Oh hey guys, I do the same thing and use the stunnel proxy protocol. You just add protocol = proxy to stunnel and use bind :81 accept-proxy for haproxy and it seems to take care of the rest. I do have to add some extra headers using addreq to identify port and protocol but that's just hardcoded in the https frontend (and http frontend for consistency).
Hope that helps. I know newer versions of haproxy and stunnel are required so double check that. -- Chris LeBlanc On Tuesday, June 5, 2012 at 2:01 AM, Baptiste wrote: > well, not adding a header, but getting connected on the server using > the client IP (using a TPROXY patched kernel). > > cheers > > On Tue, Jun 5, 2012 at 9:00 AM, Baptiste <bed...@gmail.com > (mailto:bed...@gmail.com)> wrote: > > Hey, > > > > Using stunnel and haproxy, both with the proxy protocol may help when > > you want to add the X-SRC-IP header for a SSL connection. > > > > cheers
