Hello,
i think i have currently an problem with understanding haproxies mode { tcp|http }.
I have a tcp frontend and a tcp backend wich connects 4 ExChangeservers. Incoming traffic is typical https encrypted.
Now i want to add the option send-proxy or send-proxy-v2 to my backend servers to forward original Client-IP. I read some tutorials and i was surprised that this should work also in tcp-mode with ssl encrypted traffic. In my understanding tcp mode just routes an untouched datastream to a backend server without knowing the content of the stream. How is it possible that Client-IP is forwarded to the backend in this case?
So while haproxy is not able to manipulate content of data stream is it instead a kind of manipulation of tcp-packets?
I expected to have to switch to http mode and make ssl termination or something.
Thank you,
Hans
1 post - 1 participant