cloudflare / cloudflare/cloudflared
Add support for haproxy proxy protocol
Open
- Dominant language
- Go
- Stars
- 15.6k
- Forks
- 1.4k
- PR merge metrics
- No merged PRs in 30d
Description
Currently all ssh connections are from from localhost, and the original client address is not available to sshd.
The HAProxy proxy protocol allows the client address to be preserved for non-http connections like ssh.
tunnel origin request configuration should have an option to send a proxy header at the start of the connection. This would allow client address to be restored via [mmproxy](https://github.com/cloudflare/mmproxy).
Note this is already supported by spectrum (https://developers.cloudflare.com/spectrum/proxy-protocol).
Contributor guide
Assessment
This issue has not been assessed yet.