Hi James, On Fri, Jun 10, 2011 at 04:20:15PM +0800, ?????? wrote: > Hi Robert, > > You can develop a netfilter module to change src ipaddr from haproxy's > self ip to client ipaddr for backend servers. > > But this solution maybe decrease the whole performance of haproxy box > for about 20%.
There's no need to develop a netfilter module to get transparent mode, the TPROXY feature in recent kernels already does it. We also have a patch to inconditionally do that without netfilter but it's only for older kernels. Anyway, tproxy is the most common solution. Regards, Willy
