[EXT] Re: Connect to NGINX reverse proxy through proxy

Ajay Sonawane Ajay_Sonawane at symantec.com
Mon May 7 10:37:08 UTC 2018


>>For details it's better to look into error.log.

Error log says "Broker header [some garbage chars] while reading PROXY protocol, client: IPADDRESS, server:0.0.0.8443
________________________________
From: nginx <nginx-bounces at nginx.org> on behalf of Roman Arutyunyan <arut at nginx.com>
Sent: Monday, May 7, 2018 3:55:59 PM
To: nginx at nginx.org
Subject: [EXT] Re: Connect to NGINX reverse proxy through proxy

Hello,

On Mon, May 07, 2018 at 05:15:34AM +0000, Ajay Sonawane wrote:
> I am using NGINX as a HTTPS reverse proxy and load balancer. My clients are able to connect to reverse proxy using SSL and reverse proxy is able to terminate SSL connection and establish a new connection with backend server, data exchange is also happening.
>
>
> Now I am trying to setup a proxy between a client and NGINX.  I am using SQUID proxy in between. I have enabled proxy protocol on nginx using
>
>
>         listen 443  ssl proxy_protocol;

This line instructs nginx to expect PROXY protocol header from SQUID.
Are you sure SQUID sends it?  It looks like SQUID didn't support sending PROXY
protocol header up until recently.

>         proxy_protocol on;
>
>
>
>
> Still my client is not able to connect to NGINX through proxy. Is there anything else I need to do.

For details it's better to look into error.log.

--
Roman Arutyunyan
_______________________________________________
nginx mailing list
nginx at nginx.org
https://clicktime.symantec.com/a/1/-T9P8fTQru19QtJ92SY81cK1kgruSCyqw2a3i7ct9uA=?d=6I_E5mOuE_JiHm4QhzDePIEnOq_IvGHWcHWAQhy-J4UZqqAmz64BtlAUxaKeJ_QUeJlstY5j28Te7x5BUPJmBb7m6We9GzVL-5L0HAk8nw5PEVbXWoK8dlsjU1x4BITL4J3OeGFrdRvQR2wkGd5zLcFgsskyU4BCbuzKn8V5bKCmxB1DpG8cQVok5PkZ6Qg7YthetOt87ogtudPBDs_PJbaFVREIFlzqZKx96xuvYbT5uWM1w_ZYymY83doc7FsBvMyEFL2ozigFAfQT3usyvOndD3N6RIZxARXwdst7NOabaJMq1_Wofqujl-IAJ3M5MqakCUcNqdCC1EjAlA_YICSnnQ6daqQgPbBISB2mdbmdwAjRzNyu8eLvEue2CCe1_oSfgf7r3F4edwaTYA%3D%3D&u=http%3A%2F%2Fmailman.nginx.org%2Fmailman%2Flistinfo%2Fnginx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20180507/0773223f/attachment-0001.html>


More information about the nginx mailing list