Hello Louis,

On Thu, Apr 26, 2018 at 02:07:50PM +0200, Louis Chanouha wrote:
> Hello,
> 
> I set a global http-reuse safe.
> 
> HAProxy displays a warning for http-reuse and send-proxy combinaison on TCP
> mode backends, but http-reuse is active only on HTTP mode backends.
> 
> [WARNING] 115/135122 (26529) : config : proxy ' SMTPS_SUBMISSION' :
> connections to server 'f1' will have a PROXY protocol header announcing the
> first client's IP address while http-reuse is enabled and allows the same
> connection to be shared between multiple clients. It is strongly advised to
> disable 'send-proxy' and to use the 'forwardfor' option instead.
> 
>       defaults
>                 [...]
>                 http-reuse                      safe
> 
>       listen SMTPS_SUBMISSION
>                 bind            0.0.0.0:587
>                 mode            tcp
>                 balance         roundrobin
>                 option          tcplog
>                 server          f1 1.2.3.4 587 check send-proxy
> check-send-proxy

Good catch, thanks for the report. I've just addressed it now. Apparently
it could also warn on other cases like transparent source binding.

> Sorry for my english

Don't worry, it was better than the average we can see here, and we're not
running an english competition; as long as participants understand each
other it's OK :-)

Willy

Reply via email to