http://unix.pub/tags/Squid/Recent content in Squid on UNIX PublicationHugozh[unixetc](https://unixetc.com)Mon, 24 Aug 2026 17:01:00 +0800http://unix.pub/docs/LinuxDoc/Linux_Transparent_proxy/Fri, 14 Aug 2026 09:17:23 +0800http://unix.pub/docs/LinuxDoc/Linux_Transparent_proxy/<h1 id="linux透明代理">Linux透明代理<a class="anchor" href="#linux%e9%80%8f%e6%98%8e%e4%bb%a3%e7%90%86">#</a></h1> <h2 id="支持透明代理transparent-proxy-support">支持透明代理(Transparent proxy support)<a class="anchor" href="#%e6%94%af%e6%8c%81%e9%80%8f%e6%98%8e%e4%bb%a3%e7%90%86transparent-proxy-support">#</a></h2> <p>This feature adds Linux 2.2-like transparent proxy support to current kernels.To use it, enable the socket match and the TPROXY target in your kernel config.You will need policy routing too, so be sure to enable that as well.</p> <p>该功能为当前内核增加了类似于 Linux 2.2 的透明代理支持。要使用此功能，您需要在内核配置中启用 socket 匹配（socket match）和 TPROXY 目标（TPROXY target）。同时，您还需要策略路由（policy routing），因此请务必也启用该功能。</p> <p>From Linux 4.18 transparent proxy support is also available in nf_tables.</p> <p>从 Linux 4.18 开始，nf_tables 也支持透明代理功能。</p> <h3 id="让非本地套接字工作making-non-local-sockets-work">让非本地套接字工作(Making non-local sockets work)<a class="anchor" href="#%e8%ae%a9%e9%9d%9e%e6%9c%ac%e5%9c%b0%e5%a5%97%e6%8e%a5%e5%ad%97%e5%b7%a5%e4%bd%9cmaking-non-local-sockets-work">#</a></h3> <p>The idea is that you identify packets with destination address matching a local socket on your box, set the packet mark to a certain value::</p>