Questions tagged [transparent-proxy]
The transparent-proxy tag has no usage guidance.
208
questions
0
votes
1
answer
24
views
How to Proxy Traffic from DDoS-Protected Server to Origin Server While Preserving Client IP?
Problem:
I have a server (Server A) hosted in Datacenter A, where a web server listens on ports 80 and 443 for the domain example.com. Unfortunately, Datacenter A does not offer DDoS protection.
To ...
- 101
0
votes
1
answer
194
views
Debugging combination of tproxy and policy based routing
let me preface this by saying that I know I am combining a wild amount
of things in here, but sometimes that is where things take you.
So the scenario:
I'm using squid and tproxy to transparently ...
0
votes
0
answers
657
views
TPROXY is not redirecting all traffic to a specified port
I'm writing a UDP transparent proxy in Rust, I'm using several crates
socket2 => Access to the creation of a RAW socket
nix::sys::socket => Access to all of the low level socket API calls
std::...
0
votes
1
answer
470
views
How can I setup Nginx with a transparent socket?
Similarly to this Cloudflare blog post, I am trying to setup Nginx with a transparent socket (with the IP_TRANSPARENT socket option). I want to do this to implement a reverse TCP proxy that ...
- 242
1
vote
2
answers
927
views
Transparent proxy to corporate proxy in k8s
Attempting to deploy an external app into a corporate k8s cluster. All egress traffic leaving this external app has to go through the corporate proxy before getting to the internet. The issue is that ...
0
votes
0
answers
88
views
grab https URL without import CA into PC from squid access log
1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com.
2.We want to grab all of the URL from the access log which about *.aa.com, ...
- 1
3
votes
2
answers
8k
views
Transparent HTTPS proxy with squid using SNI
Final update: I ended up using nginx as squid proved to be difficult to work with, see last update at the end for more detail
What I'm trying to do is setting up a transparent HTTPS proxy with squid ...
0
votes
0
answers
159
views
Is it possible to route packet from Postrouting back to Prerouting?
I am wondering if I can mark TCP and UDP packets with DSCP, then at Postrouting, if a packet has certain DSCP marking, it will be rerouted back to Prerouting.
The reason I am doing this is because I ...
- 1
0
votes
1
answer
505
views
How to create Iptables rules for squid to only handle web traffic request
I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect ...
1
vote
0
answers
997
views
How can I make TPROXY option in iptables work when the destination proxy address is a non-local one?
I installed a TPROXY server in my router that forwards the traffic to a SOCKS5 server.
The router has the address 192.168.1.1 and my PC has the address 192.168.1.33. Also, I have a local bridge "...
- 133
0
votes
0
answers
402
views
How can I set up a transparent proxy (TPROXY type) across network namespaces?
I want to setup a transparent proxy across network namespaces. I have two network namespaces, "nsx" and "nsy", each one has a veth pair, the pair of "nsx" is pointed to ...
- 133
1
vote
1
answer
815
views
Setting up a transparent proxy across network namespaces: failed to get target destination address
I'm trying to setup a transparent proxy across network namespaces.
First I create the network namespaces, virtual ethernet devices and enable forwarding inside one of the namespaces:
ip netns add nsx
...
- 133
1
vote
0
answers
863
views
How can I route a specific local device through a proxy? (Smart TV with no available proxy configuration, only gateway+dns)
Current Setup
https://i.sstatic.net/2w5Nd.png
Currently just running a pi-hole DNS, and a lighttpd server on port 80 to access pi-hole admin web interface.
I have made a DHCP reservation on my router ...
- 111
0
votes
1
answer
380
views
Should HTTP load balancer forward bad requests to backend?
If a HTTP client sends a GET request with a body that would generate a 400 Bad Request response, should the load balancer forward that request to the backend or deal with it immediately? Is there any ...
anon
0
votes
0
answers
1k
views
Proxy squid Very slow
I work in a school where we have approximately 500 computers. We have installed a proxy SQUID to filter adult websites etc. The server got like 32go ram and enough storage. But surfing become too ...
0
votes
1
answer
122
views
Rolling updates of backend with udp server sockets
I have a backend system used for IOT devices which use UDP protocol for communications. And there are certain TCP (HTTP2) based APIs for mobile apps from the same backend.
I am trying to build a ...
