tcp_tproxy

Added in version 1.7.34.

A simple tcp tproxy server, which will just forward traffic to the targeted remote address.

See transparent proxy for how to setup the host firewall / route table.

The following common keys are supported:

• escaper

• auditor

• user_group

  The user group should be facts authenticate type. It will be used only if either auth_by_client_ip or auth_by_server_ip is set.

  Added in version 1.13.0.

• shared_logger

• listen_in_worker

• tcp_sock_speed_limit

• ingress_network_filter

• tcp_copy_buffer_size

• tcp_copy_yield_size

• tcp_misc_opts

• task_idle_check_interval

• task_idle_max_count

• flush_task_log_on_created

• flush_task_log_on_connected

• task_log_flush_interval

• extra_metrics_tags

listen

required, type: tcp listen

Set the listen config for this server.

The instance count setting will be ignored if listen_in_worker is correctly enabled.

auth_by_client_ip

optional, type: bool, conflict: auth_by_server_ip

Enable facts user authenticate and use client IP as the authenticate fact.

default: false

Added in version 1.13.0.

auth_by_server_ip

optional, type: bool, conflict: auth_by_client_ip

Enable facts user authenticate and use server IP as the authenticate fact.

default: false

Added in version 1.13.0.