[TS-291] Enable transparent forward proxying

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 2.1.3
• Component/s: Network
• Labels: forward proxy tproxy transparent

Environment

Linux

• Assignee: Alan M. Carroll
• Reporter: Alan M. Carroll
• Created: 07/Apr/10 23:36
• Updated: 02/May/13 02:29
• Resolved: 21/Sep/10 22:23

Description

Currently ATS provides only explicit forward proxying. It should support this transparently as well.

Transparent means

• No configuration on clients.
• Origin server sees the client IP address as the source address of the cache fill request.

This should be an option set via configuration variables because transparent proxying is not always the correct mode of operation. In addition, it requires a Linux kernel with TPROXY support and so will not run in all environments.

Issue Links

• depends upon: TS-320 Do some cleanup on Connection::fast_connect and Connection::bind_connect
• depends upon: TS-338 Use POSIX capabilities instead of user ID switching.