Comment 11 for bug 1563954

John is right, the new config option is just a feature-poor version of iptables.

I think the right option here is up the documentation and work with the VMT on the OSSA to point people at best practice implementations of a correct proxy setup.

A challenge is I can really only help squid/f5 config in front of the meta data server.