diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-05-19 14:57:43 +0000 | 
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-05-19 14:57:43 +0000 | 
| commit | 62ce80bd0cb49524f07d6badb2973f15528c0f1b (patch) | |
| tree | 90a716c1f2e45a502f7a4b2786f3d426f973caac /interface-definitions | |
| parent | 9ffbc8d8f9a2d25598f252b2a247fed9a76ea311 (diff) | |
| download | vyos-1x-62ce80bd0cb49524f07d6badb2973f15528c0f1b.tar.gz vyos-1x-62ce80bd0cb49524f07d6badb2973f15528c0f1b.zip | |
T5222: reverse-proxy add send-proxy option for backend server
To accept a Proxy Protocol header on incoming TCP connections,
add an accept-proxy parameter to the bind line in a frontend section.
This parameter detects both Proxy Protocol version 1 (text format)
and Proxy Protocol version 2 (binary format).
set load-balancing reverse-proxy backend <tag> server <tag> send-proxy
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/load-balancing-haproxy.xml.in | 12 | 
1 files changed, 12 insertions, 0 deletions
| diff --git a/interface-definitions/load-balancing-haproxy.xml.in b/interface-definitions/load-balancing-haproxy.xml.in index e295dcb63..f955a2fb7 100644 --- a/interface-definitions/load-balancing-haproxy.xml.in +++ b/interface-definitions/load-balancing-haproxy.xml.in @@ -131,6 +131,18 @@                      </properties>                    </leafNode>                    #include <include/port-number.xml.i> +                  <leafNode name="send-proxy"> +                    <properties> +                      <help>Send a Proxy Protocol version 1 header (text format)</help> +                      <valueless/> +                    </properties> +                  </leafNode> +                  <leafNode name="send-proxy-v2"> +                    <properties> +                      <help>Send a Proxy Protocol version 2 header (binary format)</help> +                      <valueless/> +                    </properties> +                  </leafNode>                  </children>                </tagNode>                <node name="ssl"> | 
