Tproxy support for IP transparency

[Francis Daly]

On Mon, Jun 07, 2021 at 01:47:44PM -0400, bouvierh wrote:

Hi there,

> I have looked at it, however it looks like this is intended to make proxy
> transparent from upstream/backend perspective:
> It is used so upstream server can see client address not proxy address.
> 
> I am looking to do the opposite, I would like to make proxy transparent from
> the client perspective.

I think that I don't understand what you are trying to do, and what the
restrictions on it are. So I'm not going to be able to suggest a "real"
way to achieve it.

I think you might want the response traffic from nginx to use a specific
source IP address; that might be doable outside of nginx.

And I'm not sure why you don't tell the client that nginx *is* the
server, or move the "server" and put nginx where it was; but I suspect
that there are good reasons not to do that (maybe there are multiple
clients configured the same way, and only some should be intercepted?).


So I'll let someone else make a suggestion.

Good luck with it,

	f
-- 
Francis Daly        francis at daoine.org