Hi Malcolm
I will set up a lab with this information. Thanks Daniel ________________________________ De: Malcolm Turnbull <[email protected]> Enviado: segunda-feira, 25 de junho de 2018 14:05 Para: Daniel Augusto Esteves Cc: Jarno Huuskonen; [email protected]; [email protected] Assunto: Re: Haproxy client ip Daniel, Yes, That's expected :-). It normally scares me when people say they are going to use TPROXY... It's awesome but needs a bit of thought to implement properly. This blog may help, it's a bit old, so ignore the Kernel stuff - you don't need it any more: https://www.loadbalancer.org/blog/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/ Configure HAProxy with TPROXY kernel for full transparent proxy<https://www.loadbalancer.org/blog/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/> www.loadbalancer.org If you use HaProxy as the load balancer then all of the backend servers see the traffic coming from the IP address of the load balancer. TPROXY allows you to make sure the backend servers see the true client IP address in the logs. NB. Standard Kernel builds didn't support On 25 June 2018 at 17:59, Daniel Augusto Esteves <[email protected]> wrote: > Hi > > > When configuring source 0.0.0.0 usesrc clientip the backend stops > responding. > > > Best Regards > > Daniel > > > > ________________________________ > De: Daniel Augusto Esteves <[email protected]> > Enviado: segunda-feira, 25 de junho de 2018 08:37 > Para: Jarno Huuskonen; [email protected] > Cc: [email protected] > Assunto: Re: Haproxy client ip > > Thank you for the tips guys. > > > Obter o Outlook para Android > > ________________________________ > From: Jarno Huuskonen <[email protected]> > Sent: Monday, June 25, 2018 8:24:11 AM > To: Daniel Augusto Esteves > Cc: [email protected] > Subject: Re: Haproxy client ip > > Hi, > > On Mon, Jun 25, Simos Xenitellis wrote: >> On Sat, Jun 23, 2018 at 1:43 AM, Daniel Augusto Esteves >> <[email protected]> wrote: >> > Hi >> > >> > I am setting up haproxy with keepalived and i need to know if is >> > possible >> > pass client ip for destination log server using haproxy in tcp mode? >> > >> >> That can be done with the "proxy protocol". See more at >> https://www.haproxy.com/blog/haproxy/proxy-protocol/ > > There's also source usesrc clientip: > http://cbonte.github.io/haproxy-dconv/1.8/configuration.html#4-source > if your backend servers don't support proxy-protocol. > > -Jarno > > -- > Jarno Huuskonen >
