We're using HAProxy to proxy SSL Traffic (without SSL termination, so
The problem with
mode tcp is that HAProxy can't put the client-ip (the one that content is being proxied to) in the forwarded for request headers, which means that we lose client ip in our backend logs.
Is it possible to configure HAProxy to log:
- the client ip
- the outbound (ephemeral) port its connecting to the backend on
- the backend ip/name and port its connecting to
This way we can log the "client" ip + port in our backend and correlate the two logs.
Or is there any other way to solve this, besides recompiling HAProxy with TProxy enabled?