Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 80796 invoked from network); 4 Aug 2010 00:18:00 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 4 Aug 2010 00:18:00 -0000 Received: (qmail 93500 invoked by uid 500); 4 Aug 2010 00:17:59 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 93384 invoked by uid 500); 4 Aug 2010 00:17:58 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 93376 invoked by uid 99); 4 Aug 2010 00:17:58 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Aug 2010 00:17:58 +0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of graham.dumpleton@gmail.com designates 209.85.212.173 as permitted sender) Received: from [209.85.212.173] (HELO mail-px0-f173.google.com) (209.85.212.173) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Aug 2010 00:17:51 +0000 Received: by pxi18 with SMTP id 18so1752510pxi.18 for ; Tue, 03 Aug 2010 17:17:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=LtH/g1VqFUjqSgSP6COJlCPcVcEmvTA58Q+q8EZDNF4=; b=bAct4LiPpNfvokQNFZwFDIc3Cl6Qe1bTn4y8i7wRu57sxcRFH4Xt/nY1f7JTz/gENw yvok4csCT1xMSeR4Bk6PyGRkUHTBP8mC2Tm+0aA1wTXVMHcBe7+/7Ukx3K8emxLJce8o wZ7vKFfijwiNiy28ycd+GTYLGJtOAFFR/0K/Q= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=QDh19h83amCg09JoQRHiWdwbMLI9Y7VNU2NXhAcNkARk/YEjaqEGFfbF5zK0EGX8o4 hFU1ZkZ5LGS6Ea+qnuXcNqNp6ZxtWNeTFB3WdPJb4MGaxFSltwzQvCYoz+441Yl2jkZV Klv53cRA3ND0V6UYnLRBVoqff4NcNEiEGDQY0= MIME-Version: 1.0 Received: by 10.142.201.6 with SMTP id y6mr7375377wff.78.1280881050228; Tue, 03 Aug 2010 17:17:30 -0700 (PDT) Received: by 10.142.143.6 with HTTP; Tue, 3 Aug 2010 17:17:30 -0700 (PDT) In-Reply-To: <4C58B03B.3030303@primary.net> References: <4C58B03B.3030303@primary.net> Date: Wed, 4 Aug 2010 10:17:30 +1000 Message-ID: Subject: Re: [PATCH] tproxy2 patch to the apache 2.2.15 From: Graham Dumpleton To: dev@httpd.apache.org Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org 2010/8/4 Daniel Ruggeri : > On 8/3/2010 9:57 AM, JeHo Park wrote: >> hello ~ >> it's my first mail to apache dev .. and i am beginner of the apache. :-) >> Anyway ... recently, i wrote transparent proxy [tproxy2] patch to the >> httpd-2.2.15 >> because i needed web proxy and needed to know the source address of >> any client who try to connect to my web server >> and after all, i tested the performance of my patched tproxy with >> AVALANCHE 2900. if anyone ask me the performance result, i will send >> it to him [the size of the test result pdf is big size] >> *- here is the platform infomation this patch applied ---* >> 1. OS >> CentOS release 5.2 (Final) >> 2. KERNEL >> Linux version 2.6.18-194.el5-tproxy2 (root@localhost.localdomain >> ) >> (gcc version 4.1.2 20080704 (Red Hat 4.1.2-46)) >> #10 SMP Wed May 26 17:35:19 KST 2010 >> 3. iptables >> iptables-1.3.8 + tproxy2 supporting patch >> *-- here is the usage of tproxy2 patched httpd configuration ---* >> httpd.conf >> >> ProxyTproxy On # On/Off flag >> ProxyTPifaddr 192.168.200.1 # IP address of bridge interface br0. >> example) br0 = eth0 + eth1 .... >> >> i attach the kernel tproxy2 patch to the kernel >> above[2.6.18-194.el5-tproxy2 ], httpd-2.2.15 tproxy2 patch and kernel >> configuration for tproxy2 >> above all, i want to know my patch is available or not .. and want >> feedback from anyone :-) > > JeHo; > Hi, can you help me understand what the usage case is for this patch? > What service or capability does it provide that is not currently available? In particular, how is X-Forwarded-For not going to provide the information required. http://en.wikipedia.org/wiki/X-Forwarded-For Graham