Questions tagged [transparent-proxy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

Transparent proxy in an external IP address, it works partially (the address received the the proxy is the wrong IP). How could I rewrite the address?

I want to install Tor in my router but I don't want to use its SOCK5 port but its TransPort directly in the machine side and forward the traffic to bridges (to use with virtual machines). The router ...
0 votes
0 answers
39 views

How can I make TPROXY option in iptables work when the destination proxy address is a non-local one?

I installed a TPROXY server in my router that forwards the traffic to a SOCKS5 server. The router has the address 192.168.1.1 and my PC has the address 192.168.1.33. Also, I have a local bridge "...
0 votes
0 answers
22 views

How can I set up a transparent proxy (TPROXY type) across network namespaces?

I want to setup a transparent proxy across network namespaces. I have two network namespaces, "nsx" and "nsy", each one has a veth pair, the pair of "nsx" is pointed to ...
0 votes
0 answers
38 views

Setting up a transparent proxy across network namespaces: failed to get target destination address

I'm trying to setup a transparent proxy across network namespaces. First I create the network namespaces, virtual ethernet devices and enable forwarding inside one of the namespaces: ip netns add nsx ...
1 vote
0 answers
57 views

How can I route a specific local device through a proxy? (Smart TV with no available proxy configuration, only gateway+dns)

Current Setup https://i.imgur.com/yEg2lg3.png Currently just running a pi-hole DNS, and a lighttpd server on port 80 to access pi-hole admin web interface. I have made a DHCP reservation on my router ...
0 votes
1 answer
19 views

Should HTTP load balancer forward bad requests to backend?

If a HTTP client sends a GET request with a body that would generate a 400 Bad Request response, should the load balancer forward that request to the backend or deal with it immediately? Is there any ...
0 votes
0 answers
271 views

Proxy squid Very slow

I work in a school where we have approximately 500 computers. We have installed a proxy SQUID to filter adult websites etc. The server got like 32go ram and enough storage. But surfing become too ...
0 votes
0 answers
390 views

Tor transparent proxy on a middle box with nftables tproxy target

I have the following network: .________. ._______. | vm-cli | <==> <enp1s0| vm-gw |enp2s0> <==> internet ·--------· ·-------· vm-cli has address 192.168.255....
  • 121
0 votes
1 answer
75 views

Rolling updates of backend with udp server sockets

I have a backend system used for IOT devices which use UDP protocol for communications. And there are certain TCP (HTTP2) based APIs for mobile apps from the same backend. I am trying to build a ...
0 votes
1 answer
394 views

Routing all traffic from an external machine to a proxy to a proxy

May be there is a duplicated question but it seems no one do this scenario. I have several machines in my network which are not using proxy to outbound. I want to redirect all traffic, using route ...
  • 1
0 votes
0 answers
619 views

SQUID Transparent Proxy: Error INVALID_URL and ACCESS_DENIED

I configure squid proxy on Centos 7. I am using Squid version 3.5.20. I also try squid 4.10 on Ubuntu 20.04, but I got the same problem. Maybe my ACL was wrong. I configure DSTNAT on Router to ...
  • 11
0 votes
0 answers
123 views

How can I forward TPROXY and its UDP port to a sub-net?

I can forward a transparent proxy to a sub-net with: iptables -t nat -A PREROUTING -i eth2 -p tcp --syn -j DNAT --to-destination 127.0.0.1:10000 But how can I do the same with TPROXY? I want to ...
1 vote
1 answer
784 views

Nginx stream block with wildcard filtering of subdomains

I have set up an Nginx server as L4 Proxy(Forward Proxy With Stream Module), with the following configuration in the nginx.conf file; stream { resolver 8.8.8.8; server { listen 443; ...
0 votes
1 answer
146 views

TPROXY redirect and routing decision

I would like to ask what happens internally when redirecting using Tproxy. iptables -t mangle -A PREROUTING -p tcp --dport 443 -j TPROXY --tproxy-mark 1 --on-port 40001 It located in PREROUTING in ...
  • 11
0 votes
1 answer
853 views

Fully transparent reverse proxy

I'm trying to set up the following: ┌──────────────────┐ ┌────────────────────┐ ┌─────────┐ │ │ │ │ │ │ │ ...
  • 41
1 vote
0 answers
292 views

How to Make NGINX to use System Proxy?

