Can go-any-proxy Do This? about go-any-proxy

[ryanchapman]

Looks like you've an issue with the firewall configuration. Are you running any-proxy on the same host where your iptables rule -j REDIRECT is set up?

But I'm not sure if any-proxy will match your use case. any-proxy is designed to intercept traffic and then set up a connection through a corporate type proxy (squid, Symantec Secure Web Gateway). In many large corporations, they don't allow direct internet access and require you to connect through their proxies. If your application isn't proxy aware (via export http_proxy, export https_proxy, WPAD or some other mechanism), then any-proxy serves as a way for it to still work.

In your case, once you get iptables ... -j REDIRECT working, any-proxy will receive the intercepted packet, and will contact your upstream proxies (specified as option -p to any-proxy). It will then say CONNECT original_intended_ip_addr:original_intended_port\r\n\r\n. The upstream proxy opens a socket to original_intended_ip_addr:original_intended_port and the connection is ready for traffic.

[ryanchapman]

Wanted to post one more thing...

If you are just looking to monitor the traffic, a tool like tshark may be better. Let me know if that's the case and I'll send you some sample commands.

[nobozo]

On 6/23/2018 7:11 PM, Ryan A. Chapman wrote: Wanted to post one more thing... If you are just looking to monitor the traffic, a tool like tshark may be better. Let me know if that's the case and I'll send you some sample commands.

Thanks for the replies. I'm aware of tshark, thanks. The host I'm running on, a Fedora 28 VM, has no iptables rules, so I don't think this is it. Meanwhile, I did some experimenting with mitmproxy, which is able to intercept my traffic. However, I'm hoping to find something written in go, which I can modify to do what I'm trying to do, which is to proxy dnf with a cache. Jon