RE: transparent Proxy on FreeBSD

From: GARRISON, TRAVIS J. <garrisot#otc.edu>
Date: Wed, 10 Aug 2011 17:38:15 -0500


After further investigation and comparing the make files, the option USE_TPROXY will add the -DTPROXY compile switch. It looks like a bug in where the command source 0.0.0.0 usesrc clientip is looking for the specific linux tproxy or compile option -DCONFIG_HAP_LINUX_TPROXY and not the more generic one.

Travis

From: GARRISON, TRAVIS J. [mailto:garrisot#otc.edu] Sent: Tuesday, August 09, 2011 9:08 AM
To: haproxy
Subject: transparent Proxy on FreeBSD

How can I configure haproxy to operate in transparent mode in FreeBSD. I have tried adding the line source 0.0.0.0 usesrc clientip to mu config but it states that I need to recompile with tproxy. I have tried adding the compile switch but it doesn't work. I have noticed that FreeBSD uses -DTPROXY. Is that basically the same thing? Thanks for any help

global

      maxconn 6000
      pidfile /var/run/haproxy.pid
      daemon
      nbproc 5

defaults
      mode http
      retries 3
      option redispatch
      maxconn 2000
      timeout connect 24h
      timeout client 24h
      timeout server 24h
      balance leastconn

listen PROXY 1.2.3.4:8080
      mode http
      cookie PROXY insert nocache indirect
      option forwardfor
      stats enable
      server PROXY1 1.2.3.4:8080 cookie PROXY check
      server PROXY1 1.2.3.4:8080 cookie PROXY check
      server PROXY1 1.2.3.4:8080 cookie PROXY check
      server PROXY1 1.2.3.4:8080 cookie PROXY check
      option redispatch

Thanks
Travis Received on 2011/08/11 00:38

This archive was generated by hypermail 2.2.0 : 2011/08/11 00:45 CEST