Skip to main content
Share Your Experience: Take the 2024 Developer Survey
12 votes
Accepted

What exactly is a "transparent reverse proxy"?

Here it means that Caddy doesn't modify the request by stripping out the HTTP Host header when passing the request to your web server in Docker container. These can be the reasons why it is required ...
Tero Kilkanen's user avatar
6 votes

Configure squid 3.5 to use different parent proxies for different listening ports

Thanks for help, finally found working configuration (thanks guys from squid mailing list) http_port 3128 name=port_3128 http_port 3127 name=port_3127 nonhierarchical_direct off acl port_3128_acl ...
bonzaster's user avatar
  • 211
6 votes
Accepted

HAProxy TCP Transparent Mode Remote Servers

Transparent mode requires that the haproxy be the default gateway of the backend servers. Remote servers won't work.
longneck's user avatar
  • 23.2k
5 votes
Accepted

Proxy Protocol with Nginx Reverse Proxy

You are looking in the wrong direction: The listen 443 ssh http2 proxy_protocol; directive (cf. listen) enables the parsing of the Proxy Protocol on incoming connections. Your browser does not speak ...
Piotr P. Karwasz's user avatar
5 votes

Migrate web server to new datacenter and new IP

I use the following migration process in these cases: Change DNS TTL to minimum value Wait for DNS TTL to update Copy keys / certificates to new server Put site to maintenance mode Synchronise files/...
Tero Kilkanen's user avatar
5 votes

What's the difference between transparent proxy and explicit proxy

How proxies work How a transparent proxy works The browser thinks it is talking to the web server, and the proxy intercepts this traffic, and performs whatever tasks it needs to. How an explicit ...
jrtapsell's user avatar
  • 1,266
4 votes
Accepted

How to forward HTTPS traffic through squid transparently?

but all the ones I found describe the creation of a certificate pair to decrypt/re-encrypt the traffic - something I do not want to do. What you are asking for simply isn't possible because of how ...
Zoredache's user avatar
  • 132k
3 votes
Accepted

Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?

I have to assume that the transparent proxy is acting as a router, at least for ICMP, so will route back the ICMP echo where it came from (veth0). Finding the problem When reproducing your setup and ...
A.B's user avatar
  • 12.9k
3 votes

Squid Proxy using HTTPS

You need to compile the squid from source code with --enable-ssl-crtd --with-openssl, or simply install squid from this ppa https://github.com/diladele/squid-ubuntu, it already compiled with ssl ...
Ahmed Morgan's user avatar
3 votes
Accepted

Block HTTPS Traffic with Transparent Proxy Setup

Well... There is a lot to say about your iptables rules (for exemple the state ESTABLISHED should be first)... But about the specific problem you are asking for, remember that INPUT is for incoming ...
progfou's user avatar
  • 66
3 votes

Local transparent proxy

Yes, it is possible. You can use policy routing in Linux machine to redirect traffic to squid proxy as shown in this page. To summarize the steps: Setup mangle rule in iptables to mark traffic to be ...
Khaled's user avatar
  • 37k
3 votes
Accepted

Nginx stream block with wildcard filtering of subdomains

You are looking for the hostnames keyword. With this keyword you can use *.example.com as a wildcard entry for example.com domain. Similarly as for server_name directive you can use .example.com for ...
Ivan Shatsky's user avatar
  • 2,916
2 votes

Transparent proxy and HTTPS with squid

We have implemented HTTPS filtering with squid cache using the SNI. It works well in the transparent SSL mode. ACLs are implemented as well. We have integrated the squid box with Cisco ASA as WCCP ...
Kias's user avatar
  • 21
2 votes

Local transparent proxy

No, it's not possible. You have to use nat if you wanna redirect traffic: # iptables -A OUTPUT -t nat -p tcp --dport 80 -j DNAT --to 127.0.0.1:3128
Ipor Sircer's user avatar
  • 1,236
2 votes

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

It's not that Squid is changing it from HTTP to HTTPS, it's that NAT reflection doesn't apply to traffic initiated by the host itself (which is the case for Squid). Traffic from the LAN hosts would ...
Chris Buechler's user avatar
2 votes

What's the difference between transparent proxy and explicit proxy

The browser talks differently. With explicit proxy, it will issue a special CONNECT verb whenever it needs anything over https. With transparent proxy, it will issue normal GET or POST, but never ...
kubanczyk's user avatar
  • 14k
2 votes

How to configure squid4 as transparent proxy?

