Tproxy inbound support (linux only)#141

Open

janeblower wants to merge 19 commits into

cfal:masterfrom

janeblower:tproxy-pr

Commits on May 28, 2026

refactor: extract process_setup_result from process_stream

janeblower
and
claude
committed
feat: add NetLocation::from_socket_addr
janeblower
committed
feat(config): add ServerProxyConfig::Tproxy variant

janeblower
and
claude
committed
style(config): use uppercase TPROXY in Display to match HTTP/SOCKS/VLESS style
janeblower
committed
feat(config): validate tproxy protocol constraints

janeblower
and
claude
committed
test(config): gate tproxy validation tests to Linux + cover quic_settings

janeblower
and
claude
committed
feat(tproxy): add IP_TRANSPARENT socket factories

janeblower
and
claude
committed
refactor(tproxy): fix SO_REUSEPORT comment + drop redundant set_nonblocking
janeblower
committed
feat(tproxy): add recvmsg + cmsg parsing for original destination

janeblower
and
claude
committed
fix(tproxy): match IPV6_ORIGDSTADDR cmsg type + detect MSG_CTRUNC
janeblower
committed
feat(tproxy): add session-based UDP relay with source-spoofing send cache
janeblower
committed
fix(tproxy): tolerate per-packet recv errors + race-safe session insert

janeblower
and
claude
committed
feat(tproxy): wire start_tproxy_servers into the dispatcher

janeblower
and
claude
committed
refactor(tproxy): tighten dispatch cfg branches + restore unreachable!
janeblower
committed
docs(tproxy): add example yaml and protocol documentation

janeblower
and
claude
committed
docs(tproxy): use idiomatic client_chain shorthand in example
janeblower
committed
fix(tproxy): align cmsg control buffer + error on empty bind addresses

janeblower
and
claude
committed
fix musl
janeblower
committed
reduce capability (-CAP_NET_ADMIN +CAP_NET_RAW)
janeblower
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Tproxy inbound support (linux only)#141

Tproxy inbound support (linux only)#141
janeblower wants to merge 19 commits into
cfal:masterfrom
janeblower:tproxy-pr

Commits on May 28, 2026

refactor: extract process_setup_result from process_stream

feat: add NetLocation::from_socket_addr

feat(config): add ServerProxyConfig::Tproxy variant

style(config): use uppercase TPROXY in Display to match HTTP/SOCKS/VLESS style

feat(config): validate tproxy protocol constraints

test(config): gate tproxy validation tests to Linux + cover quic_settings

feat(tproxy): add IP_TRANSPARENT socket factories

refactor(tproxy): fix SO_REUSEPORT comment + drop redundant set_nonblocking

feat(tproxy): add recvmsg + cmsg parsing for original destination

fix(tproxy): match IPV6_ORIGDSTADDR cmsg type + detect MSG_CTRUNC

feat(tproxy): add session-based UDP relay with source-spoofing send cache

fix(tproxy): tolerate per-packet recv errors + race-safe session insert

feat(tproxy): wire start_tproxy_servers into the dispatcher

refactor(tproxy): tighten dispatch cfg branches + restore unreachable!

docs(tproxy): add example yaml and protocol documentation

docs(tproxy): use idiomatic client_chain shorthand in example

fix(tproxy): align cmsg control buffer + error on empty bind addresses

fix musl

reduce capability (-CAP_NET_ADMIN +CAP_NET_RAW)