cloudflare / cloudflare/cloudflared
Add support for haproxy proxy protocol
- Lingua principale
- Go
- Stelle
- 15.6k
- Fork
- 1.4k
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
Currently all ssh connections are from from localhost, and the original client address is not available to sshd.
The HAProxy proxy protocol allows the client address to be preserved for non-http connections like ssh.
tunnel origin request configuration should have an option to send a proxy header at the start of the connection. This would allow client address to be restored via [mmproxy](https://github.com/cloudflare/mmproxy).
Note this is already supported by spectrum (https://developers.cloudflare.com/spectrum/proxy-protocol).
Guida per i contributori
Apri la guida per i contributori
Direzione di ricerca
Start by tracing the tunnel origin request configuration and connection setup to find where an option could control an initial proxy header. Confirm the expected HAProxy proxy protocol behavior and how mmproxy restores the client address. Done means the configuration can enable the header for non-HTTP connections without changing the default behavior.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Valutazione
- Stack tecnologico
- go
- Ambito
- networking
- Tipo di issue
- Funzionalità
- Difficoltà
- 4/5
- Tempo stimato
- 3-5 giorni
- Stato di attività
- Tranquilla
- Chiarezza
- Abbastanza chiara
- Idoneità per principianti
- 52/100