Feature #3943
open
pf - divert-reply not implemented (usefull for haproxy)
0%
Description
Not sure if i should file this under pfsense or packages..
For haproxy it would be beneficial to have support in pf for the divert-reply keyword. So ipfw would not be needed, and side effects like not being able to directly connect to a backend server that is configured to use 'transparent' proxying would no-longer be an issue.
It would help getting transparent proxying to work better. (old haproxy pullrequest that could use divert-reply: https://github.com/pfsense/pfsense-packages/pull/641 )
Patch and python test program that binds to a non-local ip included here: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=188511
Would be nice if this could be included. Thanks.
(Was thinking about testing and if needed updating the patch for current pfsense version.. However working build instructions are hard to find.. hope the patch is still valid is is.. even if it is not some feedback would be appreciated if it has a chance of getting applied)
kind regards PiBa-NL
Updated by