Index | Thread | Search

From:
Kirill A. Korinsky <kirill@korins.ky>
Subject:
Re: relayd: add support for PROXY protocol in TCP relays
To:
Christoph Liebender <christoph@liebender.dev>
Cc:
tech@openbsd.org, reyk@openbsd.org
Date:
Sat, 08 Nov 2025 22:18:59 +0100

Download raw body.

Thread
On Sat, 08 Nov 2025 22:00:21 +0100,
Christoph Liebender <christoph@liebender.dev> wrote:
> 
> [1  <text/plain; UTF-8 (7bit)>]
> On 11/8/25 20:20, Christoph Liebender wrote:
> > Hi tech@,
> > 
> > I wrote a patch to add support for the PROXY protocol (version 1) [1]
> > to relayd(8). Works in my usecase where I have a host in a DMZ where
> > hosts outside of the DMZ connect via a router that NATs their IP into
> > the DMZs subnet.
> > 
> > Essentially, what I am trying to mimic is the behavior of the
> > proxy_protocol directive of nginx's stream proxy module [2].
> > 
> > I'm more than happy to hear any feedback or comments you have for me :)
> > 
> > [1] https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
> > [2] https://nginx.org/en/docs/stream/
> > ngx_stream_proxy_module.html#proxy_protocol
> > 
> > PS: I appended my name and email to the copyright notices - also let
> > me know if that is correct!
> 
> Whoops! Updated patch with bugfix is attached.
>

Any reason why you had implemented only v1 (text) and skip v2 (binary)?

-- 
wbr, Kirill