Hi Alex, On Tue, Feb 28, 2012 at 12:34:00PM +0100, hapr...@serverphorums.com wrote: > Hi Folks, > > When using stud/stunnel in front of HAProxy, and using the PROXY protocol - > Is it possible to make "balance source" distribute based on the client ip > (from the PROXY protocol) rather than the ip of the decryption engine?
Yes, this is what it does. The PROXY protocol replaces the client's IP address *everywhere*, even in ACLs and logs. Regards, Willy