Forward original IP addresses to machines behind haproxy/LB #290

New Issue

raucao · 2021-01-18T12:17:55Z

raucao commented

2021-01-18 12:17:55 +00:00

A bit more involved, but if we want client IP addresses being available in forwarded TCP traffic, it seems to be the only way:

https://medium.com/snapt/haproxy-and-tproxy-99bcf6ce16cf

A bit more involved, but if we want client IP addresses being available in forwarded TCP traffic, it seems to be the only way: https://medium.com/snapt/haproxy-and-tproxy-99bcf6ce16cf

raucao added the

feature

label 2021-01-18 12:17:55 +00:00

raucao referenced this issue

2021-01-20 12:12:54 +00:00

Make IPFS in VMs available for p2p connections from the outside #229

raucao added

idea

and removed

feature

labels 2022-08-23 13:03:41 +00:00

raucao commented

2022-10-19 09:54:52 +00:00

There's also the proxy protocol, and it is supported by a surprising amount of applications, incl. ejabberd and nginx.

There's also the proxy protocol, and it is supported by a surprising amount of applications, incl. ejabberd and nginx. * https://www.process-one.net/blog/proxy-protocol-in-ejabberd/ * https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/

raucao changed title from ~~Set up TPROXY IP address spoofing/forwarding for HAProxy hosts~~ to Forward original IP addresses to machines behind haproxy/LB

2022-10-19 09:55:15 +00:00

raucao removed the

idea

label 2022-10-19 09:55:24 +00:00

raucao self-assigned this 2022-10-24 10:49:40 +00:00

raucao commented

2023-03-30 09:21:51 +00:00

Closing, since we recently configured proxy protocol for haproxy/ejabberd, and almost phased out haproxy for HTTPS already (in favor of nginx vhosts on the host/LB).

raucao closed this issue

2023-03-30 09:21:51 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#290