Hi, Is it possible to route/proxy mode tcp someway similar to mode http with ACL rules? We are short on public IP addresses and we want to route the requests to to private IPs depending on the header. I am aware that with the tcp mode we cannot use hdr(host). I am giving the example to visualize i…

I’m about 2.5 years late to the party, and maybe things have changed since this question was asked - but YES!!! IT IS POSSIBLE! I have an use-specific example config, it may give someone a good idea of how to abuse ACLs with tcp. It’s on a third party site, hope I don’t get whacked for it: https:/…

It’s using static offsets, which is for a specific client in a specific software release. While this works for the use-case in that forum (content-switching certain specific mining clients I guess), it cannot generally work with browsers.

Yes, but I was answering tge question as asked. And since this was one of the very first results I found when looking to solve my issue, I felt it prudent to add my solution in case others find this thread while looking for something more similar to what I needed. Thank you for pointing out that th…

your rules did not work for me :slight_smile: do you have any idea? I’m in a DMZ network, that want to proxy some request to a tcp backend and route the tcp traffic based on subdomain or host header . ####### start of tcp acl ########### acl db_backyard req.payload(5,16) -m sub db.backyard.xxxxx.…

TCP with ACL possible?

Help!

lukastribus May 24, 2016, 9:32pm 2

You should be able to do this by using “mode http” on the frontend and “mode tcp” on the backend.

Topic		Replies	Views
Mode TCP domain acl Help!	1	482	October 4, 2023
TCP mode ACL does not kick in Help!	5	413	August 16, 2021
ACL filters when using mode tcp? Help!	3	6344	August 27, 2021
Acls for Tcp level requests Help!	2	1689	May 4, 2018
Haproxy tcp acl port 8008 not working Help!	8	3182	May 22, 2018

TCP with ACL possible?

Related topics