<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Configure HAProxy with TPROXY kernel for full transparent proxy</title>
	<atom:link href="http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/</link>
	<description>&#34;When a single point of failure is not an option&#34;</description>
	<lastBuildDate>Thu, 16 May 2013 10:54:41 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-2353</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Thu, 21 Feb 2013 10:52:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-2353</guid>
		<description><![CDATA[Ahmd,

You won&#039;t find the patches because they are not needed for that Kernel version. It is already built in!]]></description>
		<content:encoded><![CDATA[<p>Ahmd,</p>
<p>You won&#8217;t find the patches because they are not needed for that Kernel version. It is already built in!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ahmd</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-2182</link>
		<dc:creator>Ahmd</dc:creator>
		<pubDate>Sun, 17 Feb 2013 13:08:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-2182</guid>
		<description><![CDATA[hi ,
i want to ask ,
i followed the articale on 
http://wiki.squid-cache.org/Features/Tproxy4

i saw that it require kernel 2.6.37 , but when i go to balabit site , i dont see patch for it!!!!

i searched and it seems no patch for the kernel 2.6.37 ???

wt i need to do ??

plz help , advice]]></description>
		<content:encoded><![CDATA[<p>hi ,<br />
i want to ask ,<br />
i followed the articale on<br />
<a href="http://wiki.squid-cache.org/Features/Tproxy4" rel="nofollow">http://wiki.squid-cache.org/Features/Tproxy4</a></p>
<p>i saw that it require kernel 2.6.37 , but when i go to balabit site , i dont see patch for it!!!!</p>
<p>i searched and it seems no patch for the kernel 2.6.37 ???</p>
<p>wt i need to do ??</p>
<p>plz help , advice</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mathew.Levett</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-1653</link>
		<dc:creator>Mathew.Levett</dc:creator>
		<pubDate>Tue, 05 Feb 2013 13:57:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-1653</guid>
		<description><![CDATA[Hello Matteo,  Can I ask if you have compiled ha proxy from source or just installed from one of the Debian repository?  as the error indicates that the build you are running was not compiled with TPROXY support.]]></description>
		<content:encoded><![CDATA[<p>Hello Matteo,  Can I ask if you have compiled ha proxy from source or just installed from one of the Debian repository?  as the error indicates that the build you are running was not compiled with TPROXY support.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Matteo</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-1352</link>
		<dc:creator>Matteo</dc:creator>
		<pubDate>Sun, 27 Jan 2013 10:55:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-1352</guid>
		<description><![CDATA[Hello All,
I’ve installated HAproxy on Debian with kernel Linux 2.6.32+.
When HAproxy starts, I’ve the following error:
Starting haproxy: haproxy

[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/hapr xy.cfg:54] : ‘usesrc’ not allowed here because support for TPROXY was not compiled in.

[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/haproxy.cfg:92] : error detected while parsing a ‘monitor fail’ condition.

[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/haproxy.cfg:104] : ‘usesrc’ not allowed here because support for TPROXY was not compiled in.

[ALERT] 024/152707 (1802) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg

[ALERT] 024/152707 (1802) : Fatal errors found in configuration.

May you help me? Have any suggestions?
I&#039;m following this article:
http://blog.exceliance.fr/2012/08/25/haproxy-varnish-and-the-single-hostname-website/
 
