Is anybody using redsocks with nftables as a transparent proxy?

[gounthar]

Hi,

 

I've been using a lot redsocks with iptables to be able to stream to YouTube since last June on an X86 Ubuntu machine.
I have a set of iptables rules that work for me on this machine.

I imported them on my OrangePi One running Armbian Linux orangepione 5.4.2-sunxi #19.11.4.352 SMP Wed Dec 18 00:58:18 CET 2019 armv7l GNU/Linux.

Unfortunately, it did not work, maybe because of the news nftables. So I chose to use the legacy iptables

Spoiler

update-alternatives --set iptables /usr/sbin/iptables-legacy
update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
update-alternatives --set arptables /usr/sbin/arptables-legacy
update-alternatives --set ebtables /usr/sbin/ebtables-legacy

 

But it did not work any better. I then reverted the legacy use:

Spoiler

update-alternatives --set iptables /usr/sbin/iptables-nft
update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
update-alternatives: using /usr/sbin/ip6tables-nft to provide /usr/sbin/ip6tables (ip6tables) in manual mode
update-alternatives --set arptables /usr/sbin/arptables-nft
update-alternatives --set ebtables /usr/sbin/ebtables-nft

 

But alas...
So I exported my current rules, and imported them into nftables:

Spoiler

iptables-save > save.txt
iptables-restore-translate -f save.txt > ruleset.nft
nft -f ruleset.nft

 

It still does not work. Any idea?

Thanks.