[tproxy] Is there a usable TPROXY4+squid+linuxKernel patches?

[Anton]

Seems squid 3.1 cannot bind on the some sockets even on a small load - I've opened 5 tabs on the firefox
and got the following in the log files. Possibly it's a bug during choose of the next available FD?
Possibly I should report it to squid -dev too?

Possibly this behaviour is so visible on the latent (satellite) links, like mine - so the FD occupied longer than for
those who is on fiber.

May 19 21:01:48 cacheng squid[26551]: IPInterception.cc(136) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed: (11) Resource temporarily unava
May 19 21:01:48 cacheng squid[26551]: IPInterception.cc(169) NetfilterTransparent:  NF getsockopt(IP_TRANSPARENT) failed: (92) Protocol not available
May 19 21:02:50 cacheng squid[26551]: IPInterception.cc(136) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed: (11) Resource temporarily unava
May 19 21:02:50 cacheng squid[26551]: IPInterception.cc(169) NetfilterTransparent:  NF getsockopt(IP_TRANSPARENT) failed: (92) Protocol not available
May 19 21:02:57 cacheng squid[26551]: commBind: Cannot bind socket FD 55 to 82.198.21.17:4008: (98) Address already in use
May 19 21:02:57 cacheng squid[26551]: comm.cc(993) commResetFD: bind: (98) Address already in use
May 19 21:02:57 cacheng squid[26551]: commBind: Cannot bind socket FD 55 to 82.198.21.17:5407: (98) Address already in use
May 19 21:02:57 cacheng squid[26551]: comm.cc(993) commResetFD: bind: (98) Address already in use

Regards,
Anton.

On Monday 19 May 2008 19:54, Laszlo Attila Toth wrote:
> Ming-Ching Tiew wrote:
> > Laszlo Attila Toth wrote:
> >> Ming-Ching Tiew wrote:
> >>> Laszlo Attila Toth wrote:
> >>>>> For a 2 last monthes periodically looking at the
> >>>>> http://www.balabit.com/downloads/files/tproxy/
> >>>>> frequently saw a newer versions pf patches, but I
> >>>>> was never able to cleanly apply any of the patches
> >>>>> to any of the corresponding Linux Kernel v 2.6.24
> >>>>> or 2.6.25 and the SQUID-3.0STABLE-X
> >>>>
> >>>> Strange because the patches are on the top of
> >>>> v2.6.24 and v2.6.25 tags of Linus' git tree. If you
> >>>> use any other version of the kernel, could you tell,
> >>>> where is it available? Now I can check the patches
> >>>> with kernel releases of Gentoo or Ubuntu...
> >>>
> >>> The last time I checked ( very recent), the kernel
> >>> patches does not apply cleanly on kernel 2.6.25.2.
> >>
> >> This is because the patches are on the top of v2.6.25
> >> and not the v2.6.25.2 ( ? ), between them there were
> >> changes in the source code. Basically I maintain only
> >> for major versions (2.6.24, 2.6.25 etc.). I'll check
> >> now v2.6.25.4...
> >
> > The possibility of this is always there but I really
> > doubt so. If you check the feedback on the maillist,
> > there are two independent feedbacks that the patches do
> > not apply cleanly on 2.6.25 either. My network is too
> > slow to download, so I have not tried this myself,
> > forgive me if I said something not basing on facts. :-)
>
> Indeed, sorry. The patcheset was for net-2.6.25.git's
> somewhere after v2.6.25-rc3.
>
> This file is really on the top of v2.6.25:
> http://www.balabit.com/downloads/files/tproxy/tproxy-kern
>el-2.6.25-20080519-165031-1211208631.tar.bz2
>
> I tested only the 2.6.24-version of tproxy.