Page MenuHomeVyOS Platform

HAproxy: Enable transparent proxing
Open, WishlistPublicFEATURE REQUEST

Description

Add CLI support for HAProxy’s transparent proxy features, allowing VyOS to load-balance traffic while preserving the original client source IP when forwarding requests to backend servers. This also enables the client’s original IP address to be exposed to the backend through the HTTP request headers.

Details

Version
1.5
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

c-po triaged this task as Wishlist priority.Fri, Sep 25, 7:19 PM

Is it a requested feature?
https://www.haproxy.com/documentation/haproxy-configuration-tutorials/proxying-essentials/client-ip-preservation/transparent-proxying/

If not, please clarify or add a link to the documentation.
At the moment, we are having proxy/proxy-v2

vyos@r16# set load-balancing haproxy backend foo server srv1 
Possible completions:
   ...
   send-proxy           Send a Proxy Protocol version 1 header (text format)
   send-proxy-v2        Send a Proxy Protocol version 2 header (binary format)

+ forwardfor option

{# If mode is HTTP add X-Forwarded headers #}
{%         if back_config.mode == 'http' %}
    option forwardfor