- 61
1
vote
1
answer
2k
views
Routing all traffic from an external machine to a proxy to a proxy
May be there is a duplicated question but it seems no one do this scenario.
I have several machines in my network which are not using proxy to outbound.
I want to redirect all traffic, using route ...
- 11
0
votes
0
answers
2k
views
SQUID Transparent Proxy: Error INVALID_URL and ACCESS_DENIED
I configure squid proxy on Centos 7. I am using Squid version 3.5.20.
I also try squid 4.10 on Ubuntu 20.04, but I got the same problem. Maybe my ACL was wrong.
I configure DSTNAT on Router to ...
- 21
1
vote
1
answer
2k
views
Nginx stream block with wildcard filtering of subdomains
I have set up an Nginx server as L4 Proxy(Forward Proxy With Stream Module), with the following configuration in the nginx.conf file;
stream {
resolver 8.8.8.8;
server {
listen 443;
...
- 783
0
votes
1
answer
441
views
TPROXY redirect and routing decision
I would like to ask what happens internally when redirecting using Tproxy.
iptables -t mangle -A PREROUTING -p tcp --dport 443 -j TPROXY --tproxy-mark 1 --on-port 40001
It located in PREROUTING in ...
- 11
0
votes
1
answer
5k
views
Fully transparent reverse proxy
I'm trying to set up the following:
┌──────────────────┐ ┌────────────────────┐ ┌─────────┐
│ │ │ │ │ │
│ ...
- 111
3
votes
1
answer
3k
views
How to Make NGINX to use System Proxy?
I am trying to setup a nginx server that forwards the incoming request to a corporate porxy (its a mcafee proxy) with a proxy header Host and the actual destination host something like ...
- 31
0
votes
0
answers
119
views
What is an HTTP Proxy (forward not reverse) required to do with a client's request headers?
1
Could someone help me distill down what, exactly, the minimum requirements are for a proxy server (just a forward proxy not reverse) with regard to headers? What headers absolutely must be deleted ...
0
votes
1
answer
60
views
What is the correct definition of a transparent proxy?
What is the correct definition of a transparent proxy? I see the term being used for proxies that require no configuration that do not modify requests and for proxies that do require configuration ...
1
vote
0
answers
853
views
TPROXY interferes DNAT port forwarding rules
I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
- 23
2
votes
3
answers
1k
views
Migrate web server to new datacenter and new IP
I have a web server that hosts 200+ domains but it needs to be moved to another data center and get a new IP address. But since all DNS settings have to be updated manually, I thought about whether ...
- 21
0
votes
0
answers
150
views
setting up transparent proxy on gateway computer
I am looking to setup a transparent proxy (client) on a computer which will act as a gateway/router for (client) computers connecting to this gateway computer. The client computers use a VPN client ...
- 1,190
0
votes
2
answers
274
views
Squid proxy server returning error
I have designed a topology which has an external proxy server (192.168.239.152) and a Mikrotik Router (192.168.239.151).
The MikroTik router connected with a LAN and enables internet connection to LAN ...
- 1
0
votes
0
answers
2k
views
Nftables tproxy not working
I want to redirect all DNS traffic to proxy. For that i setup following rules in nftables:
chain prerouting {
type filter hook prerouting priority mangle; policy accept;
udp dport ...
1
vote
0
answers
2k
views
Forward traffic on port to another host with transparent proxy
I have a host with ip $HOST_IP which runs an HTTP server on port 8080. There is a transparent proxy server running on port 9000 on host with IP $PROXY_SERVICE_IP.
I'm trying to forward traffic from ...
- 111
1
vote
0
answers
107
views
iptables: Route outgoing requests to a local proxy preserving destination address and port
I want the proxy to make some routing decisions based on the original destination IP and port. I can do this easily for an incoming request:
iptables -t mangle -A PREROUTING -p tcp --destination 10.37....
1
vote
0
answers
332
views
Conntrack not showing iptables redirected flow
I have a client and server. At Server I have a redirect rule to redirect all incoming flows to port 15006.
Client IP: 10.20.3.53
ServerIP : 10.20.3.63
I have the following iptables rules on the ...
- 111
2
votes
1
answer
897
views
Squid HTTP Transparent Proxy for Spoofed DNS Requests
I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
- 31
1
vote
0
answers
3k
views
Transparent Proxy with Squid 4.10 not working
Squid 4.10 on Ubuntu Server 20.04
I have tried so many things and spent this entire week researching on how to get this working. To get an idea of what I am trying to do here, take a look at these ...
