Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 134 invoked from network); 25 Dec 2008 12:23:23 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 25 Dec 2008 12:23:23 -0000 Received: (qmail 87868 invoked by uid 500); 25 Dec 2008 12:23:16 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 87818 invoked by uid 500); 25 Dec 2008 12:23:16 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 87809 invoked by uid 99); 25 Dec 2008 12:23:16 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Dec 2008 04:23:16 -0800 X-ASF-Spam-Status: No, hits=-4.0 required=10.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [88.198.11.6] (HELO eru.sfritsch.de) (88.198.11.6) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Dec 2008 12:23:07 +0000 Received: from stf (helo=localhost) by eru.sfritsch.de with local-esmtp (Exim 4.63) (envelope-from ) id 1LFpEj-00022M-S6; Thu, 25 Dec 2008 13:22:45 +0100 Date: Thu, 25 Dec 2008 13:22:45 +0100 (CET) From: Stefan Fritsch To: Pranav Desai cc: dev@httpd.apache.org Subject: Re: Need suggestions for adding tproxy support to mod_proxy In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Checked: Checked by ClamAV on apache.org Hi, On Wed, 17 Dec 2008, Pranav Desai wrote: > I am trying to add tproxy4 > (http://www.balabit.com/support/community/products/tproxy/) support to > the mod_proxy to achieve transparency. It basically involves a kernel > patch which allows binding of a socket to foreign address among other > things. At the app layer we only need to set the setsockopt() Linux 2.6.28 includes tproxy support again (see Documentation/networking/tproxy.txt in the kernel source). You may want to check that your httpd patch works with that kernel, too. BTW, I think this would be a nice feature to have in httpd 2.4. Cheers, Stefan