I have been trying for some days and still have no luck with getting transparent TCP load balancer to work using HAproxy/NGINX.
The problem is: everything works correctly, until i try to enable transparency. Both NGINX and HAproxy do load balance, but give localhost as user IP.
What i tried to change this:
Changed them to run as root.
Configured iptables, added routing table, etc. The part about "default gateway should be the NGINX server ip" i don't get, because NGINX and apps are running on the same machine without any containers.
- Setting up iptables and changing sysctl forward options according to the article: https://www.loadbalancer.org/blog/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/
- However, i don't get the part about "However if the clients source IP address is going to be used then the HAProxy server MUST BE IN THE PATH of the return traffic." for the same reason as NGINX.
So, the general question is: i have HAproxy/NGINX load balancing on x.x.x.x:30000. On the same machine, i have apps at x.x.x.x:30001 and x.x.x.x:30002.
How can i load balance this configuration? Which additional routing rules are required? Do i need to create a virtual subnet for some rerouting? Because as of now it seems like load balancer can connect to the app, but can't get the answer back to the user.