cloudflare / cloudflare/cloudflared

Add support for haproxy proxy protocol

Open
#369 6 comments 18 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
15.6k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

Currently all ssh connections are from from localhost, and the original client address is not available to sshd.

The HAProxy proxy protocol allows the client address to be preserved for non-http connections like ssh.

tunnel origin request configuration should have an option to send a proxy header at the start of the connection. This would allow client address to be restored via [mmproxy](https://github.com/cloudflare/mmproxy).

Note this is already supported by spectrum (https://developers.cloudflare.com/spectrum/proxy-protocol).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.