4 ms·
Just share an open FD to a socks proxy with the isolated service.
by gdgghhhhh 3y ago
Just share an open FD to a socks proxy with the isolated service.
- kevincox 3y agoThis depends on the service itself supporting inheriting sockets for proxies. Is this a common feature? Some services do support listening socket passing which does solve my problem as I can make it listen on a UNIX socket mounted on the host and accessible to the reverse proxy but many of the lower quality services that I want to give this treatment to don't support that either.
- hddqsb 3y agoAs another commenter says, you can use socat. Specifically, you can run it in double client mode (see http://www.dest-unreach.org/socat/doc/socat-gender.txt http://www.dest-unreach.org/socat/doc/socat-gender.txt) to connect the UNIX socket to the service.