Questions tagged [proxy-protocol]

28 questions
9
votes
4 answers

Verify if nginx is working correctly with Proxy Protocol locally

Environment I have set up Proxy Protocol support on an AWS classic load balancer as shown here which redirects traffic to backend nginx (configured with ModSecurity) instances. Everything works great and I can hit my websites from the open…
vikas027
  • 5,282
  • 4
  • 39
  • 51
8
votes
3 answers

kubernetes nginx ingress with proxy protocol ended up with broken header

I try to setup nginx ingress (nodeport) on google container with proxy protocol so that the real ip can be forwarded to backend service, but ended up with broken header. 2017/02/05 13:48:52 [error] 18#18: *2 broken header:…
ken
  • 13,869
  • 6
  • 42
  • 36
5
votes
3 answers

Client IP when behind AWS network load balancer from Python

When running a socket server behind a network load balancer, with instances specified by IP, ... server_sock = socket.socket(family=socket.AF_INET, type=socket.SOCK_STREAM,…
Michal Charemza
  • 25,940
  • 14
  • 98
  • 165
4
votes
0 answers

can stunnel process traffic from a proxy-protocol speaker (haproxy, amazon elb, etc)

I'm trying to setup a stunnel ssl farm load balanced by haproxy. It kinda looks like haproxy -> many stunnels -> haproxy -> apache,nginx etc Problem is to carry the original ip over to the final servers. It seems proxy-protocol is the perfect method…
Johnny B
  • 51
  • 4
3
votes
1 answer

Ingress Nginx NLB get Client Real IP (Broken header: "" while reading PROXY protocol)

I've ingress nginx controller exposed via private NLB (Network Load Balancer). I want to enable host whitelisting on ingress Nginx. My use case is to allow request from VPC1 to VPC2 and only request coming from VPC1 should be allowed to go through…
3
votes
1 answer

AWS's Proxy Protocol v2 Breaking Application Due to Absence of PSH Flag

I have a network application built using Netty. The application is behind Amazon network load balancer. I now want to be able to retrieve the original client IP address, so I turned on the Proxy Protocol v2 setting on the network load…
dade
  • 3,340
  • 4
  • 32
  • 53
2
votes
1 answer

Accept Proxy Protocol V2 Traffic with Jetty in Spring Boot

I am trying to configure Jetty 9.4.39.v20210325 in java Spring Boot 2.4.5 to accept proxy protocol V2 traffic. I want to do this programmatically in a spring configuration class. This is the method I wrote in the SharedConfiguration.java…
rq16
  • 31
  • 4
2
votes
1 answer

How to configure PROXY protocol in varnish upstream

I found that to accept PROXY protocol connections in varnish all I need to do is to run varnish with extra -a :1234,PROXY parameter. But what about sending those connections to upstream? If I have following infrastructure: - TLS -|- VARNISH -|-…
HubertNNN
  • 1,727
  • 1
  • 14
  • 29
2
votes
0 answers

How can I send proxy protocol with apache ProxyPass

I am currently using apache as a reverse proxy ('sending') to another apache server ('receiving') I want to enable the ProxyProtocol between these 2 servers On the receiving end I can 'enable' proxy protocol simply using mod_remoteip…
natli
  • 3,782
  • 11
  • 51
  • 82
2
votes
1 answer

Does Istio support proxy protocol?

Does Istio support proxy protocol? I set a gateway behind an haproxy with TCP forwarding and proxy protocol ("send-proxy" flag) but it doesn't work. I know Envoy supports it but it seems that Istio doesn't. If it doesn't support it, is there another…
matth3o
  • 3,229
  • 3
  • 20
  • 24
2
votes
1 answer

How to strip Proxy protocol with HAproxy?

Consider the following situation: Internet || || .------''------. …
Yeti
  • 2,647
  • 2
  • 33
  • 37
2
votes
1 answer

Proxy Protocol and SSL

I have the following configuration: HAProxy -> NGinx -> Backend (HAProxy is used for load balancing, NGinx for SSL termination) The configuration can not be changed I'm trying to pass the source IP to the backend using the proxy protocol. Working…
user1942586
  • 153
  • 1
  • 3
  • 16
1
vote
0 answers

istio preserve client-ip from pod on onpremise

I need to know client ip from pod where it is running on istio on onpremise. Is there something wrong from my configurations ? The ingressgateway is not loadbalancer, nodeport service. When I configure the TPROXY in application deployemnt, it…
canerbis
  • 21
  • 1
1
vote
0 answers

Module Apache mod_remoteip cause SSL Handshake failed (5) when load testing

I have Haproxy which load balance the traffic to two apache servers. When I benchmark with apache benchmark tool I have no errors and everything works as expected. But when I activate the proxy protocol communication between HAProxy and apaches I…
Ridae HAMDANI
  • 686
  • 2
  • 7
  • 17
1
vote
2 answers

Is there a way to configure nginx with OPTIONAL Proxy Protocol support?

Nginx can be configured to support the HAProxy proxy protocol for inbound traffic: http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_protocol However, using proxy_protocol on;, nginx cannot handle HTTP(S) traffic without the PROXY…
1
2