e2guardian as ICAP server

[Spike]

Dear all,

I'm replacing a dansguardian installation and trying to get transparent ssl filtering working (explicit proxying isn't a good option for us). Reading the docs I found out this isn't possible and only explicit mode is supported right now.

Googling around it turned out that this is largely a design limitation of chaining proxies and the way several commercial solutions implement it is via ICAP. There is a discussion here on github, but I was hoping to also surface this with a wider audience on the list in case there's interest:

https://github.com/e2guardian/e2guardian/issues/3

I gathered from some comment that the main devs are busy and that's no prob, I'm grateful for what has been provided already, but I was wondering if there was anybody in the wider community willing to team up to work on this.

thanks in advance for any thoughts,

Spike

[FredB]

Yes, ICAP is the future.
I'm searching a way to do that, a sponsoring ? Buy code ? I don't really know for the moment

E2BN (Philip Pearce) had do an incredible work about E2, i.e SSLMITM and https://github.com/e2guardian/e2guardian/tree/v4develop, However he can not do everything.

So If you have skills and enough time or if your company are using E2guardian, we need you !

[FredB]

I know that some companies are selling products based on E2guardian, I think write codes for ICAP would be in their interests

Fred

[Spike]

Fred,

thank you for your and Philip's work, I and the rest of the community incredibly appreciate that.

Me and another friend are volunteering for a charity that works with  kids, hence the need for content filtering. We have discussed about potentially dedicating some time to help with this effort (he's fairly familiar with C++, I unfortunately am not, but willing to give it a shot).

We've also considered a donation, if we had to buy a product we'd end up spending money anyway so we might as well invest this money in E2G, but given it's a charity it would be a small sum most likely (which is also why buying commercial products isn't much of an option). That however made me wondering if we could potentially do a crowd funding campaign and raise some money. There is not a single icap content filtering server out there and I bet that most places using DG/E2G would want transparent SSL filtering. Going to knock on some of those companies's door you mentioned could also make sense.

Another opportunity might be something Google Summer of Code, https://summerofcode.withgoogle.com/how-it-works/ .

Organizations

Open source projects apply to be mentor organizations. Once accepted, organizations discuss possible ideas with students and then decide on the proposals they wish to mentor for the summer. They provide mentors to help guide each student through the program.

As an aside, design wise it's unclear to me if ICAP is what's best or eCAP is. Looking at Squid's pages it seems ecap is their design choice and what they are pushing for going forward. And it makes sense to me since basically the proxy has to implement an interface and that could be ecap and with ecap there's less overhead and more importantly less stuff to manage (you don't have another daemon and code in the adapter to maintain all of those things). It basically becomes a "simple" plugin doing a single job with no other code in it. Even if you were to run a large cluster for example, you can cluster squid and scale that horizontally which has already the means to do so instead of having to maintain two services and say scale icap servers.

Best,

Spike

On Tue, Feb 14, 2017 at 1:17 AM FredB <num...@free.fr> wrote:

I know that some companies are selling products based on E2guardian, I think write codes for ICAP would be in their interests

Fred

--
You received this message because you are subscribed to the Google Groups "e2guardian" group.
To unsubscribe from this group and stop receiving emails from it, send an email to e2guardian+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.