I have a DNS server that resolves all traffic to my Squid server that will proxy all HTTP traffic transparently (it must be transparent or it will drop a invalid url error) which works great.
The problem lies with HTTPS. My goal is to make a HTTPS work completely normally with my interception (I don't want to use fake ceritifcates and have the message of "do you want to continue" error), I've tried many way to make this happen with complete failures. I don't even want to touch the HTTPS data but I have to because all domains resolve to my server.
- I've tried using IPTables to redirect the HTTPS traffic to their server directly which is completely impossible because you cannot read the hostname with IPtables and you cannot redirect them dynamically.
- I have tried using Haproxy to just pass along the data, which works great but it requires me to put in each server individually, so unless I was to make a config file that is millions and millions of lines longs of just website domains/subdomains I cannot use it.