Re:Abusing Linux's firewall: the hack that allowed us to bui...
by ttul on Thursday April 12, 2018 @02:36PM
(#16823668)
TPROXY is totally amazing. We used it to modify nginx to create a transparent SMTP proxy that scales. Using TPROXY, we can pretend to be millions of ISP subscriber IPs at once in a single process.
[ Parent
| on HN ]
Re:Abusing Linux's firewall: the hack that allowed us to bui...
by jlgaddis on Friday April 13, 2018 @09:20PM
(#16835274)
In the near future, I'll need to do something likely very similar to what you did (albeit, probably on a smaller scale). Are there any technical details about this that you can share or perhaps just some pointers to relevant and/or helpful documentation?
(N.B.: I won't even be starting on this for probably a month or two so I haven't even begun to look into it. If there is documentation easily/readibly available via a Google search (i.e., I'll find 'em as soon as I Google for 'em) then just ignore my request. Thanks!)
Re:Abusing Linux's firewall: the hack that allowed us to bui...
by ttul on Saturday April 14, 2018 @06:26PM
(#16839905)
There is a TPROXY mailing list where you can easily get questions answered by the community if not the original author of the patch.
This Python example sets up a transparent HTTP proxy which will show you the basic socket stuff you need to get going.
https://github.com/erijo/transparent-proxy/blob/master/READM...