Hello,
I’m using HAProxy at home as a global frontend to access both a Web server and a VPN server, both using tcp port 443. I’m using a TCP frontend, with SNI to separate Web traffic from VPN traffic, and then forward traffic to final service using bckend/frontend with tcp ports on 127.0.0.1
My problem is that even if I activate logs on the various front/back, there is no easy way to follow a connection that is first processed by the global tcp front accross the multiple transfers. And so, it’s seems impossible to have the details of the IPs connecting to the VPN or the Web servers, as they only see the connections from 127.0.0.1 (the last backend before the service).
Is there a way to associated an ID to a connection reecived by a front, have that ID propagated thru the different back/front transfer, and have also that ID in the logs ?
Or is it something that could be done using “stick-tables” ?
Thanks a lot in advance for any idea/pointer,
Best
You can use proxy protocol to preserve client IP.