Kernel configuration options for Squid with tproxy

If none of the more specific forums is the right place to ask

Kernel configuration options for Squid with tproxy

Postby arya6000 » 2017-10-04 16:55

I'm trying to install Squid with tproxy support and in their documentation here

https://wiki.squid-cache.org/Features/Tproxy4

The following is indicated

Requires kernel built with the configuration options:
NF_CONNTRACK=m
NETFILTER_TPROXY=m
NETFILTER_XT_MATCH_SOCKET=m
NETFILTER_XT_TARGET_TPROXY=m



Does the default Debian 9 come with a kernel with those options? or would I need to recompile the kernel with those options?

Is there anyway to check those values in my install?
arya6000
 
Posts: 28
Joined: 2007-07-30 03:15

Re: Kernel configuration options for Squid with tproxy

Postby p.H » 2017-10-04 17:19

Code: Select all
egrep "NF_CONNTRACK=|NETFILTER_TPROXY|NETFILTER_XT_MATCH_SOCKET|NETFILTER_XT_TARGET_TPROXY" /boot/config-$(uname -r)
p.H
 
Posts: 177
Joined: 2017-09-17 07:12

Re: Kernel configuration options for Squid with tproxy

Postby arya6000 » 2017-10-04 17:23

p.H wrote:
Code: Select all
egrep "NF_CONNTRACK=|NETFILTER_TPROXY|NETFILTER_XT_MATCH_SOCKET|NETFILTER_XT_TARGET_TPROXY" /boot/config-$(uname -r)


I get an output for everything but "NETFILTER_TPROXY" so I assume I need to compile it myself?
arya6000
 
Posts: 28
Joined: 2007-07-30 03:15

Re: Kernel configuration options for Squid with tproxy

Postby p.H » 2017-10-04 18:26

Let me see...
It seems that this option is no longer needed by the other ones (socket match and TPROXY target) and was removed in kernel 3.12 by commit fd158d79d33d3c8b693e3e2d8c0e3068d529c2dc.
The squid documentation may be a bit outdated.
p.H
 
Posts: 177
Joined: 2017-09-17 07:12


Return to General Questions

Who is online

Users browsing this forum: marzapane and 8 guests

fashionable