diff options
| author | Aldo Cortesi <aldo@nullcube.com> | 2013-05-14 09:12:26 +1200 |
|---|---|---|
| committer | Aldo Cortesi <aldo@nullcube.com> | 2013-05-14 09:12:26 +1200 |
| commit | b5cf3b4f743f1dd3e7d58c9d21155005466640ec (patch) | |
| tree | a92a36ee2776951fbb9286b3af78fcf2d9a01163 /doc-src/transparent.html | |
| parent | d86b7c7f77ca67514da50854f8d44149dee431d1 (diff) | |
| download | mitmproxy-b5cf3b4f743f1dd3e7d58c9d21155005466640ec.tar.gz mitmproxy-b5cf3b4f743f1dd3e7d58c9d21155005466640ec.tar.bz2 mitmproxy-b5cf3b4f743f1dd3e7d58c9d21155005466640ec.zip | |
README, Linux transparent mode docs, requirements additions.
Diffstat (limited to 'doc-src/transparent.html')
| -rw-r--r-- | doc-src/transparent.html | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/doc-src/transparent.html b/doc-src/transparent.html index 689a2842..4e9b6774 100644 --- a/doc-src/transparent.html +++ b/doc-src/transparent.html @@ -1,15 +1,19 @@ - -When a transparent proxy is used, traffic is redirected into a proxy at the network layer, without -any client configuration being required. This makes transparent proxying ideal for those situations -where you can't change client behaviour - proxy-oblivious Android applications being a common -example. +When a transparent proxy is used, traffic is redirected into a proxy at the +network layer, without any client configuration being required. This makes +transparent proxying ideal for those situations where you can't change client +behaviour - proxy-oblivious Android applications being a common example. To set up transparent proxying, we need two new components. The first is a redirection mechanism that transparently reroutes a TCP connection destined for a server on the Internet to a listening proxy server. This usually takes the form of a firewall on the same host as the proxy server - [iptables](http://www.netfilter.org/) on Linux or -[pf](http://en.wikipedia.org/wiki/PF_\(firewall\)) on OSX. When the proxy receives a redirected connection, it sees a vanilla HTTP request, without a host specification. This is where the second new component comes in - a host module that allows us to query the redirector for the original destination of the TCP connection. +[pf](http://en.wikipedia.org/wiki/PF_\(firewall\)) on OSX. When the proxy +receives a redirected connection, it sees a vanilla HTTP request, without a +host specification. This is where the second new component comes in - a host +module that allows us to query the redirector for the original destination of +the TCP connection. -At the moment, mitmproxy supports transparent proxying on OSX Lion and above, and all current flavors of Linux.kkkkk
\ No newline at end of file +At the moment, mitmproxy supports transparent proxying on OSX Lion and above, +and all current flavors of Linux. |