```
ok
}
-
-```
-
-When the server decides to proxy a request to a home server,
-the proxied request is first passed through the pre-proxy
-stage. This stage can re-write the request, or decide to
-cancel the proxy.
-
-Only a few modules currently have this method.
-
-```
- pre-proxy {
-
-```
-If you want to have a log of packets proxied to a home
-server, uncomment the following line, and the
-'detail pre_proxy_log' section in radiusd.conf.
-pre_proxy_log
-```
- }
-
-```
-
-When the server receives a reply to a request it proxied
-to a home server, the request may be massaged here, in the
-post-proxy stage.
-
-```
- post-proxy {
-```
-
-
-If you want to have a log of replies from a home
-server, uncomment the following line, and the
-'detail post_proxy_log' section in radiusd.conf.
-post_proxy_log
-
-Uncomment the following line if you want to filter
-replies from remote proxies based on the rules
-defined in the 'attrs' file.
-
-attr_filter
-```
- }
}
```
```
```
-// Copyright (C) 2025 Network RADIUS SAS. Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS. Licenced under CC-by-NC 4.0.
// This documentation was developed by Network RADIUS SAS.
(5) Define a virtual server to handle pre/post-proxy re-writing
```
server home.example.com {
- pre-proxy {
-```
-Insert pre-proxy rules here
-```
- }
-
- post-proxy {
-```
-Insert post-proxy rules here
-
-This will be called when the CURRENT packet failed
-to be proxied. This may happen when one home server
-suddenly goes down, even though another home server
-may be alive.
-
-i.e. the current request has run out of time, so it
-cannot fail over to another (possibly) alive server.
-
-We want to respond to the NAS, so that it can stop
-resending the packet. We write the packet to the
-"detail" file, where it will be read, and sent to
-another home server.
-
-```
- Post-Proxy-Type Fail-Accounting {
- detail.example.com
- }
-
-```
-
-This section is run when there are problems
-proxying Access-Request packets
-
-```
- Post-Proxy-Type Fail-Authentication {
-```
-add policies here
-```
- }
-
- }
-
```
Read accounting packets from the detail file(s) for
the home server.
# "succeeds" by forcing an "ok" return.
ok
}
-
-
- #
- # When the server decides to proxy a request to a home server,
- # the proxied request is first passed through the pre-proxy
- # stage. This stage can re-write the request, or decide to
- # cancel the proxy.
- #
- # Only a few modules currently have this method.
- #
- pre-proxy {
-
- # If you want to have a log of packets proxied to a home
- # server, uncomment the following line, and the
- # 'detail pre_proxy_log' section in radiusd.conf.
- # pre_proxy_log
- }
-
- #
- # When the server receives a reply to a request it proxied
- # to a home server, the request may be massaged here, in the
- # post-proxy stage.
- #
- post-proxy {
- #
-
- # If you want to have a log of replies from a home
- # server, uncomment the following line, and the
- # 'detail post_proxy_log' section in radiusd.conf.
- # post_proxy_log
-
-
- # Uncomment the following line if you want to filter
- # replies from remote proxies based on the rules
- # defined in the 'attrs' file.
-
- # attr_filter
- }
}
# (5) Define a virtual server to handle pre/post-proxy re-writing
server home.example.com {
- pre-proxy {
- # Insert pre-proxy rules here
- }
-
- post-proxy {
- # Insert post-proxy rules here
-
- # This will be called when the CURRENT packet failed
- # to be proxied. This may happen when one home server
- # suddenly goes down, even though another home server
- # may be alive.
- #
- # i.e. the current request has run out of time, so it
- # cannot fail over to another (possibly) alive server.
- #
- # We want to respond to the NAS, so that it can stop
- # resending the packet. We write the packet to the
- # "detail" file, where it will be read, and sent to
- # another home server.
- #
- Post-Proxy-Type Fail-Accounting {
- detail.example.com
- }
-
- #
- # This section is run when there are problems
- # proxying Access-Request packets
- #
- Post-Proxy-Type Fail-Authentication {
- # add policies here
- }
-
- }
-
-
# Read accounting packets from the detail file(s) for
# the home server.
#