[squid-users] HAProxy + Squid

[Amos Jeffries]

On 9/08/19 1:44 am, neok wrote:
> Hi, I finally did the configuration differently. It's working very well for
> me.
> 

What you are doing is polluting every HTTP message with two new headers.

The way Rafael suggested is more efficient since the PROXY protocol
details are only delivered at the start of each TCP connection, and HTTP
messages do not need to be reformatted at the LB as they pass.

Note that Squid will be extending that XFF header itself anyway. But
with your way the LB IP address will be broadcast to the origin(s) in
the XFF header along with the client address. With PROXY protocol Squid
adds only the client address there.

Amos