ipv6 tproxy / transparent proxy support?
What is the state of tproxy / transparent proxying (i.e. with Squid) with ipv6?
As far as I can find in the documentation, I will need:
- a kernel which supports it,
- ip6tables which support it.
Is ipv6 transparent proxying available in stable iptables? If not, perhaps I should get a daily snapshot?
What about the kernel? I guess I'll need these patches for the kernel ("[PATCH 0/9] tproxy: add IPv6 support" by Kovacs Krisztian)? Perhaps something else?
http://thread.gmane.org/gmane.comp.security.firewalls.netfilter.devel/35841
Signature · 2 lines
Tomasz Chmielewski http://wpkg.org
Quoted 2 lines · Tomasz Chmielewski
What is the state of tproxy / transparent proxying (i.e. with Squid) with ipv6?
The state?
* kernel - pending release
* iptables - patches queued for audit.
* squid - supported in 3.1 production releases.
I've just updated the squid wiki tproxy4 page with details and links to the bits you need as of today.
AYJ
Quoted 4 lines · Amos Jeffries
Quoted 2 lines · Tomasz Chmielewski
What is the state of tproxy / transparent proxying (i.e. with Squid) with ipv6?
Quoted 8 lines
The state?
* kernel - pending release
* iptables - patches queued for audit.
* squid - supported in 3.1 production releases.I've just updated the squid wiki tproxy4 page with details and links to the bits you need as of today.
I see the page[1] contains command line iptables examples, but no ip6tables ones. Do you know the syntax for ip6tables, and if so, could you add an example to the squid wiki tproxy4 page as well?
[1] http://wiki.squid-cache.org/Features/Tproxy4
Signature · 2 lines
Tomasz Chmielewski http://wpkg.org
Quoted 11 lines · Tomasz Chmielewski
Quoted 10 lines · Amos Jeffries
Quoted 2 lines · Tomasz Chmielewski
What is the state of tproxy / transparent proxying (i.e. with Squid) with ipv6?
The state?
* kernel - pending release
* iptables - patches queued for audit.
* squid - supported in 3.1 production releases.
Quoted 6 lines
Quoted 2 lines
I've just updated the squid wiki tproxy4 page with details and links to the bits you need as of today.
I see the page[1] contains command line iptables examples, but no ip6tables ones. Do you know the syntax for ip6tables, and if so, could you add an example to the squid wiki tproxy4 page as well?
From what I've seen of the patches the demo config should be identical save for the "6" in ip6tables command.
AYJ