Your iptables nat table should look like this: -A OUTPUT -o lo -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i wlan0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A ...
Piotr P. Karwasz's user avatar
2 votes

Migrate web server to new datacenter and new IP

You may first want to decide (or estimate) what you want to sacrifice when you are moving: Ease of the transition (if a lot of the points below are important, the transition will be a project instead ...
fraxinus's user avatar
  • 624
2 votes
Accepted

Fully transparent reverse proxy

Edit: If you are concerned about the connection between your reverse proxy (that terminates the SSL tunnel) and the content server being unsecured, although this does work and is secure, you might be ...
Trigus's user avatar
  • 111
2 votes

Setting up a transparent proxy across network namespaces: failed to get target destination address

Assuming an application expect a SOCKS proxy which for whatever reason, must live inside a network namespace (eg, to benefit from a namespace OpenVPN connection), then the following will make it work ...
drzraf's user avatar
  • 131
1 vote

Redirection thru redsocks connecting but not responding

I replaced the redsocks with transocks and now I can use one config to both "http" and "https" redirect (in my IP table I redirect all the traffic to the transocks) https://github....
Anderson Danilo's user avatar
1 vote

Local transparent proxy to filter http/https adult content using squid

Sorry, wrong answer due to misunderstanding. I haven't deleted it because of the comments yet.
Hauke Laging's user avatar
  • 5,365
1 vote

How to configure squid4 as transparent proxy?

If your Squid proxy runs on your gateway, you would need the following iptables to redirect the traffic on HTTP/HTTPS to Squid (note here ens33 is the NIC facing the local network), see complete ...
Rafael's user avatar
  • 544
1 vote

How to make a transparent proxy server based intranet dns

Finally, I solved this problem. I could make a dns based transparent proxy via a single command proxy sps -p :80,:443 -q 8.8.8.8:53 --log proxy.log --daemon, it worked. see more details on https://...
Donghua Liu's user avatar
1 vote
Accepted

Transparent HAproxy on ubuntu (amazon EC2)

iptables -L -t mangle • (Fixed now) Don't do this unless you're looking for matching packets counters. It's absolutely not-human-friendly output compared to: iptables-save -t mangle • For ...
poige's user avatar
  • 9,595
1 vote

Transparent Proxy Squid with internal and external network

If your Squid runs at default gateway (intercept ports 3126 and 3127), then the following iptables commands allow to redirect HTTP/HTTPS traffic from within your LAN into Squid's instance. # redirect ...
Rafael's user avatar
  • 544
1 vote

Local transparent proxy

Run the following command to redirect all traffic headed to (from local processes) port 80: sudo iptables -t nat -A OUTPUT -p tcp \ -m owner ! --uid-owner root --dport 80 \ -j REDIRECT --to-port ...
Tom Saleeba's user avatar
1 vote

How to forward HTTPS traffic through squid transparently?

Two steps: install redsocks and make configuration to redirect any TCP connection (https connection is based tcp) from the listen port to HTTPS proxy port(HTTP/CONNECT eg. your squid http proxy port) ...
傅继晗's user avatar
  • 151
1 vote

Squid: curl: (52) Empty reply from server

Basically, one can run two kinds of (HTTP) proxies: Normal: you need to configure each client (i.e. browsers) for using it. Transparent: Don't demand configuration, the hosts' traffic is sent to ...
JucaPirama's user avatar
1 vote

Squid: curl: (52) Empty reply from server

You are hitting your proxy via curl not telling curl to use the proxy.. Try this http_proxy=http://your.proxy.server:3120/ curl http://ya.ru You can make it perminate for the session by export ...
Mike's user avatar
  • 22.5k

Only top scored, non community-wiki answers of a minimum length are eligible