Hi Malcolm
I will set up a lab with this information.
Thanks
Daniel
De: Malcolm Turnbull
Enviado: segunda-feira, 25 de junho de 2018 14:05
Para: Daniel Augusto Esteves
Cc: Jarno Huuskonen; simos.li...@googlemail.com; haproxy@formilux.org
Assunto: Re: Haproxy client ip
Daniel,
Yes, That's expected :-).
It normally scares me when people say they are going to use TPROXY...
It's awesome but needs a bit of thought to implement properly.
This blog may help, it's a bit old, so ignore the Kernel stuff - you
don't need it any more:
https://www.loadbalancer.org/blog/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/
Configure HAProxy with TPROXY kernel for full transparent
proxy<https://www.loadbalancer.org/blog/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/>
www.loadbalancer.org
If you use HaProxy as the load balancer then all of the backend servers see the
traffic coming from the IP address of the load balancer. TPROXY allows you to
make sure the backend servers see the true client IP address in the logs. NB.
Standard Kernel builds didn't support
On 25 June 2018 at 17:59, Daniel Augusto Esteves
wrote:
> Hi
>
>
> When configuring source 0.0.0.0 usesrc clientip the backend stops
> responding.
>
>
> Best Regards
>
> Daniel
>
>
>
> ________
> De: Daniel Augusto Esteves
> Enviado: segunda-feira, 25 de junho de 2018 08:37
> Para: Jarno Huuskonen; simos.li...@googlemail.com
> Cc: haproxy@formilux.org
> Assunto: Re: Haproxy client ip
>
> Thank you for the tips guys.
>
>
> Obter o Outlook para Android
>
> ____
> From: Jarno Huuskonen
> Sent: Monday, June 25, 2018 8:24:11 AM
> To: Daniel Augusto Esteves
> Cc: haproxy@formilux.org
> Subject: Re: Haproxy client ip
>
> Hi,
>
> On Mon, Jun 25, Simos Xenitellis wrote:
>> On Sat, Jun 23, 2018 at 1:43 AM, Daniel Augusto Esteves
>> wrote:
>> > Hi
>> >
>> > I am setting up haproxy with keepalived and i need to know if is
>> > possible
>> > pass client ip for destination log server using haproxy in tcp mode?
>> >
>>
>> That can be done with the "proxy protocol". See more at
>> https://www.haproxy.com/blog/haproxy/proxy-protocol/
>
> There's also source usesrc clientip:
> http://cbonte.github.io/haproxy-dconv/1.8/configuration.html#4-source
> if your backend servers don't support proxy-protocol.
>
> -Jarno
>
> --
> Jarno Huuskonen
>