Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reverse Proxy fails Google Compute Cloud https healthcheck behind TCP load balancer #12

Open
absorbb opened this issue Jul 13, 2022 · 0 comments

Comments

@absorbb
Copy link

absorbb commented Jul 13, 2022

Caddy 2.5.2

I try to make Caddy handles all HTTPs in my Google Compute Cloud setup.
So i install caddy behind External TCP load balancer.

Our service relies on client IP. That is why i enable PROXY protocol for load balancer.
and setup your plugin
But once plugin enabled all request must use PROXY protocol that is why i set GCC https health check to use PROXY protocol too,
Problem is that health-check sends PROXY UNKNOWN header. and plugin sets client ip to empty value.
https://cloud.google.com/load-balancing/docs/health-checks#optional-flags-hc-protocol-http

Reverse Proxy fails with error:
preparing request for upstream round-trip: invalid client IP address:
and there is no way health-check will be passed.

I guess replacing IPs with empty values is wrong.
in case of PROXY UNKNOWN header it is better to leave original(proxy) values in requests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant