Re:About the Tailscale.com outage on March 7, 2024
by p1mrx on Saturday March 30, 2024 @06:19PM
(#39879232)
A TCP proxy discards the user's IP address, unless you use something like the PROXY protocol[1], which then needs to be supported by the target HTTPS server. You would also need a way to prevent unauthorized users from injecting their own PROXY header.
This isn't a problem if you don't need the user's IP address at all, but it's often useful for logging and abuse detection.
This isn't a problem if you don't need the user's IP address at all, but it's often useful for logging and abuse detection.
[1] https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt