Hativ, Am 04.04.20 um 08:22 schrieb Hativ: > what I've found in the meantime: Dovecot's error messages even appear > permanently, regardless of the TCP check. > > Reverting that commit (7f26391bc51ad56c31480d03f56e1db604f1c617) back solves > the issue. No more error message in Dovecot and the Layer 7 check works again. > > What's the cause of this? Something wrong with the commit or is Dovecot wrong? >
That's to be determined. The error message sounds as if Dovecot expects a TLV that is not being sent. Can you possibly provide a PCAP of a single (failing) health request to Dovecot with the commit NOT reverted? Also Ccing Willy as the author of that commit. The Dovecot source code is here: https://github.com/dovecot/core/blob/de9968d623e331a18b43dfe8a00421f72f7f7962/src/lib-master/master-service-haproxy.c#L354 A quick glance at the Dovecot code looks like Dovecot parses the proxy protocol correctly with regard to TLVs. Best regards Tim Düsterhus