I am trying to setup a nginx server that forwards the incoming request to a corporate porxy (its a mcafee proxy) with a proxy header Host and the actual destination host something like ...
0 votes
0 answers
40 views

What is an HTTP Proxy (forward not reverse) required to do with a client's request headers?

1 Could someone help me distill down what, exactly, the minimum requirements are for a proxy server (just a forward proxy not reverse) with regard to headers? What headers absolutely must be deleted ...
0 votes
1 answer
54 views

What is the correct definition of a transparent proxy?

What is the correct definition of a transparent proxy? I see the term being used for proxies that require no configuration that do not modify requests and for proxies that do require configuration ...
1 vote
0 answers
296 views

TPROXY interferes DNAT port forwarding rules

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
2 votes
3 answers
590 views

Migrate web server to new datacenter and new IP

I have a web server that hosts 200+ domains but it needs to be moved to another data center and get a new IP address. But since all DNS settings have to be updated manually, I thought about whether ...
0 votes
0 answers
54 views

setting up transparent proxy on gateway computer

I am looking to setup a transparent proxy (client) on a computer which will act as a gateway/router for (client) computers connecting to this gateway computer. The client computers use a VPN client ...
  • 1,120
0 votes
2 answers
105 views

Squid proxy server returning error

I have designed a topology which has an external proxy server (192.168.239.152) and a Mikrotik Router (192.168.239.151). The MikroTik router connected with a LAN and enables internet connection to LAN ...
  • 1
0 votes
0 answers
950 views

Nftables tproxy not working

I want to redirect all DNS traffic to proxy. For that i setup following rules in nftables: chain prerouting { type filter hook prerouting priority mangle; policy accept; udp dport ...
0 votes
0 answers
661 views

Forward traffic on port to another host with transparent proxy

I have a host with ip $HOST_IP which runs an HTTP server on port 8080. There is a transparent proxy server running on port 9000 on host with IP $PROXY_SERVICE_IP. I'm trying to forward traffic from ...
1 vote
0 answers
55 views

iptables: Route outgoing requests to a local proxy preserving destination address and port

I want the proxy to make some routing decisions based on the original destination IP and port. I can do this easily for an incoming request: iptables -t mangle -A PREROUTING -p tcp --destination 10.37....
1 vote
0 answers
154 views

Conntrack not showing iptables redirected flow

I have a client and server. At Server I have a redirect rule to redirect all incoming flows to port 15006. Client IP: 10.20.3.53 ServerIP : 10.20.3.63 I have the following iptables rules on the ...
  • 111
1 vote
1 answer
443 views

Squid HTTP Transparent Proxy for Spoofed DNS Requests

I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
1 vote
0 answers
3k views

Transparent Proxy with Squid 4.10 not working

Squid 4.10 on Ubuntu Server 20.04 I have tried so many things and spent this entire week researching on how to get this working. To get an idea of what I am trying to do here, take a look at these ...
  • 111
1 vote
0 answers
139 views

iptables tproxy with statistic --mode nth

I`m using squid now. and i run 4 squid for load-balance and i trying to change my iptables rule. this is my current rules. iptables -t nat -A PREROUTING -p tcp --dport 443 -m state --state NEW -m ...
  • 11
0 votes
1 answer
563 views

Redirection thru redsocks connecting but not responding

Am using redsocks to redirect thru a proxy. The problem is that when i use a tool like wget it appears to be connecting but not resolving. What could be the problem and how could i solve it? Executing ...
  • 101
2 votes
0 answers
763 views

How do I proxy all local traffic on 127.0.0.1:1080 use nftables tproxy

On my desktop linux,I want to surf the Internet through a proxy VPN. I already have a client for a transparent proxy listing on 127.0.0.1:1080. I want the traffic generated by the local process to ...
  • 21
0 votes
1 answer
39 views

Transparent proxy between two applications

I've got a following setup: Application A - makes HTTP requests to some API, running on http://localhost:8090. Application B - intercepts HTTP request from A, a proxy running on http://localhost:...
0 votes
1 answer
2k views

Transparent TCP load balancing with NGINX/HAproxy

I have been trying for some days and still have no luck with getting transparent TCP load balancer to work using HAproxy/NGINX. The problem is: everything works correctly, until i try to enable ...
1 vote
3 answers
3k views

Local transparent proxy to filter http/https adult content using squid

I want to filter all of my internet (http & https) connections using a whitelist. I heard about squid, so I started trying to run it. I found two main tutorials: https://wiki.squid-cache.org/...
0 votes
0 answers
243 views

Recommend way of setting-up custom docker network?

