Install and configure Squid with SSL Bumping
Random sketches: this is to solve the problem that a WS2012R2 server can't connect to an AWS server because of cipher suites mismatch. The WS2012R2 will never get that cipher suites so.. install from source (squid 5.5). on paravirtualized add --disable-arch-native apt-get install build-essential openssl libssl-dev pkg-config ./configure --with-default-user=proxy --with-openssl --enable-ssl-crtd make make install Squid.conf: acl localnet src 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN) acl localnet src 10.0.0.0/8 # RFC 1918 local private network (LAN) acl localnet src 100.64.0.0/10 # RFC 6598 shared address space (CGN) acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines acl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN) acl localnet src 192.168.0.0/16 ...