TCP and H2 Proxy port range #39
Description
It looks like these two proxies are intercepting more traffic than expected. For now, I’ve narrowed the port range, but we should investigate why this is happening and address the underlying issue.
Pointer to code: https://github.com/appnet-org/arpc/blob/main/cmd/proxy-tcp/apply_iptables_local.sh#L32
2025-11-28T14:57:24.551-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-9", "clientAddr": "176.65.148.224:52462", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:57:24.551-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-9", "original_dst": "130.127.133.185:17001", "clientAddr": "176.65.148.224:52462"}
2025-11-28T14:57:24.551-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-9", "target": "130.127.133.185:17001", "clientAddr": "176.65.148.224:52462", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:17001: connect: connection refused"}
2025-11-28T14:58:16.246-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-10", "clientAddr": "35.203.211.200:60786", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:58:16.246-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-10", "original_dst": "130.127.133.185:38880", "clientAddr": "35.203.211.200:60786"}
2025-11-28T14:58:16.246-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-10", "target": "130.127.133.185:38880", "clientAddr": "35.203.211.200:60786", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:38880: connect: connection refused"}
2025-11-28T14:59:28.044-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-11", "clientAddr": "147.185.132.54:58254", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:59:28.044-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-11", "original_dst": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58254"}
2025-11-28T14:59:28.044-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-11", "target": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58254", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:20547: connect: connection refused"}
2025-11-28T14:59:29.083-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-12", "clientAddr": "147.185.132.54:58266", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:59:29.083-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-12", "original_dst": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58266"}
2025-11-28T14:59:29.083-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-12", "target": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58266", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:20547: connect: connection refused"}
2025-11-28T14:59:29.222-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-13", "clientAddr": "147.185.132.54:58268", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:59:29.222-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-13", "original_dst": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58268"}
2025-11-28T14:59:29.222-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-13", "target": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58268", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:20547: connect: connection refused"}
2025-11-28T14:59:30.261-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-14", "clientAddr": "147.185.132.54:58284", "localAddr": "130.127.133.185:15006"}
2025-11-28T14:59:30.261-0500 INFO proxy-tcp/main.go:248 Using iptables original destination {"connID": "conn-14", "original_dst": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58284"}
2025-11-28T14:59:30.262-0500 WARN proxy-tcp/main.go:262 Failed to connect to target {"connID": "conn-14", "target": "130.127.133.185:20547", "clientAddr": "147.185.132.54:58284", "localAddr": "130.127.133.185:15006", "error": "dial tcp 130.127.133.185:20547: connect: connection refused"}
2025-11-28T15:01:10.167-0500 INFO proxy-tcp/main.go:239 New TCP connection {"connID": "conn-15", "clientAddr": "87.120.191.94:33420", "localAddr": "130.127.133.185:15006"}