Evan Anderson Jul 19 '10 at 11:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.