aboutsummaryrefslogtreecommitdiffstats
path: root/docs/transparent.rst
diff options
context:
space:
mode:
authorAldo Cortesi <aldo@nullcube.com>2016-02-18 09:19:05 +1300
committerAldo Cortesi <aldo@nullcube.com>2016-02-18 09:27:08 +1300
commit92597f82ea8e4747ce1836ecd5eb2479486e8647 (patch)
tree2aa391b558d92c0122a16c155d3375d31221cde4 /docs/transparent.rst
parent49464de1cb159361c16a232b3d8c267b36e95483 (diff)
downloadmitmproxy-92597f82ea8e4747ce1836ecd5eb2479486e8647.tar.gz
mitmproxy-92597f82ea8e4747ce1836ecd5eb2479486e8647.tar.bz2
mitmproxy-92597f82ea8e4747ce1836ecd5eb2479486e8647.zip
Docs and examples to top level
Diffstat (limited to 'docs/transparent.rst')
-rw-r--r--docs/transparent.rst24
1 files changed, 24 insertions, 0 deletions
diff --git a/docs/transparent.rst b/docs/transparent.rst
new file mode 100644
index 00000000..eb77c76c
--- /dev/null
+++ b/docs/transparent.rst
@@ -0,0 +1,24 @@
+.. _transparent:
+
+Transparent Proxying
+====================
+
+When a transparent proxy is used, traffic is redirected into a proxy at the
+network layer, without any client configuration being required. This makes
+transparent proxying ideal for those situations where you can't change client
+behaviour - proxy-oblivious Android applications being a common example.
+
+To set up transparent proxying, we need two new components. The first is a
+redirection mechanism that transparently reroutes a TCP connection destined for
+a server on the Internet to a listening proxy server. This usually takes the
+form of a firewall on the same host as the proxy server - iptables_ on Linux
+or pf_ on OSX. When the proxy receives a redirected connection, it sees a vanilla
+HTTP request, without a host specification. This is where the second new component
+comes in - a host module that allows us to query the redirector for the original
+destination of the TCP connection.
+
+At the moment, mitmproxy supports transparent proxying on OSX Lion and above,
+and all current flavors of Linux.
+
+.. _iptables: http://www.netfilter.org/
+.. _pf: https://en.wikipedia.org/wiki/PF_\(firewall\)