relayd(8) filter rules


Supports HTTP header and URL filtering

  http protocol httpfilter {
        return error
        label "Get back to work!"
        request url filter "facebook.com/"
  ...

I'm working on rewriting the filter language to allow a more sophisticated PF-like language:

  # Add X-Forwarded-For header (load balancer)
  match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
  # Simple URL Filter
  block client in url "www.example.com/" tag "URL filtered!"
  pass client in from 10.0.0.1 url "www.example.com/"
  # Alternate relay targets
  match request path "/images" relay-to 10.1.1.1
  match request path "/videos" relay-to <otherhosts>