[stunnel-users] client with two source IPs and one destination
Peter Pentchev
roam at ringlet.net
Mon May 11 20:59:19 CEST 2020
On Mon, May 11, 2020 at 02:55:35PM -0400, Christopher Schultz wrote:
> Daniele,
>
> On 5/11/20 10:53, Daniele Basaldella wrote:
> > Dear group,
> > I've to configure a couple of tunneled connections (call them TC1 and
> > TC2), client side, on a linux system.
> > The target of both such connections is the same (destination ip and port
> > are the same, call it DST).
> > At source side (my server) I have a two IP addresses (call them IP1 and
> > IP2) assigned and currently working to its unique NIC. I normally use
> > iptables SNAT to split the traffic between IP1 and IP2 depending on
> > destination addresses but in this case I've to distinguish it at
> > application level (TC1 and TC2).
> > I'd like to get TC1 to set the outgoing traffic with source address IP1
> > and TC2 to set outgoing traffic with source address IP2.
> >
> > Tunnel Tunnel
> > Client Server
> >
> > TC1: IP1 --\
> > >--> DST
> > TC2: IP2 --/
> >
> > I'm thinking to set one entry in stunnel.conf for each TC1 and TC2 and
> > use *transparent* = source clause to set the source address but it
> > seems my case is not so common and I didn't find documentation.
> > Please could you suggest a solution.
>
> If it's important for you to set the outgoing interface, then you should
> use:
>
> local=IP1
>
> in your config for the tunnel definition.
I believe Daniele's main point was the desire to avoid having two
sections in the stunnel config, one with accept=IP1 and local=IP1
and one with IP2. Whether it can be done with transparent proxying is
something I've never tried, so I don't feel qualified to answer.
G'luck,
Peter
--
Peter Pentchev roam at ringlet.net roam at debian.org pp at storpool.com
PGP key: http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115 C354 651E EFB0 2527 DF13
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20200511/290d8b7c/attachment.sig>
More information about the stunnel-users
mailing list