search

home-assistant / core

:house_with_garden: Open source home automation that puts local control and privacy first.
https://www.home-assistant.io
Apache License 2.0
69.82k stars 28.94k forks source link

Squid Web Proxy Domain Filter #120252

Open Alexander-Ger-Reich opened 2 weeks ago

Alexander-Ger-Reich commented 2 weeks ago

The problem

When trying to update home assistan, I found that it does not pass through the Squid Web Proxy Domain Filter because it is not given a domain name when trying to download the update. I only noticed the problem when downloading updates in Home assist. Perhaps it also exists elsewhere.

image image

What version of Home Assistant Core has the issue?

2024.6.4

What was the last working version of Home Assistant Core?

No response

What type of installation are you running?

Home Assistant OS

Integration causing the issue

No response

Link to integration documentation on our website

No response

Diagnostics information

No response

Example YAML snippet

No response

Anything in the logs that might be useful for us?

No response

Additional information

No response

mib1185 commented 2 weeks ago

There is no official (forward)proxy support in HA nor in HA-OS. how did you make HA using a proxy?

Alexander-Ger-Reich commented 1 week ago

There is no official (forward)proxy support in HA nor in HA-OS. how did you make HA using a proxy?

My firewall opnsense can be configured to forward all http and https traffic to the Squid Web Proxy. The forwarding happens on the firewall.

mib1185 commented 1 week ago

ok, this is called "transparent proxy" . HA doesn't know about any proxy, so it acts as an usual client - it perform DNS resolution by its own and the outgoing connection is done on IP base. Especial in case of SSL encrypted traffic (https) you won't see any parts of the http header on this transparent proxy.