From 8ddbe598834d68116094266d23aa001a2b544f58 Mon Sep 17 00:00:00 2001 From: yrutschle Date: Mon, 6 Jul 2020 22:25:42 +0200 Subject: [PATCH] warn that transparent proxy is hard --- doc/config.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/doc/config.md b/doc/config.md index 71eb6c2..f9360b5 100644 --- a/doc/config.md +++ b/doc/config.md @@ -115,6 +115,14 @@ different set-up which enables transparent proxying between two different machines. The following may only work if `sslh` and the final servers are on the same machine. +Note that getting this to work is very tricky and +detail-dependant: depending on whether the target server and +sslh are on the same machine, different machines, or +different dockers, and tool versions, all seem to change the +required network configuration somewhat. If it doesn't work, +it's almost certain that the problem is not linked to `sslh` +but to the network setup that surrounds it. + Linux: `sslh` needs extended rights to perform this: you'll need to