Re:Abusing Linux's firewall: the hack that allowed us to bui...
by jrochkind1 on Thursday April 12, 2018 @07:18PM
(#16825818)
Sounds like cloudflare might want to start trying to submit some nftables TPROXY support now, so it's there in the vanilla kernel when they end up needing it. :)
[ Parent
| on HN ]
Re:Abusing Linux's firewall: the hack that allowed us to bui...
by RandomBK on Thursday April 12, 2018 @09:39PM
(#16826505)
It'd expect someone to eventually submit such a patch, though I don't know how urgent this issue is. Iptables isn't going anywhere anytime soon, so Cloudflare can continue to use this method on the edge nodes.