I'm working on Apache Traffic Server. I need it to work in transparent bridge mode. On the bridge interface, A public IP is configured. It's working transparently caching http requests but only caching the IP requests which is coming from subnets of the bridge interface IP. Is there any way to get this fixed ? Here is the ip rules used in the firewall configuration.

Bridge Configuration:

  • brctl addbr br0 # create bridge device
  • brctl stp br0 off # Disable spanning tree protocol
  • brctl addif br0 eth0 # Add eth0 to bridge
  • brctl addif br0 eth1 # Add eth1 to bridge
  • ifconfig eth0 0 # Get rid of interface IP addresses
  • ifconfig eth1 0 # ditto # Set the bridge IP address and enable it
  • ifconfig br0 netmask up

  • ip route add default via

Bridge routing:

  • ebtables -t broute -F # Flush the table

    inbound traffic

  • ebtables -t broute -A BROUTING -p IPv4 --ip-proto tcp --ip-dport 80 \ -j redirect --redirect-target DROP

    returning outbound traffic

  • ebtables -t broute -A BROUTING -p IPv4 --ip-proto tcp --ip-sport 80 \ -j redirect --redirect-target DROP

Transparent Proxy rules:

  • iptables -t mangle -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 \
    -j TPROXY --on-ip --on-port 8080 --tproxy-mark 1/1

  • iptables -t mangle -A PREROUTING -i eth0 -p tcp -m tcp --sport 80 \
    -j MARK --set-mark 1/1

  • ip rule add fwmark 1/1 table 1

  • ip route add local dev lo table 1

  • iptables -t filter --flush FORWARD

  • iptables -t filter --flush INPUT

Here is the link of the documents I followed for the configuration: Apache Traffic Server

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.