Did you change TPROXY=1 in the Makefile? Looks like unless you do that, it's 
not included.

The other option I see is to use my version of a similar thing:
https://github.com/goochjj/pound/commit/65e14aa8b52f9170f513399bfe430a1c66a9e34b

Your kernel headers need to include the IP options, and then transproxy works 
for ipv6 listeners, freebind for ipv4 listeners.
--
Joe

Confidentiality Notice: This e-mail transmission may contain confidential and 
legally privileged information that is intended only for the individual named 
in the e-mail address. If you are not the intended recipient, you are hereby 
notified that any disclosure, copying, distribution, or reliance upon the 
contents of this e-mail message is strictly prohibited. If you have received 
this e-mail transmission in error, please reply to the sender, so that proper 
delivery can be arranged, and please delete the message from your mail box.





Joseph Gooch

www.sapphirek12.org<http://www.sapphirek12.org/> | office: (866) 366-9540




CONFIDENTIALITY STATEMENT

The documents and communication included in this email transmission may contain 
confidential information.  All information is intended only for the use of the 
above named recipient(s).  If you are not the named recipient, you are NOT 
authorized to read, disclose, copy, distribute, or take any action on the 
information and any action other than immediate delivery to the named recipient 
is strictly prohibited. If you have received this email in error, do NOT read 
the information and please immediately notify sender by telephone and email and 
immediately delete this email.  If you are the named recipient, you are NOT 
authorized to reveal any of this information to any unauthorized person and are 
hereby instructed to delete this email when no longer needed.

From: Scott McKeown <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Date: Tuesday, October 20, 2015 at 5:25 AM
To: Pound Mailing List <[email protected]<mailto:[email protected]>>
Subject: [Pound Mailing List] Pound 2.7 and TProxy

Hello Everyone,

I've finally got to admit defeat on getting this patch to work and I was 
wondering if anyone out there could please give me a hand getting this to work.

I've attached the patch file for anyone to play with but what I'm trying to do 
is get Unix TProxy to work with pound 2.7 again, the original version of this 
patch has been working since pound v2.4.

Anyhow, the patch compiles into the latest version but if you add "TProxy 1" 
into the configuration you get a 'unknown directive' error


Config File:
# cat /etc/pound/pound.cfg
# Pound configuration file generated by 
loadbalancer.org<http://loadbalancer.org> appliance
User            "nobody"
Group           "nobody"
LogLevel        0
Client          30
Timeout         60
Threads         250
TProxy          1

ListenHTTPS
        # Label: pound1
        Address 192.168.63.59
        Port    443
        Cert    
"/etc/loadbalancer.org/certs/server.pem<http://loadbalancer.org/certs/server.pem>"
        xHTTP   3
        ReWriteLocation 1
        Ciphers 
"ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
        SSLHonorCipherOrder 1
        SSLAllowClientRenegotiation 0
        Disable SSLv2
        Disable SSLv3
        Service
                BackEnd
                        Address 192.168.64.254
                        Port    80
                        TProxy  1
                End
        End
End


Start Up:
# /usr/local/sbin/pound
starting...
detect_tproxy(): tproxy is is detected
tproxy: available
/etc/pound/pound.cfg line 8: unknown directive - aborted




--
With Kind Regards.

Scott McKeown
Loadbalancer.org
http://www.loadbalancer.org
Tel (UK) - +44 (0) 3303801064 (24x7)
Tel (US) - +1 888.867.9504 (Toll Free)(24x7)

Reply via email to