Questions tagged [transparent-proxy]
The transparent-proxy tag has no usage guidance.
211
questions
0
votes
0
answers
34
views
TPROXY is not redirecting all traffic to a specified port
I'm writing a UDP transparent proxy in Rust, I'm using several crates
socket2 => Access to the creation of a RAW socket
nix::sys::socket => Access to all of the low level socket API calls
std::...
0
votes
1
answer
87
views
How can I setup Nginx with a transparent socket?
Similarly to this Cloudflare blog post, I am trying to setup Nginx with a transparent socket (with the IP_TRANSPARENT socket option). I want to do this to implement a reverse TCP proxy that ...
- 233
0
votes
2
answers
232
views
Transparent proxy to corporate proxy in k8s
Attempting to deploy an external app into a corporate k8s cluster. All egress traffic leaving this external app has to go through the corporate proxy before getting to the internet. The issue is that ...
0
votes
0
answers
23
views
grab https URL without import CA into PC from squid access log
1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com.
2.We want to grab all of the URL from the access log which about *.aa.com, ...
- 1
1
vote
2
answers
929
views
Transparent HTTPS proxy with squid using SNI
Final update: I ended up using nginx as squid proved to be difficult to work with, see last update at the end for more detail
What I'm trying to do is setting up a transparent HTTPS proxy with squid ...
0
votes
0
answers
65
views
Is it possible to route packet from Postrouting back to Prerouting?
I am wondering if I can mark TCP and UDP packets with DSCP, then at Postrouting, if a packet has certain DSCP marking, it will be rerouted back to Prerouting.
The reason I am doing this is because I ...
- 1
0
votes
0
answers
154
views
Direct Server Return software and configuration for mesh network of raspbery pi servers
I don't know much about DSR technology but as I am aware both load balancer and servers need to be behind same router because of virtual IP addresses.
I need solution to have cloud-based geo-based ...
- 133
0
votes
0
answers
159
views
How squid whitelist domain + exclude certificate error domain
I have Squid Setup as a transparent HTTP+HTTPS proxy in my network, using SSL-Bump. I am having trouble with a handful of domains and those domains showing me cert errors while dumping and splicing, ...
0
votes
1
answer
200
views
How to create Iptables rules for squid to only handle web traffic request
I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect ...
0
votes
0
answers
19
views
Connection refuse after ip route add local 0.0.0.0/0 dev lo table 100
i have ubuntu vps server,
and want to use TPROXY to handle all outgoing traffic by Go Simple Tunnel , i apply these ip table rules
iptables -t mangle -N DIVERT
iptables -t mangle -A DIVERT -j MARK --...
0
votes
0
answers
129
views
Making a Two-step VPN Connection using a Transparent Proxy behind OpenVPN
I have two VPSs and I'm trying to make a two-step VPN connection as follows:
[start] >> Client <-> OpenVPN on Server A <-> Proxy (ex: SQUID) on Server B <-> Internet
So far:
I ...
- 109
0
votes
0
answers
106
views
Double Proxy: IPSec to Server1 then SSH to Server2
What I'm trying to achieve:
(Clients)<IPSec Xauth PSK>(Server 1)<SSH-based SOCKS5>(Server 2) --> Free Internet
How is that possible for both UDP and TCP traffics?
What I've done:
I ran ...
- 48
1
vote
0
answers
554
views
How can I make TPROXY option in iptables work when the destination proxy address is a non-local one?
I installed a TPROXY server in my router that forwards the traffic to a SOCKS5 server.
The router has the address 192.168.1.1 and my PC has the address 192.168.1.33. Also, I have a local bridge "...
- 133
0
votes
0
answers
241
views
How can I set up a transparent proxy (TPROXY type) across network namespaces?
I want to setup a transparent proxy across network namespaces. I have two network namespaces, "nsx" and "nsy", each one has a veth pair, the pair of "nsx" is pointed to ...
- 133
1
vote
1
answer
348
views
Setting up a transparent proxy across network namespaces: failed to get target destination address
I'm trying to setup a transparent proxy across network namespaces.
First I create the network namespaces, virtual ethernet devices and enable forwarding inside one of the namespaces:
ip netns add nsx
...
- 133
1
vote
0
answers
541
views
How can I route a specific local device through a proxy? (Smart TV with no available proxy configuration, only gateway+dns)
Current Setup
https://i.stack.imgur.com/2w5Nd.png
Currently just running a pi-hole DNS, and a lighttpd server on port 80 to access pi-hole admin web interface.
