[EXT] Re: Connect to NGINX reverse proxy through proxy

[Roman Arutyunyan]

On Mon, May 07, 2018 at 10:37:08AM +0000, Ajay Sonawane wrote:
> >>For details it's better to look into error.log.
> 
> Error log says "Broker header [some garbage chars] while reading PROXY protocol, client: IPADDRESS, server:0.0.0.8443

This means the client (SQUID in your case) does not send the PROXY protocol
header.  Remove the "proxy_protocol" parameter from "listen" to fix this.

> ________________________________
> From: nginx <nginx-bounces at nginx.org> on behalf of Roman Arutyunyan <arut at nginx.com>
> Sent: Monday, May 7, 2018 3:55:59 PM
> To: nginx at nginx.org
> Subject: [EXT] Re: Connect to NGINX reverse proxy through proxy
> 
> Hello,
> 
> On Mon, May 07, 2018 at 05:15:34AM +0000, Ajay Sonawane wrote:
> > I am using NGINX as a HTTPS reverse proxy and load balancer. My clients are able to connect to reverse proxy using SSL and reverse proxy is able to terminate SSL connection and establish a new connection with backend server, data exchange is also happening.
> >
> >
> > Now I am trying to setup a proxy between a client and NGINX.  I am using SQUID proxy in between. I have enabled proxy protocol on nginx using
> >
> >
> >         listen 443  ssl proxy_protocol;
> 
> This line instructs nginx to expect PROXY protocol header from SQUID.
> Are you sure SQUID sends it?  It looks like SQUID didn't support sending PROXY
> protocol header up until recently.
> 
> >         proxy_protocol on;
> >
> >
> >
> >
> > Still my client is not able to connect to NGINX through proxy. Is there anything else I need to do.
> 
> For details it's better to look into error.log.
> 
> --
> Roman Arutyunyan
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> https://clicktime.symantec.com/a/1/-T9P8fTQru19QtJ92SY81cK1kgruSCyqw2a3i7ct9uA=?d=6I_E5mOuE_JiHm4QhzDePIEnOq_IvGHWcHWAQhy-J4UZqqAmz64BtlAUxaKeJ_QUeJlstY5j28Te7x5BUPJmBb7m6We9GzVL-5L0HAk8nw5PEVbXWoK8dlsjU1x4BITL4J3OeGFrdRvQR2wkGd5zLcFgsskyU4BCbuzKn8V5bKCmxB1DpG8cQVok5PkZ6Qg7YthetOt87ogtudPBDs_PJbaFVREIFlzqZKx96xuvYbT5uWM1w_ZYymY83doc7FsBvMyEFL2ozigFAfQT3usyvOndD3N6RIZxARXwdst7NOabaJMq1_Wofqujl-IAJ3M5MqakCUcNqdCC1EjAlA_YICSnnQ6daqQgPbBISB2mdbmdwAjRzNyu8eLvEue2CCe1_oSfgf7r3F4edwaTYA%3D%3D&u=http%3A%2F%2Fmailman.nginx.org%2Fmailman%2Flistinfo%2Fnginx

> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx


-- 
Roman Arutyunyan