akka/akka-http

Support HAPROXY proxy protocol on the server side

Open

#89 opened on Sep 8, 2016

View on GitHub
 (14 comments) (14 reactions) (0 assignees)Scala (598 forks)batch import
1 - triagedhelp wantednice-to-have (low-prio)t:server

Repository metrics

Stars
 (1,311 stars)
PR merge metrics
 (Avg merge 1d 10h) (2 merged PRs in 30d)

Description

HAProxy defines a TCP-based "proxy protocol" that wraps / prefixes reverse-proxy traffic with metadata from the original client.

See http://www.haproxy.org/download/1.8/doc/proxy-protocol.txt.

Issue by prettynatty Wednesday Jan 20, 2016 at 14:15 GMT Originally opened as https://github.com/akka/akka/issues/19541

Akka HTTP lacks proxy protocol support. There already was a demand in spray/spray#846. It's impossible to implement anti-flood scenarios in case of plain tcp connections when there is no way to determine real client ip via HTTP headers passed from reverse proxy.

Contributor guide

Research direction
Study the HAProxy proxy protocol specification and explore how to parse the header and modify the connection handling in Akka HTTP server to extract original client IP and port.
Tech stack
scala
Domain
backend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
ScalaNetworking
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40