"Full transparent mode" httpS proxy

DiePlage · #1 (**permalink**) 02-05-2009, 06:38 PM

I'm wondering what the "Full transparent mode" on the Http/S proxy page is for? I didn't notice it before...
I couldn't find posts regarding it here and the documentation doesn't seem to have been updated to reflect it, yet. Does anyone know?
Thanks!

AngeloC · #2 (**permalink**) 02-05-2009, 07:47 PM

This feature preserves the orginal client IP address after it passes through the proxy, useful if upstream from the installation is QOS, Monitoring, or reporting devices that do not like seeing everyone coming from the same IP (the proxy) without it enabled.

trollvottel · #3 (**permalink**) 02-06-2009, 08:01 AM

Well its not that easy. The Clients IP has to be reachable from the outside (Packets FROM the webserver have to go somewhere). That means usually you need public IPs for your Clients for this mode to work to access the Internet.

WaMaR · #4 (**permalink**) 02-06-2009, 09:16 AM

Hi,

Now, This feature isn't useful if you have to set public IPs for your internal hosts. I hope Astaro Development Team rebild this feature to useful option when we wiil be can set privet IPs for our internal hosts and set SNAT rules which will be used to "full transparent proxy".

Best Regards,
WaMaR

trollvottel · #5 (**permalink**) 02-06-2009, 10:01 AM

I am sorry but AFAIK that is technically not possible and would make no sense.

Just think about it: The remote webserver sees the _real_ (internal, non-public) IP of the client. Where should he send the respone?

Full transparent proxy is _not_ suited for most environments and we know that. Still, there are some customers who want it.