Hi, On Sun, Apr 20, 2025 at 06:15:20PM -0400, Demi Marie Obenour wrote: > I noticed that in HTTP/1.x, HAProxy accepts Host headers containing > spaces, which aren't valid. Is this intentional, or is it a bug?
It's neither intentional nor a bug. Actually haproxy doesn't make use of the Host header. However it will compare it to the authority if one is present. What it cares about is not to get desynchronized with the client or the server (or both), and Host doesn't act at this level. In the worst case the next hop will complain that the Host is invalid and will reject the request with a 400, but that's no big deal overall. Willy
