moby / moby/vpnkit

Outdated documentation for Experimental Transparent Proxy Feature

Open
#448 3 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
OCaml
Stars
1.2k
Forks
214
PR merge metrics
No merged PRs in 30d

Description

I am having issues enabling the experimental Transparent proxy feature. The documentation states these instructions to this feature:

cd ~/Library/Containers/com.docker.docker/Data/database/
git reset --hard
mkdir -p com.docker.driver.amd64-linux/slirp
echo -n true > com.docker.driver.amd64-linux/slirp/enable-http-intercept
git add com.docker.driver.amd64-linux/slirp/enable-http-intercept
git commit -s -m 'Enable HTTP interception'

However it appears the "database" folder has been deprecated since version 7.12. I have tried adding the folders/configurations listed in the above instructions myself but have had no luck with getting containers to take my host machine's system configurations.

Does this mean this feature has also been deprecated? This is a really amazing feature that would save my team a great deal of proxy configurations since we work behind a corporate proxy.

Steps to Reproduce:

  1. Follow "Enabling the proxy in recent Docker for Mac builds" instructions: https://github.com/moby/vpnkit/blob/master/docs/transparent-http-proxy.md
  2. Set system proxy on host machine to corporate or local proxy for testing(set system proxy setting to point to mitmproxy so you can monitor outgoing traffic)
  3. Startup centos container docker run -it --rm centos
  4. Run curl www.google.com from within container, which returns result "curl: (6) Could not resolve host: www.google.com." Notice mitmproxy did not pickup the call to http://www.google.com

System: macOS High Sierra Version 10.13.6
Docker for Mac CE Edge: Engine 18.09.0

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the transparent HTTP proxy documentation at moby/vpnkit/docs/transparent-http-proxy.md and review the referenced Docker for Mac 7.12 issue about the deprecated database folder. Reproduce the listed macOS proxy steps if the environment is available, then determine whether the feature and instructions are still supported. Done means the documentation accurately describes current setup or clearly marks the feature as unavailable.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
documentation, networking
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.