diff options
| author | Andrew Dunham <andrew@du.nham.ca> | 2025-10-20 11:40:30 -0400 |
|---|---|---|
| committer | Andrew Dunham <andrew@du.nham.ca> | 2025-11-16 21:00:49 -0500 |
| commit | 3a41c0c585f4b008c07a02ae91ed43cdbb62c721 (patch) | |
| tree | b56c5902cdc6dff77193a0fc6a87fd9449558906 /tsnet | |
| parent | 653d0738f9afd9ee4785eff06c4a1908a4e6eaaf (diff) | |
| download | tailscale-3a41c0c585f4b008c07a02ae91ed43cdbb62c721.tar.xz tailscale-3a41c0c585f4b008c07a02ae91ed43cdbb62c721.zip | |
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
This adds the --proxy-protocol flag to 'tailscale serve' and
'tailscale funnel', which tells the Tailscale client to prepend a PROXY
protocol[1] header when making connections to the proxied-to backend.
I've verified that this works with our existing funnel servers without
additional work, since they pass along source address information via
PeerAPI already.
Updates #7747
[1]: https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
Change-Id: I647c24d319375c1b33e995555a541b7615d2d203
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Diffstat (limited to 'tsnet')
| -rw-r--r-- | tsnet/depaware.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/tsnet/depaware.txt b/tsnet/depaware.txt index cf91aa483..6eb493ef8 100644 --- a/tsnet/depaware.txt +++ b/tsnet/depaware.txt @@ -43,6 +43,7 @@ tailscale.com/tsnet dependencies: (generated by github.com/tailscale/depaware) L 💣 github.com/mdlayher/netlink/nlenc from github.com/jsimonetti/rtnetlink+ LA 💣 github.com/mdlayher/socket from github.com/mdlayher/netlink+ LDW 💣 github.com/mitchellh/go-ps from tailscale.com/safesocket + github.com/pires/go-proxyproto from tailscale.com/ipn/ipnlocal DI github.com/prometheus-community/pro-bing from tailscale.com/wgengine/netstack L 💣 github.com/safchain/ethtool from tailscale.com/net/netkernelconf W 💣 github.com/tailscale/certstore from tailscale.com/control/controlclient |