Mangle Transparent Proxy traffic

savagedavid · Wed Aug 23, 2006 7:55 pm

I am trying to create a mangle to catch all port 80 traffic coming from the transparent proxy running on my main mikrotik router. Since the proxy uses the same outgoing IP as all other traffic leaving the router I dont know how to catch specifically proxy traffic. The reason behind this is I want to load balance only port 80 traffic coming from the proxy server.

samsoft08 · Wed Aug 23, 2006 10:34 pm

this question will stay the immortal question without answer ..
some useres says you cant mangle proxy traffic other says yes you can , we want the answer and how to .. from one of the MT team , i dont know why do they keep sielent when this question been asked , if no let me know and stop trying , if yes tell us how .

savagedavid · Sat Sep 02, 2006 10:20 am

I have figured it out. You need to mangle traffic leaving the output chain on port 80. This will catch the transparent proxy traffic.

samsoft08 · Sun Sep 03, 2006 12:46 am

ok , but what about other packets going out through port 80 which didnt come from proxy ?

savagedavid · Sun Sep 03, 2006 11:26 am

The output chain only catches traffic FROM the router itself, not packets that the router is routing on behalf of other systems (that comes out the forward chain). The output chain is NOT all traffic leaving the router. Therefore it all works as planned.

eugenevdm · Thu Sep 07, 2006 7:25 pm

hi savagedavid I still have a problem with this configuration:

1. If you mangle on the output chain it does not work if I specify my default gateway IP address. It does work when I specify only port 80 so I suppose that is fine.

2. If I ECMP my proxy traffic according to the mangle rule my downloads break :-(

So I still can't use ECMP with transparent proxy.