Re: source ip - tcp mode
On Wed, Jan 18, 2012 at 5:43 AM, Karthik Iyer wrote: > Is there any way to get the souce ip exposed to the nodes for tcp mode in > someway while running haproxy as non-tproxy, for haproxy 1.4 ? The most common use for TCP mode is balancing SSL traffic, where having the IP would do you no good, since you can't insert it into the stream. The patch that you're thinking of is for stunnel[1], to add an x-forwarded-for header. You could also use stud[2], which can add a header, or use the proxy-protocol. 1. http://haproxy.1wt.eu/download/patches/ 2. https://github.com/bumptech/stud I've also used nginx with great success as an ssl wrapper, which can give you some added functionality as well. -jim
Re: source ip - tcp mode
I asked a similar question in last month. Willy said that; 26 Aralık 2011 21:31 tarihinde Willy Tarreau yazdı: > No, there is still no such method. As an alternative, you could check > if you can implement the PROXY protocol on your servers and have haproxy > pass them all the L4 information. Some people here on the list are already > doing that. 2012/1/18 Karthik Iyer > Hello, > > Is there any way to get the souce ip exposed to the nodes for tcp mode in > someway while running haproxy as non-tproxy, for haproxy 1.4 ? > > For http mode we have this x-forwarded-for to the rescue. > > On Freenode #haproxy, someone mentioned that there is a patch for this, I > tried to google for it, but in vain. > > Can anyone please point me to the patch, So that i can test it out. > > Thanks in advance, > > - Karthik -- Türker Sezer Linux System Administrator YeniHayat Informatics Corp. http://www.yh.com.tr/ +90 (212) 210 77 36 - 111