Mike Cardwell <squid-users <at> lists.grepular.com> writes:
>
> * on the Wed, Oct 23, 2013 at 05:14:00PM +1300, Amos Jeffries wrote:
>
> > For starters NAT has never been "transparent proxy". NAT is the lazy
> > admins replacement, using the proxy IP on outbound to avoid having to
> > setup proper routing rules.
> > For the real Transparent Proxy use TPROXY interception ("TPROXY" being
> > an abbreviation of "transparent proxy"
>
> Thanks. I was not aware of TPROXY. That sounds like a superior solution.
>
Anyone updated the guide with SQUID 3.3 and newer linux kernel (3.11,ex: with
ubuntu 13)?
My coworker said TPROXY way doesn't route the traffic to remote host
correctly. He tried this few months ago. I think we need a up to date guide on
transparent proxy for remote host (with concrete example that works). I
followed too many guides that don't work.
The alternative for remote host is policy based routing (if you followed my
other thread on this for ipv4 but ipv6 should not be too different). But as I
said before I am not able to make it work.
Received on Wed Oct 30 2013 - 20:18:41 MDT
This archive was generated by hypermail 2.2.0 : Thu Oct 31 2013 - 12:00:08 MDT