From c755f042f1bc349eca16696f3913f4584b09d589 Mon Sep 17 00:00:00 2001 From: Miciah Masters Date: Wed, 25 May 2022 18:44:43 -0400 Subject: [PATCH] haproxy-config.template: Use PROXY protocol v2 * images/router/haproxy/conf/haproxy-config.template: Use PROXY protocol v2 for the internal "be_sni" and "be_no_sni" backends and "fe_no_sni" and "fe_sni" frontends. --- images/router/haproxy/conf/haproxy-config.template | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/images/router/haproxy/conf/haproxy-config.template b/images/router/haproxy/conf/haproxy-config.template index 2cd66b00d..37d831ecd 100644 --- a/images/router/haproxy/conf/haproxy-config.template +++ b/images/router/haproxy/conf/haproxy-config.template @@ -282,7 +282,7 @@ frontend public_ssl # traffic ########################################################################## backend be_sni - server fe_sni unix@/var/lib/haproxy/run/haproxy-sni.sock weight 1 send-proxy + server fe_sni unix@/var/lib/haproxy/run/haproxy-sni.sock weight 1 send-proxy-v2 frontend fe_sni # terminate ssl on edge @@ -371,7 +371,7 @@ frontend fe_sni ########################################################################## # backend for when sni does not exist, or ssl term needs to happen on the edge backend be_no_sni - server fe_no_sni unix@/var/lib/haproxy/run/haproxy-no-sni.sock weight 1 send-proxy + server fe_no_sni unix@/var/lib/haproxy/run/haproxy-no-sni.sock weight 1 send-proxy-v2 frontend fe_no_sni # terminate ssl on edge