diff options
| author | Denys Fedoryshchenko <denys.f@collabora.com> | 2025-12-01 02:50:25 +0200 |
|---|---|---|
| committer | Denys Fedoryshchenko <denys.f@collabora.com> | 2025-12-01 02:50:25 +0200 |
| commit | 8c9a4c4cdd68d3ab3fa1d6cd2e44577107bcd69c (patch) | |
| tree | 379c7e4cf73b31160f3db9b88d4ef4ae49b3fc40 | |
| parent | 5bfb65c652a62993b5374e325dda79ceb8a36da1 (diff) | |
| download | accel-ppp-8c9a4c4cdd68d3ab3fa1d6cd2e44577107bcd69c.tar.gz accel-ppp-8c9a4c4cdd68d3ab3fa1d6cd2e44577107bcd69c.zip | |
sstp: Improve documentation about proxy protocol
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
| -rw-r--r-- | accel-pppd/accel-ppp.conf.5 | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index d9c05653..f25b6f85 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -823,6 +823,13 @@ Specifies incoming connection acceptance mode. .br .B proxy - enable PROXY protocol 1 & 2 support. +.br +This is useful when accel-ppp is running behind a load balancer (like HAProxy or Nginx) or a reverse proxy. It allows accel-ppp to receive the original client IP address and port instead of the proxy's IP. The extracted real client IP is then used for: +.br +- \fBconnlimit\fR module checks (limiting connections per source IP). +- \fBclient-ip-range\fR verification. +- \fBCalling-Station-Id\fR attribute in RADIUS and logs. +.br .TP .BI "ssl-protocol=" ssl2|ssl3|tls1|tls1.1|tls1.2|tls1.3 Specifies the enabled SSL/TLS protocols supported by OpenSSL library. |