I have made a DHCP reservation on my ...
- 111
0
votes
1
answer
195
views
Should HTTP load balancer forward bad requests to backend?
If a HTTP client sends a GET request with a body that would generate a 400 Bad Request response, should the load balancer forward that request to the backend or deal with it immediately? Is there any ...
- 5,756
0
votes
0
answers
923
views
Proxy squid Very slow
I work in a school where we have approximately 500 computers. We have installed a proxy SQUID to filter adult websites etc. The server got like 32go ram and enough storage. But surfing become too ...
0
votes
1
answer
102
views
Rolling updates of backend with udp server sockets
I have a backend system used for IOT devices which use UDP protocol for communications. And there are certain TCP (HTTP2) based APIs for mobile apps from the same backend.
I am trying to build a ...
- 61
0
votes
1
answer
1k
views
Routing all traffic from an external machine to a proxy to a proxy
May be there is a duplicated question but it seems no one do this scenario.
I have several machines in my network which are not using proxy to outbound.
I want to redirect all traffic, using route ...
- 1
0
votes
0
answers
1k
views
SQUID Transparent Proxy: Error INVALID_URL and ACCESS_DENIED
I configure squid proxy on Centos 7. I am using Squid version 3.5.20.
I also try squid 4.10 on Ubuntu 20.04, but I got the same problem. Maybe my ACL was wrong.
I configure DSTNAT on Router to ...
- 21
1
vote
1
answer
1k
views
Nginx stream block with wildcard filtering of subdomains
I have set up an Nginx server as L4 Proxy(Forward Proxy With Stream Module), with the following configuration in the nginx.conf file;
stream {
resolver 8.8.8.8;
server {
listen 443;
...
- 753
0
votes
1
answer
284
views
TPROXY redirect and routing decision
I would like to ask what happens internally when redirecting using Tproxy.
iptables -t mangle -A PREROUTING -p tcp --dport 443 -j TPROXY --tproxy-mark 1 --on-port 40001
It located in PREROUTING in ...
- 11
0
votes
1
answer
2k
views
Fully transparent reverse proxy
I'm trying to set up the following:
┌──────────────────┐ ┌────────────────────┐ ┌─────────┐
│ │ │ │ │ │
│ ...
- 81
2
votes
1
answer
1k
views
How to Make NGINX to use System Proxy?
I am trying to setup a nginx server that forwards the incoming request to a corporate porxy (its a mcafee proxy) with a proxy header Host and the actual destination host something like ...
- 21
0
votes
0
answers
88
views
What is an HTTP Proxy (forward not reverse) required to do with a client's request headers?
1
Could someone help me distill down what, exactly, the minimum requirements are for a proxy server (just a forward proxy not reverse) with regard to headers? What headers absolutely must be deleted ...
0
votes
1
answer
58
views
What is the correct definition of a transparent proxy?
What is the correct definition of a transparent proxy? I see the term being used for proxies that require no configuration that do not modify requests and for proxies that do require configuration ...
1
vote
0
answers
595
views
TPROXY interferes DNAT port forwarding rules
I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
- 23
2
votes
3
answers
870
views
Migrate web server to new datacenter and new IP
I have a web server that hosts 200+ domains but it needs to be moved to another data center and get a new IP address. But since all DNS settings have to be updated manually, I thought about whether ...
- 21
0
votes
0
answers
110
views
setting up transparent proxy on gateway computer
I am looking to setup a transparent proxy (client) on a computer which will act as a gateway/router for (client) computers connecting to this gateway computer. The client computers use a VPN client ...
- 1,150
0
votes
2
answers
209
views
Squid proxy server returning error
I have designed a topology which has an external proxy server (192.168.239.152) and a Mikrotik Router (192.168.239.151).
The MikroTik router connected with a LAN and enables internet connection to LAN ...
- 1
0
votes
0
answers
2k
views
Nftables tproxy not working
I want to redirect all DNS traffic to proxy. For that i setup following rules in nftables:
chain prerouting {
type filter hook prerouting priority mangle; policy accept;
udp dport ...
0
votes
0
answers
1k
views
Forward traffic on port to another host with transparent proxy
I have a host with ip $HOST_IP which runs an HTTP server on port 8080. There is a transparent proxy server running on port 9000 on host with IP $PROXY_SERVICE_IP.
