RFC: ACL ordering defaults for deny about puppet-squid HOT 5 OPEN

How about something along these lines:

define squid::acl (
  Boolean $allow_first = true,
  String $type,
  String $aclname = $title,
  Array  $entries = [],
  String $order   = '05',
  String $comment = "acl fragment for ${aclname}",
) {

  $priority = ($allow_first and $type=='allow') ? {
    true      => '000',
    default => '200',
  }
  concat::fragment{"squid_acl_${aclname}":
    target  => $::squid::config,
    content => template('squid/squid.conf.acl.erb'),
    order   => "10-${priority}-${order}-${type}",
  }

}

Although allow_first should probably be defined in init.pp / params.pp or you could make a right mess by changing it each time squid::acl was called

from puppet-squid.

Something like this makes sense. I know it's been a while but would you be interested in writing up a PR for this?

from puppet-squid.

I could, just not sure when I'll get to it though.
@warrenpnz happy to step back if you want to pick this up

from puppet-squid.

So currently the order => "10-${order}-${type_cleaned}"

So allows allways come before denys? Is that not the case? That was the intentions for sure.

Steve.

from puppet-squid.

Hi,

I have the same issue.
I need to set http_access deny to_localhost before allow.

Any news on this?

from puppet-squid.