[tproxy] MAC and VLAN transparency

Cameron Schaus cam at schaus.ca
Mon Jul 16 23:51:28 CEST 2007


On Sun, Jul 15, 2007 at 05:38:53PM +0200, Balazs Scheidler wrote:
> Before starting anything, you should check out our latest tproxy4
> patches, posted to netdev@ around March, and work relative to that tree,
> as I don't want to maintain the old, NAT based approach anymore.

Thanks for the suggestions.  I found the tproxy4 code you made
reference to above, and I have looked at the patches.  This definately
looks like an improvement over the NAT based approach that I have been
using to date.

I have some questions about the tproxy4 patches posted to the netdev@
list:
- how can I access the latest version of this code?  Is there a
  repository I can checkout the source from?
- how stable is this code?  Is it ready for production?
- what does the userspace code look like?
  From reading the patches, I would expect something like
 
  fd = socket(...)
  setsockopt( fd, SOL_IP, IP_TRANSPARENT, 0, 0 )
  bind( fd, foreign_address, ... )
  connect(...) or listen(...)

Thanks,
Cam


More information about the tproxy mailing list