Transparent proxy

2009-05-11 Thread Carlo Granisso
Hello everybody, I have a problem with haproxy (1.3.17) and kernel 2.6.29 I have successfully recompiled my kernel with TPROXY modules and installed haproxy (compiled from source with tproxy option enabled) and installed iptables 1.4.3 (that have tproxy patch). Now I can't use transparent proxy

Re: Transparent proxy

2009-05-11 Thread Malcolm Turnbull
Carlo, Sorry got busy and forgot to post back to you, I was going to ask whats your output from : iptables -L -t mangle Chain PREROUTING (policy ACCEPT) target prot opt source   destination MARK   tcp  --  192.168.2.0/24   anywhere    tcp dpt:http MARK set 0x1

RE: Transparent proxy

2009-05-11 Thread John Lauro
It's a little different config than I have, but it looks ok to me. What's haproxy -vv give? I have: [r...@haf1 etc]# haproxy -vv HA-Proxy version 1.3.15.7 2008/12/04 Copyright 2000-2008 Willy Tarreau w...@1wt.eu Build options : TARGET = linux26 CPU = generic CC = gcc

R: Transparent proxy

2009-05-11 Thread Carlo Granisso
I've tried to use webserver through public interface on the same ip class of haproxy: it doesn't work :-( Thanks, Carlo _ Da: John Lauro [mailto:john.la...@covenanteyes.com] Inviato: lunedì 11 maggio 2009 14.42 A: 'Carlo Granisso'; haproxy@formilux.org Oggetto: RE:

Re: R: R: Transparent proxy

2009-05-11 Thread Jeff Buchbinder
Willy Tarreau wrote: do you mean that the OpenBSD supports a linux-compatible tproxy ? I was not aware of this, because for me, tproxy is 100% linux-specific. Do you know what versions provide it (if so) and how to detect whether it's supported ? I've seen a bunch of pf+squid magic to do it,

[PATCH] Fix 'tcp-request content [accept|reject] if condition' parser for missing 'if'.

2009-05-11 Thread Maik Broemme
Hi, attached is a patch which fixes a configuration mistake regarding the 'tcp-request' option. If you have the following in your configuration file: acl localnet dst 10.0.0.0/8 tcp-request content reject if localnet This will work fine, but if you change the

TCP traffic multiplexing as balance algorithm?

2009-05-11 Thread Maik Broemme
Hi, I have a small question. Did someone know if it is possible to do simple traffic multiplexing with HAProxy? Maybe I am missing it somehow, but want to ask on the list before creating a patch for it. Just to answer the real-world scenario question. TCP multiplexing can be very useful for