From 8c9a4c4cdd68d3ab3fa1d6cd2e44577107bcd69c Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Mon, 1 Dec 2025 02:50:25 +0200 Subject: sstp: Improve documentation about proxy protocol Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index d9c05653..f25b6f85 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -823,6 +823,13 @@ Specifies incoming connection acceptance mode. .br .B proxy - enable PROXY protocol 1 & 2 support. +.br +This is useful when accel-ppp is running behind a load balancer (like HAProxy or Nginx) or a reverse proxy. It allows accel-ppp to receive the original client IP address and port instead of the proxy's IP. The extracted real client IP is then used for: +.br +- \fBconnlimit\fR module checks (limiting connections per source IP). +- \fBclient-ip-range\fR verification. +- \fBCalling-Station-Id\fR attribute in RADIUS and logs. +.br .TP .BI "ssl-protocol=" ssl2|ssl3|tls1|tls1.1|tls1.2|tls1.3 Specifies the enabled SSL/TLS protocols supported by OpenSSL library. -- cgit v1.2.3