Best regards.]]></description>
		<content:encoded><![CDATA[<p>Hello All,<br />
I’ve installated HAproxy on Debian with kernel Linux 2.6.32+.<br />
When HAproxy starts, I’ve the following error:<br />
Starting haproxy: haproxy</p>
<p>[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/hapr xy.cfg:54] : ‘usesrc’ not allowed here because support for TPROXY was not compiled in.</p>
<p>[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/haproxy.cfg:92] : error detected while parsing a ‘monitor fail’ condition.</p>
<p>[ALERT] 024/152707 (1802) : parsing [/etc/haproxy/haproxy.cfg:104] : ‘usesrc’ not allowed here because support for TPROXY was not compiled in.</p>
<p>[ALERT] 024/152707 (1802) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg</p>
<p>[ALERT] 024/152707 (1802) : Fatal errors found in configuration.</p>
<p>May you help me? Have any suggestions?<br />
I&#8217;m following this article:<br />
<a href="http://blog.exceliance.fr/2012/08/25/haproxy-varnish-and-the-single-hostname-website/" rel="nofollow">http://blog.exceliance.fr/2012/08/25/haproxy-varnish-and-the-single-hostname-website/</a></p>
<p>Best regards.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Load Balancing &#8211; What are the supported load balancing methods? &#171; Govardhan Gunnala</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-110</link>
		<dc:creator>Load Balancing &#8211; What are the supported load balancing methods? &#171; Govardhan Gunnala</dc:creator>
		<pubDate>Sat, 17 Nov 2012 20:20:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-110</guid>
		<description><![CDATA[[...] (SNAT-TPROXY) load balancing method If the source address of the client is a requirement then HaProxy can be forced into transparent mode using TPROXY, this requires that the real servers use the load balancer as the default gateway (as in NAT mode) [...] ]]></description>
		<content:encoded><![CDATA[<p>[...] (SNAT-TPROXY) load balancing method If the source address of the client is a requirement then HaProxy can be forced into transparent mode using TPROXY, this requires that the real servers use the load balancer as the default gateway (as in NAT mode) [...] </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott McKeown</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-109</link>
		<dc:creator>Scott McKeown</dc:creator>
		<pubDate>Mon, 12 Nov 2012 14:35:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-109</guid>
		<description><![CDATA[Hi Lior,
Please have a look at our new Blog post at http://blog.loadbalancer.org/setting-up-haproxy-with-transparent-mode-on-centos-6-x/ which should help.]]></description>
		<content:encoded><![CDATA[<p>Hi Lior,<br />
Please have a look at our new Blog post at <a href="http://blog.loadbalancer.org/setting-up-haproxy-with-transparent-mode-on-centos-6-x/" rel="nofollow">http://blog.loadbalancer.org/setting-up-haproxy-with-transparent-mode-on-centos-6-x/</a> which should help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: lior</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-108</link>
		<dc:creator>lior</dc:creator>
		<pubDate>Sat, 10 Nov 2012 22:05:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-108</guid>
		<description><![CDATA[Hey I&#039;m using centos 6.3 and did pretty much what you wrote and still my web server sees the haproxy up. What am I doing wrong?]]></description>
		<content:encoded><![CDATA[<p>Hey I&#8217;m using centos 6.3 and did pretty much what you wrote and still my web server sees the haproxy up. What am I doing wrong?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: lior</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-107</link>
		<dc:creator>lior</dc:creator>
		<pubDate>Sat, 10 Nov 2012 00:02:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-107</guid>
		<description><![CDATA[hey,

great article.

followed through this article by the letter and still my web server see the HAPROXY server ip.

Anybody any idea?]]></description>
		<content:encoded><![CDATA[<p>hey,</p>
<p>great article.</p>
<p>followed through this article by the letter and still my web server see the HAPROXY server ip.</p>
<p>Anybody any idea?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-106</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Tue, 09 Oct 2012 07:55:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-106</guid>
		<description><![CDATA[Generally the HAProxy box will be configured as a NAT gateway between your external network and internal network, you can use any physical IP (of the HAProxy unit) on the internal side for your default gateway. If you have a High-availability pair of HA-Proxy units this would be the internal floating IP, if you just have a single unit then you would probably just have one IP address. The VIP or bind address would usualy be on the external network (so you definately would not use that one).]]></description>
		<content:encoded><![CDATA[<p>Generally the HAProxy box will be configured as a NAT gateway between your external network and internal network, you can use any physical IP (of the HAProxy unit) on the internal side for your default gateway. If you have a High-availability pair of HA-Proxy units this would be the internal floating IP, if you just have a single unit then you would probably just have one IP address. The VIP or bind address would usualy be on the external network (so you definately would not use that one).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: caraconan</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/#comment-105</link>
		<dc:creator>caraconan</dc:creator>
		<pubDate>Tue, 09 Oct 2012 07:26:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-105</guid>
		<description><![CDATA[Hi all, thanks for this great post.

I&#039;ve got couple of questions:

1. It&#039;s 100% mandatory to change default gateway of real servers to point to 1 of the haproxy IP addresses?

2. If yes, which one? The VIP one?

Regards]]></description>
		<content:encoded><![CDATA[<p>Hi all, thanks for this great post.</p>
<p>I&#8217;ve got couple of questions:</p>
<p>1. It&#8217;s 100% mandatory to change default gateway of real servers to point to 1 of the haproxy IP addresses?</p>
<p>2. If yes, which one? The VIP one?</p>
<p>Regards</p>
]]></content:encoded>
	</item>
</channel>
</rss>
