kosmos/chef
kosmos
/
chef
8
3
Fork 0
Code Issues 37 Pull Requests 1 Projects 1 Activity

Forward original IP addresses to machines behind haproxy/LB #290

New Issue
Closed
opened 2021-01-18 12:17:55 +00:00 by raucao · 2 comments
raucao commented 2021-01-18 12:17:55 +00:00
Owner
Copy Link

A bit more involved, but if we want client IP addresses being available in forwarded TCP traffic, it seems to be the only way:

https://medium.com/snapt/haproxy-and-tproxy-99bcf6ce16cf

A bit more involved, but if we want client IP addresses being available in forwarded TCP traffic, it seems to be the only way: https://medium.com/snapt/haproxy-and-tproxy-99bcf6ce16cf
raucao added the
feature
 label 2021-01-18 12:17:55 +00:00
raucao added
idea
 and removed
feature
 labels 2022-08-23 13:03:41 +00:00
raucao commented 2022-10-19 09:54:52 +00:00
Author
Owner
Copy Link

There's also the proxy protocol, and it is supported by a surprising amount of applications, incl. ejabberd and nginx.

There's also the proxy protocol, and it is supported by a surprising amount of applications, incl. ejabberd and nginx. * https://www.process-one.net/blog/proxy-protocol-in-ejabberd/ * https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/
raucao changed title from Set up TPROXY IP address spoofing/forwarding for HAProxy hosts to Forward original IP addresses to machines behind haproxy/LB 2022-10-19 09:55:15 +00:00
raucao removed the
idea
 label 2022-10-19 09:55:24 +00:00
raucao self-assigned this 2022-10-24 10:49:40 +00:00
raucao commented 2023-03-30 09:21:51 +00:00
Author
Owner
Copy Link

Closing, since we recently configured proxy protocol for haproxy/ejabberd, and almost phased out haproxy for HTTPS already (in favor of nginx vhosts on the host/LB).

Closing, since we recently configured proxy protocol for haproxy/ejabberd, and almost phased out haproxy for HTTPS already (in favor of nginx vhosts on the host/LB).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
master
jammy_jellyfish
chore/replace_postgres_primary
chore/akkounts_configs
feature/libretranslate
feature/deploy_new_kredits_software
feature/jitsi-meet
chore/395-gitea_cron
chore/move_zerotier_controller
chore/upgrade_sockethub
chore/move_gitea_and_drone
feature/turn_ip_config
feature/103-chef_15
feature/chef_15
dev
Labels
Clear labels   
service
accounts
Kosmos Accounts

  
service
discourse
Kosmos Community Forums

  
service
drone-ci
Kosmos Drone CI

  
service
email
mail.kosmos.org

  
service
garage
S3-compatible object storage

  
service
gitea
Kosmos Gitea

  
service
ipfs
Kosmos IPFS

  
service
mastodon
kosmos.social

  
service
postgres
Database cluster

  
service
remotestorage
Portable data storage for the Web

  
service
wiki
Kosmos Wiki

  
service
xmpp
Kosmos Chat

  
bug

Something is not working

  
design

Graphic/visual design

  
dev environment

Config, builds, CI, deployment, etc.

  
docs

Documentation

  
duplicate

This issue or pull request already exists

  
enhancement

Improving existing functionality

  
feature

New functionality

  
good first issue

Dive in, and start contributing

  
idea

Something to consider

  
invalid

Not a bug

  
kredits-1

Small contribution

  
kredits-2

Medium contribution

  
kredits-3

Large contribution

  
on hold

Currently not actionable

  
ops

Manual IT ops activities

  
question

Looking for an answer

  
release
major

  
release
minor

  
release
patch

  
security

All your base are belong to us

  
ui/ux

User interface, process design, etc.

  
wontfix

This won't be fixed

No Label
service
accounts
service
discourse
service
drone-ci
service
email
service
garage
service
gitea
service
ipfs
service
mastodon
service
postgres
service
remotestorage
service
wiki
service
xmpp
bug
design
dev environment
docs
duplicate
enhancement
feature
good first issue
idea
invalid
kredits-1
kredits-2
kredits-3
on hold
ops
question
release
major
release
minor
release
patch
security
ui/ux
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
raucao
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#290
No description provided.
Delete Branch "%!s(<nil>)"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?