Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Kernel configuration options for Squid with tproxy

If none of the specific sub-forums seem right for your thread, ask here.
Post Reply
Message
Author
arya6000
Posts: 29
Joined: 2007-07-30 03:15

Kernel configuration options for Squid with tproxy

#1 Post by arya6000 »

I'm trying to install Squid with tproxy support and in their documentation here

https://wiki.squid-cache.org/Features/Tproxy4

The following is indicated
Requires kernel built with the configuration options:
NF_CONNTRACK=m
NETFILTER_TPROXY=m
NETFILTER_XT_MATCH_SOCKET=m
NETFILTER_XT_TARGET_TPROXY=m

Does the default Debian 9 come with a kernel with those options? or would I need to recompile the kernel with those options?

Is there anyway to check those values in my install?

p.H
Global Moderator
Global Moderator
Posts: 3049
Joined: 2017-09-17 07:12
Has thanked: 5 times
Been thanked: 132 times

Re: Kernel configuration options for Squid with tproxy

#2 Post by p.H »

Code: Select all

egrep "NF_CONNTRACK=|NETFILTER_TPROXY|NETFILTER_XT_MATCH_SOCKET|NETFILTER_XT_TARGET_TPROXY" /boot/config-$(uname -r)

arya6000
Posts: 29
Joined: 2007-07-30 03:15

Re: Kernel configuration options for Squid with tproxy

#3 Post by arya6000 »

p.H wrote:

Code: Select all

egrep "NF_CONNTRACK=|NETFILTER_TPROXY|NETFILTER_XT_MATCH_SOCKET|NETFILTER_XT_TARGET_TPROXY" /boot/config-$(uname -r)
I get an output for everything but "NETFILTER_TPROXY" so I assume I need to compile it myself?

p.H
Global Moderator
Global Moderator
Posts: 3049
Joined: 2017-09-17 07:12
Has thanked: 5 times
Been thanked: 132 times

Re: Kernel configuration options for Squid with tproxy

#4 Post by p.H »

Let me see...
It seems that this option is no longer needed by the other ones (socket match and TPROXY target) and was removed in kernel 3.12 by commit fd158d79d33d3c8b693e3e2d8c0e3068d529c2dc.
The squid documentation may be a bit outdated.

Post Reply