I'm trying to forward traffic from ...
- 101
1
vote
0
answers
92
views
iptables: Route outgoing requests to a local proxy preserving destination address and port
I want the proxy to make some routing decisions based on the original destination IP and port. I can do this easily for an incoming request:
iptables -t mangle -A PREROUTING -p tcp --destination 10.37....
1
vote
0
answers
273
views
Conntrack not showing iptables redirected flow
I have a client and server. At Server I have a redirect rule to redirect all incoming flows to port 15006.
Client IP: 10.20.3.53
ServerIP : 10.20.3.63
I have the following iptables rules on the ...
- 111
1
vote
1
answer
613
views
Squid HTTP Transparent Proxy for Spoofed DNS Requests
I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
- 11
1
vote
0
answers
3k
views
Transparent Proxy with Squid 4.10 not working
Squid 4.10 on Ubuntu Server 20.04
I have tried so many things and spent this entire week researching on how to get this working. To get an idea of what I am trying to do here, take a look at these ...
- 121
1
vote
0
answers
208
views
iptables tproxy with statistic --mode nth
I`m using squid now. and i run 4 squid for load-balance
and i trying to change my iptables rule.
this is my current rules.
iptables -t nat -A PREROUTING -p tcp --dport 443 -m state --state NEW -m ...
- 11
0
votes
1
answer
1k
views
Redirection thru redsocks connecting but not responding
Am using redsocks to redirect thru a proxy. The problem is that when i use a tool like wget it appears to be connecting but not resolving. What could be the problem and how could i solve it?
Executing ...
- 101
2
votes
0
answers
1k
views
How do I proxy all local traffic on 127.0.0.1:1080 use nftables tproxy
On my desktop linux,I want to surf the Internet through a proxy VPN.
I already have a client for a transparent proxy listing on 127.0.0.1:1080.
I want the traffic generated by the local process to ...
- 21
0
votes
1
answer
48
views
Transparent proxy between two applications
I've got a following setup:
Application A - makes HTTP requests to some API, running on http://localhost:8090.
Application B - intercepts HTTP request from A, a proxy running on http://localhost:...
0
votes
1
answer
2k
views
Transparent TCP load balancing with NGINX/HAproxy
I have been trying for some days and still have no luck with getting transparent TCP load balancer to work using HAproxy/NGINX.
The problem is: everything works correctly, until i try to enable ...
- 3
1
vote
3
answers
3k
views
Local transparent proxy to filter http/https adult content using squid
I want to filter all of my internet (http & https) connections using a whitelist.
I heard about squid, so I started trying to run it. I found two main tutorials:
https://wiki.squid-cache.org/...
user571431
0
votes
0
answers
333
views
Recommend way of setting-up custom docker network?
I'm trying to setup transparent proxy network using container (docker)
Client (C) Proxy (P1) Proxy (P2)
10.10.1.1/24 10.10.2.1/24 10.10.3.1/24
veth0 veth0 ...
- 133
3
votes
2
answers
3k
views
Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?
I'm trying to setup transparent proxying networks on my host.
Real Client and Proxy targets are containters but in this experiment
I use netns (network namespace) separated envinroment.
To redirect ...
- 133
2
votes
1
answer
16k
views
Proxy Protocol with Nginx Reverse Proxy
Overview
I have an Nginx reverse proxy setup pointing to a SaaS application (BigCommerce). While my configuration works great, I'm not able to ensure the client IP shows in the SaaS backend instead ...
- 23
0
votes
2
answers
15k
views
How to configure squid4 as transparent proxy?
There are many posts how to do that, most for older versions.
According to this post, to setup squid as transparent server for port 80 it should be as simple as this:
//squid.config
http_port 3128 ...
- 541
1
vote
0
answers
123
views
How to redirect incoming traffic (HTTP, HTTPS) to specified server which is accessible behind SOCKS4 proxy?
servers setup schema
I have a web application on a "Server behind proxy", which is not accessible through internet. It's only accessible through "SOCKS4 server", which I can't change anything on. I ...
- 11
1
vote
0
answers
195
views
Transparent Proxy with DHCP passthru?
I'm trying to replicate on a small Linux-based router a behavior I've seen elsewhere, such as in cable modems: I need to get a single DHCP address from the WAN side, offer/pass that same address to ...
- 11
2
votes
2
answers
7k
views
Squid Proxy using HTTPS
So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
