[squid-users] Logging PROXY Protocol header

[Amos Jeffries]

On 16/01/18 05:26, Bruce R wrote:
> Is it possible to configure Squid to log the details of the PROXY 
> protocol when using it? We're running Squid 3.5.20 in AWS behind a TCP 
> load balancer, which supports forwarding the PROXY protocol header. I'd 
> like to be able to include the client IP as provided in the PROXY 
> protocol header, but I'd be happy to log the entire header as well if 
> necessary. I've spent some time searching for information on this but 
> haven't had any luck so far.

When the PROXY protocol is received the details it supplies replace the 
TCP connection supplied values. That means everything in Squid dealing 
with client-IP or port displays or uses the PROXY values.

In squid.conf add the option "require-proxy-header" on the http_port you 
are receiving traffic from the LB. It is then important that you prevent 
traffic arriving from anywhere else than trusted sources. It is left to 
you to configure your firewall appropriately.


If you really want to see PROXY happening it is recorded in cache.log 
with "debug_options 33,5"

Amos