Re: Question regarding simple setup with tproxy?

From: Willy Tarreau <w#1wt.eu>
Date: Wed, 25 Jun 2008 07:02:41 +0200


Hi,

On Tue, Jun 24, 2008 at 01:57:45PM +0100, lists wrote:
> This may be a double post but I don't think the first one got through.

Apparently it went through but as a response to another mail, likely the reason why it was not noticed.

> Any help appreciated:
>
> I've compiled ctproxy into a 2.6.25 kernel and enabled the options in
> make menuconfig.
> Also patched netfilter (but do I even need to do this?)

Last time I checked, yes it was needed to patch netfilter. But keep in mind that I have *not* yet tried tproxy v4.

> Then compiled haproxy 1.3.15 with transparency, got a working config
> with real servers using haproxy node as the default gateway.
> Then added the line:
> source 192.168.2.134 usesrc clientip
> and now it just hangs with a blank page? Any ideas where I'm going
> wrong? (something fundamental probably)

What do the logs say ? A blank page can be so many things ! Also, I think you'll have to provide a tcpdump trace of both sides.

> Do I need iptables rules? do I need to insmod anything?

Normally not (but maybe I missed something in the doc). BTW, are you sure that your servers have their default gateway set to route via your load-balancer ?

> tried source 0.0.0.0 usesrc clientip with the same result.
>
> global
> uid 99
> gid 99

 ^^^^^^^^

Try leaving those both to 0. I have memories of tproxy-v2 requiring to be run as root in order to bind to a remote IP address.

Regards,
Willy Received on 2008/06/25 07:02

This archive was generated by hypermail 2.2.0 : 2008/06/25 07:15 CEST