Re: source ip - tcp mode

[James Bardin]

On Wed, Jan 18, 2012 at 5:43 AM, Karthik Iyer  wrote:
> Is there any way to get the souce ip exposed to the nodes for tcp mode in
> someway while running haproxy as non-tproxy, for haproxy 1.4 ?

The most common use for TCP mode is balancing SSL traffic, where
having the IP would do you no good, since you can't insert it into the
stream.

The patch that you're thinking of is for stunnel[1], to add an
x-forwarded-for header.

You could also use stud[2], which can add a header, or use the proxy-protocol.

1. http://haproxy.1wt.eu/download/patches/
2. https://github.com/bumptech/stud

I've also used nginx with great success as an ssl wrapper, which can
give you some added functionality as well.


-jim

Re: source ip - tcp mode

[YHB Sistem Yönetimi]

I asked a similar question in last month. Willy said that;

26 Aralık 2011 21:31 tarihinde Willy Tarreau  yazdı:
> No, there is still no such method. As an alternative, you could check
> if you can implement the PROXY protocol on your servers and have haproxy
> pass them all the L4 information. Some people here on the list are already
> doing that.

2012/1/18 Karthik Iyer 

> Hello,
>
> Is there any way to get the souce ip exposed to the nodes for tcp mode in
> someway while running haproxy as non-tproxy, for haproxy 1.4 ?
>
> For http mode we have this x-forwarded-for to the rescue.
>
> On Freenode #haproxy, someone mentioned that there is a patch for this, I
> tried to google for it, but in vain.
>
> Can anyone please point me to the patch, So that i can test it out.
>
> Thanks in advance,
>
> - Karthik




-- 
Türker Sezer

Linux System Administrator
YeniHayat Informatics Corp.

http://www.yh.com.tr/
+90 (212) 210 77 36 - 111

source ip - tcp mode

[Karthik Iyer]

Hello,

Is there any way to get the souce ip exposed to the nodes for tcp mode in
someway while running haproxy as non-tproxy, for haproxy 1.4 ?

For http mode we have this x-forwarded-for to the rescue.

On Freenode #haproxy, someone mentioned that there is a patch for this, I
tried to google for it, but in vain.

Can anyone please point me to the patch, So that i can test it out.

Thanks in advance,

- Karthik