From 8141fca9486caab9515dcb6a89250eddc4948060 Mon Sep 17 00:00:00 2001 From: fancy Date: Wed, 22 Apr 2020 16:49:35 +0800 Subject: [PATCH] update readme --- cgroup-tproxy.sh | 2 +- readme.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/cgroup-tproxy.sh b/cgroup-tproxy.sh index 57e5ecc..b00e1ce 100644 --- a/cgroup-tproxy.sh +++ b/cgroup-tproxy.sh @@ -99,7 +99,7 @@ iptables -t mangle -A TPROXY_PRE -m conntrack --ctstate NEW -j CONNMARK --restor iptables -t mangle -A PREROUTING -j TPROXY_PRE iptables -t mangle -N TPROXY_OUT -iptables -t mangle -A TPROXY_OUT -m connmark --mark $mark_newin -j RETURN # return incoming connection directly, v2ray tproxy seems not work for this situation, maybe a v2ray bug +iptables -t mangle -A TPROXY_OUT -m connmark --mark $mark_newin -j RETURN # return incoming connection directly, v2ray tproxy not work for this situation, see this: https://github.com/Kr328/ClashForAndroid/issues/146 iptables -t mangle -A TPROXY_OUT -m mark --mark $v2ray_so_mark -j RETURN iptables -t mangle -A TPROXY_OUT -p udp -m cgroup --path $proxy_cgroup -j MARK --set-mark $mark iptables -t mangle -A TPROXY_OUT -p tcp -m cgroup --path $proxy_cgroup -j MARK --set-mark $mark diff --git a/readme.md b/readme.md index 7826b58..d1fc60f 100644 --- a/readme.md +++ b/readme.md @@ -8,7 +8,7 @@ cgproxy will **transparent** proxy anything running in specific cgroup. It resem - cgroup2 - For now, linux default using cgroup v1 for compatibility, this project need cgroup v2, you need disable cgroup v1 and enable cgroup v2 in your system. + For now, linux default using cgroup v1 for compatibility, this project need cgroup v2, you need disable cgroup v1 and enable cgroup v2 in your system. see [Disabling v1 cgroups](https://wiki.archlinux.org/index.php/Cgroups#Disabling_v1_cgroups). - TPROXY