[mythtv-users] http_proxy environment variable causing a raft of problems

Brian J. Murrell brian at interlinx.bc.ca
Fri Dec 20 15:14:28 UTC 2013


On Fri, 2013-12-20 at 07:44 -0600, Raymond Wagner wrote: 
> 
> Qt automatically configures any created sockets to use the proxy defined by your environmental variable.

But as I said, the proxy is not actually being used for connections from
the FE to the BE (precisely because they are on the local subnet):

tcp        0      0 10.75.22.1:5100         0.0.0.0:*               LISTEN      8310/mythfrontend   
tcp        0      0 127.0.0.1:5100          0.0.0.0:*               LISTEN      8310/mythfrontend   
tcp        0      0 10.75.22.1:6547         0.0.0.0:*               LISTEN      8310/mythfrontend   
tcp        0      0 127.0.0.1:6547          0.0.0.0:*               LISTEN      8310/mythfrontend   
tcp        0      0 127.0.0.1:35327         0.0.0.0:*               LISTEN      8380/mythlogserver  
tcp        0      0 127.0.0.1:50421         127.0.0.1:35327         ESTABLISHED 8310/mythfrontend   
tcp        0      0 10.75.22.1:48072        10.75.22.2:6543         ESTABLISHED 8310/mythfrontend   
tcp        0      0 127.0.0.1:35327         127.0.0.1:50421         ESTABLISHED 8380/mythlogserver  
tcp        0      0 10.75.22.1:48071        10.75.22.2:6543         ESTABLISHED 8310/mythfrontend   
tcp6       0      0 fe80::abc:deff:fe21:45ac:5100 :::*                    LISTEN      8310/mythfrontend   
tcp6       0      0 ::1:5100                :::*                    LISTEN      8310/mythfrontend   
tcp6       0      0 fe80::abc:deff:fe21:45ac:6547 :::*                    LISTEN      8310/mythfrontend   
tcp6       0      0 ::1:6547                :::*                    LISTEN      8310/mythfrontend   
tcp6       0      0 2001:123:45:678:abc:deff:fe21:45ac:56370 2001:123:45:678:abc:deff:fe21:52fb:3306 ESTABLISHED 8310/mythfrontend   
tcp6       0      0 2001:123:45:678:abc:deff:fe21:45ac:56360 2001:123:45:678:abc:deff:fe21:52fb:3306 ESTABLISHED 8310/mythfrontend   
tcp6       0      0 2001:123:45:678:abc:deff:fe21:45ac:56363 2001:123:45:678:abc:deff:fe21:52fb:3306 ESTABLISHED 8380/mythlogserver  
udp        0      0 0.0.0.0:6549            0.0.0.0:*                           8310/mythfrontend   
udp        0      0 10.75.22.255:6948       0.0.0.0:*                           8310/mythfrontend   
udp        0      0 10.75.22.1:6948         0.0.0.0:*                           8310/mythfrontend   
udp        0      0 127.0.0.1:6948          0.0.0.0:*                           8310/mythfrontend   
udp        0      0 255.255.255.255:1900    0.0.0.0:*                           8310/mythfrontend   
udp        0      0 239.255.255.250:1900    0.0.0.0:*                           8310/mythfrontend   
udp6       0      0 fe80::abc:deff:fe21:45ac:6948 :::*                                8310/mythfrontend   
udp6       0      0 ::1:6948                :::*                                8310/mythfrontend   



As you can see they are direct between the two hosts (10.75.22.1 &
2001:123:45:678:abc:deff:fe21:45ac are the FE and 10.75.22.2 &
2001:123:45:678:abc:deff:fe21:52fb are the BE), yet the mere presence of
the http_proxy variable is causing all of these problems.

> What is your usage case that you must use a proxy,

Efficiency for one -- it has a big cache behind it and blocks ads, but
more importantly content filtering.  Won't anyone think of the
children!  :-)

> and that proxy cannot be made transparent to the client PC?

http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#Why_can.27t_I_use_authentication_together_with_interception_proxying.3F

Children and adults use the same devices, so the way content monitoring
is adjusted for those parties is based on "who they are" not "where they
browse from", so they authenticate to the browser.

Cheers,
b.




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20131220/a5fc9947/attachment.sig>


More information about the mythtv-users mailing list