I'm trying to setup transparent proxy network using container (docker) Client (C) Proxy (P1) Proxy (P2) 10.10.1.1/24 10.10.2.1/24 10.10.3.1/24 veth0 veth0 ...
2 votes
2 answers
2k views

Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?

I'm trying to setup transparent proxying networks on my host. Real Client and Proxy targets are containters but in this experiment I use netns (network namespace) separated envinroment. To redirect ...
1 vote
1 answer
9k views

Proxy Protocol with Nginx Reverse Proxy

Overview I have an Nginx reverse proxy setup pointing to a SaaS application (BigCommerce). While my configuration works great, I'm not able to ensure the client IP shows in the SaaS backend instead ...
0 votes
2 answers
12k views

How to configure squid4 as transparent proxy?

There are many posts how to do that, most for older versions. According to this post, to setup squid as transparent server for port 80 it should be as simple as this: //squid.config http_port 3128 ...
  • 511
1 vote
0 answers
70 views

How to redirect incoming traffic (HTTP, HTTPS) to specified server which is accessible behind SOCKS4 proxy?

servers setup schema I have a web application on a "Server behind proxy", which is not accessible through internet. It's only accessible through "SOCKS4 server", which I can't change anything on. I ...
1 vote
0 answers
153 views

Transparent Proxy with DHCP passthru?

I'm trying to replicate on a small Linux-based router a behavior I've seen elsewhere, such as in cable modems: I need to get a single DHCP address from the WAN side, offer/pass that same address to ...
1 vote
2 answers
4k views

Squid Proxy using HTTPS

So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
0 votes
2 answers
749 views

Web Proxy to avoid port forwarding

Hello. I wonder if anyone could help me define which solution to use. I need to run a cloud server that acts as a proxy for HTTP requests, but on the web server side, I have no fixed IP or possibility ...
0 votes
0 answers
2k views

Debugging squid proxy access log - TAG_NONE/200

We are using transparent proxy, Squid (Squid Cache: Version 3.5.28 Service Name: squid). Issue seems somehow similar to Squid SSL Bump TAG_NONE / HEIR_NONE but my access log is slightly different. ...
  • 1
0 votes
1 answer
716 views

How to make a transparent proxy server based intranet dns

I want to implement a server for responding any http/https request sent to it. It's much like forward proxy using CONNECT method. I do not want the clients to set proxy explicitly. The DNS of the ...
1 vote
0 answers
2k views

how to redirect android traffic to proxy

I know that Android does not support automatic detection pac files, and I also know that port 443 can not be redirected. So, This is what I have: For example, asssuming the squid-cache proxy port is ...
  • 251
3 votes
0 answers
3k views

Transparent Tor Proxy with pfSense

I'm trying to set up a transparent Tor proxy in Virtualbox using pfSense. In the end I want all traffic to be passed through Tor, whenever I connect a VM to the same internal network as the proxy. I ...
  • 131
0 votes
1 answer
991 views

Softether VPN - How to setup Squid proxy without switching off SecureNAT DHCP?

I have a Softether VPN server running and configured to use DHCP (SecureNAT) instead of local bridging as I couldn't figure out how to do it (despite reading all available tutorials on the internet). ...
8 votes
1 answer
5k views

What exactly is a "transparent reverse proxy"?

I've been running some services as docker containers on a DigitalOcean droplet for a few years now, and recently I figured it was time to update one of them to the latest version (the service in ...
  • 205
0 votes
0 answers
112 views

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate ...
  • 143
2 votes
2 answers
950 views

Transparent HAproxy on ubuntu (amazon EC2)

I am trying to setup a transparent HAproxy load balancer using ubuntu 18.04 on amazon EC2. I got the HAproxy to work on a non-transparent mode, so now I am trying to add the changes required for the ...
  • 303

1
2 3 4 5