tcp_tproxy

Added in version 1.7.34.

This server is a transparent TCP listener that forwards traffic to the original destination address.

See transparent proxy for the required host firewall and routing setup.

The following common keys are supported:

• escaper

• auditor

• user_group

  The user group must use fact-based authentication. It is used only when either auth_by_client_ip or auth_by_server_ip is enabled.

  Added in version 1.13.0.

• shared_logger

• listen_in_worker

• tcp_sock_speed_limit

• ingress_network_filter

• tcp_copy_buffer_size

• tcp_copy_yield_size

• tcp_misc_opts

• task_idle_check_interval

• task_idle_max_count

• flush_task_log_on_created

• flush_task_log_on_connected

• task_log_flush_interval

• extra_metrics_tags

listen

required, type: tcp listen

Listening configuration for this server.

The instance count setting will be ignored if listen_in_worker is correctly enabled.

On Linux, the listener is always switched into transparent mode. There is no separate listen_transparent key for this server type.

auth_by_client_ip

optional, type: bool, conflict: auth_by_server_ip

Enables fact-based user authentication using the client IP address as the authentication fact.

If enabled, user_group must also be set.

default: false

Added in version 1.13.0.

auth_by_server_ip

optional, type: bool, conflict: auth_by_client_ip

Enables fact-based user authentication using the server IP address as the authentication fact.

If enabled, user_group must also be set.

default: false

Added in version 1.13.0.