Re: Request: including tproxy patch to official iptables/kernel.

[Patrick McHardy <kaber@trash.net>]

Yoshioka Tsuneo wrote:
> Hello netfilter developers
> 
> There is tproxy patch for netfilter(iptables).
> tproxy enables application to set source IP address.
> I think that only tproxy patch can enable transparent proxy keeping
> source IP addresses.
> 
> And, until now, tproxy is developed and is used for long term, and seems
> stable to include official iptables/kernel release. There is also a patch
> for latest kernel.
> 
> So, I would like to suggest to include tproxy patch to official
> iptables/kernel release.
> Can you think about including this patch to official iptables/kernel
> release, if possible ?
> 
>    TPROXY
>        http://www.balabit.com/products/oss/tproxy/
> 
>    patch-o-matic extra repository
>      tproxy - iptables TPROXY target
>        http://www.iptables.org/projects/patch-o-matic/pom-extra.html#pom-extra-tproxy


These look quite old (2.4). The TPROXY developers were working on
a new approach last year at the netfilter workshop, but I don't
know if there was any further progress. Please talk to them directly
and ask them if they want to merge it upstream, and if so to submit
patches.