[stunnel-users] RFC: purge use of keyword 'transparent'
M.Borst at hrz.tu-darmstadt.de
Fri Jan 7 08:56:29 CET 2011
Am 07.01.2011 03:26, schrieb oscaruser at programmer.net:
> After searching, installing various Linuces (in the 2.6 family), e.g.
> CentOS, Ubuntu, and so on, I have not been able to get transparent
> proxy working at all. As such since it the function does not work, and
> there is great debate as to whether it ever worked, I would like to
> propose that this keyword and reference to its function be discarded
> entirely. This will save many folks a great deal of time and effort
> attempting to try and get it to work, myself having spent over 80
> hours (including my precious holiday time) trying to dig, scratch,
> research up old posts that say it works or someone has it working
> under such and such a configuration! The documentation itself has
> folks claiming that it works and does not, which is really a bad
> practice. Why did you perpetuate this option in the first place?!
> I hope you see the importance and reason with my request and act
> ... Unless someone really really does have it working.
> Thank you
> stunnel-users mailing list
> stunnel-users at mirt.net
While I have not even tried to use the "transparent" function (stunnel
runs on Windows in our environment, where "transparent" is not
supported), I would like to add my two cents: For a ssl tunnel solution
like stunnel, a "transparent" option is a very basic necessity. Having
all connections to the application come from 127.0.0.1 makes trouble
shooting and auditing very problematic. Therefore, transparent
operations should be the default, not an afterthought only available on
I therefore counter-propose to make this option work, and make it work
on all supported platforms. While I know that this will probably not be
possible, since it would require a lot of programming work to be done, I
nevertheless wanted to make it clear, that this option is not
unnecessary and should not be simply discarded.
Adresse: Petersenstrasse 30, 64287 Darmstadt, Germany
Email: M.Borst at hrz.tu-darmstadt.de
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the stunnel-users