Here's what I have... first and most simply, using --enable-tproxy fails with "TPROXY feature requires POSIX capabilities." Using 2.1.9 sources.
I've tried a few things, most notably the installation of linux headers, which appeared not to help in any way. If I use --enable-tproxy=auto, it configures but in config.log it makes note that use_tproxy=0 This is on debian wheezy, FWIW. I think my rules are right according to the documents and I am using the general configuration on http://people.apache.org/~amc/tiphares/home.html However, my working transparent setup for the Squid proxies is a little different. I'm using Layer-4 switch flow redirection to two squid proxies with Squid in transparent mode and the following NAT/ipt rule: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 (and nothing more) I'm going to try this on traffic server for kicks later today, but I'm curious as to whether this is workable (I don't have issues on the squid boxes with iptables to date) and secondly whether I can use the layer 4 redirect from the switches with ATS at all. I'd really prefer this as some of my (wireless) nodes can't use WCCP and putting the boxes inline with bridging/routing would need some re-architecting and add some small amount of latency to non-HTTP traffic. Thanks...