- 121
1
vote
0
answers
243
views
iptables tproxy with statistic --mode nth
I`m using squid now. and i run 4 squid for load-balance
and i trying to change my iptables rule.
this is my current rules.
iptables -t nat -A PREROUTING -p tcp --dport 443 -m state --state NEW -m ...
- 11
0
votes
1
answer
1k
views
Redirection thru redsocks connecting but not responding
Am using redsocks to redirect thru a proxy. The problem is that when i use a tool like wget it appears to be connecting but not resolving. What could be the problem and how could i solve it?
Executing ...
- 101
2
votes
0
answers
1k
views
How do I proxy all local traffic on 127.0.0.1:1080 use nftables tproxy
On my desktop linux,I want to surf the Internet through a proxy VPN.
I already have a client for a transparent proxy listing on 127.0.0.1:1080.
I want the traffic generated by the local process to ...
- 21
0
votes
1
answer
71
views
Transparent proxy between two applications
I've got a following setup:
Application A - makes HTTP requests to some API, running on http://localhost:8090.
Application B - intercepts HTTP request from A, a proxy running on http://localhost:...
0
votes
1
answer
3k
views
Transparent TCP load balancing with NGINX/HAproxy
I have been trying for some days and still have no luck with getting transparent TCP load balancer to work using HAproxy/NGINX.
The problem is: everything works correctly, until i try to enable ...
- 3
1
vote
3
answers
3k
views
Local transparent proxy to filter http/https adult content using squid
I want to filter all of my internet (http & https) connections using a whitelist.
I heard about squid, so I started trying to run it. I found two main tutorials:
https://wiki.squid-cache.org/...
user571431
0
votes
0
answers
379
views
Recommend way of setting-up custom docker network?
I'm trying to setup transparent proxy network using container (docker)
Client (C) Proxy (P1) Proxy (P2)
10.10.1.1/24 10.10.2.1/24 10.10.3.1/24
veth0 veth0 ...
- 133
3
votes
2
answers
4k
views
Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?
I'm trying to setup transparent proxying networks on my host.
Real Client and Proxy targets are containters but in this experiment
I use netns (network namespace) separated envinroment.
To redirect ...
- 133
4
votes
1
answer
22k
views
Proxy Protocol with Nginx Reverse Proxy
Overview
I have an Nginx reverse proxy setup pointing to a SaaS application (BigCommerce). While my configuration works great, I'm not able to ensure the client IP shows in the SaaS backend instead ...
- 43
0
votes
2
answers
16k
views
How to configure squid4 as transparent proxy?
There are many posts how to do that, most for older versions.
According to this post, to setup squid as transparent server for port 80 it should be as simple as this:
//squid.config
http_port 3128 ...
- 581
1
vote
0
answers
139
views
How to redirect incoming traffic (HTTP, HTTPS) to specified server which is accessible behind SOCKS4 proxy?
servers setup schema
I have a web application on a "Server behind proxy", which is not accessible through internet. It's only accessible through "SOCKS4 server", which I can't change anything on. I ...
- 11
1
vote
0
answers
247
views
Transparent Proxy with DHCP passthru?
I'm trying to replicate on a small Linux-based router a behavior I've seen elsewhere, such as in cable modems: I need to get a single DHCP address from the WAN side, offer/pass that same address to ...
- 11
3
votes
2
answers
10k
views
Squid Proxy using HTTPS
So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
0
votes
2
answers
973
views
Web Proxy to avoid port forwarding
Hello. I wonder if anyone could help me define which solution to use. I need to run a cloud server that acts as a proxy for HTTP requests, but on the web server side, I have no fixed IP or possibility ...
1
vote
0
answers
3k
views
Debugging squid proxy access log - TAG_NONE/200
We are using transparent proxy, Squid (Squid Cache: Version 3.5.28 Service Name: squid). Issue seems somehow similar to Squid SSL Bump TAG_NONE / HEIR_NONE but my access log is slightly different.
...
- 11
1
vote
1
answer
1k
views
How to make a transparent proxy server based intranet dns
I want to implement a server for responding any http/https request sent to it.
It's much like forward proxy using CONNECT method. I do not want the clients to set proxy explicitly. The DNS of the ...
- 131