10:23 p.m.
I was curious if anyone had set up undertow to work with a layer-4 proxy
server with undertow. I'm looking at using undertow behind an AWS ELB, but
it's layer-7 load balancing logic kills any shot I have of taking advantage
of undertow's awesome HTTP/2 & SPDY support.
ELB supports layer-4 load balancing, which would just multiplex inbound TCP
connections (with an added bonus of offloading TLS), but I'm concerned
about losing client IP addresses. ELB actually has a way to address this
with HAProxy's PROXY protocol:
http://www.haproxy.org/download/1.6/doc/proxy-protocol.txt
However, I haven't found a place for setting up the PROXY protocol support
in undertow. Has anyone done this? Is there a way I should be going about
it?
It feels like I'd just need to wrapper the existing Listener implementation
with some kind of delegate that first parsed the PROXY header, extracted
the client address/port/protocol/etc., and then passed on the rest of the
logic to the HTTP2 handler. Is that about right?
--
Chris
5:59 a.m.
Sent from my iPhone
On Nov 2, 2015, at 10:24 PM, Christopher Smith
<cbsmith(a)gmail.com> wrote:
ELB supports layer-4 load balancing, which would just multiplex inbound TCP connections
(with an added bonus of offloading TLS), but I'm concerned about losing client IP
addresses. ELB actually has a way to address this with HAProxy's PROXY protocol:
http://www.haproxy.org/download/1.6/doc/proxy-protocol.txt
However, I haven't found a place for setting up the PROXY protocol support in
undertow. Has anyone done this? Is there a way I should be going about it?
We should probably add support for haproxy's protocol if it has wide usage like this.
It looks fairly straightforward.
-Jason
10:36 a.m.
I think ELB constitutes pretty wide usage. ;-)
People do tend to use the layer-7 load balancing, but given undertow's
extensive support for http/2 & spdy, the advantages of using layer-4 load
balancing are significant. I agree it is a very straightforward
implementation. You mostly just parse one line before handing off the logic
to some other handler. I'm not familiar with undertow's code base, but I'd
be happy to work with someone on it.
--Chris
On Tue, Nov 3, 2015 at 3:59 AM, Jason T. Greene <jason.greene(a)redhat.com>
wrote:
Sent from my iPhone
On Nov 2, 2015, at 10:24 PM, Christopher Smith <cbsmith(a)gmail.com> wrote:
ELB supports layer-4 load balancing, which would just multiplex inbound
TCP connections (with an added bonus of offloading TLS), but I'm concerned
about losing client IP addresses. ELB actually has a way to address this
with HAProxy's PROXY protocol:
http://www.haproxy.org/download/1.6/doc/proxy-protocol.txt
However, I haven't found a place for setting up the PROXY protocol support
in undertow. Has anyone done this? Is there a way I should be going about
it?
We should probably add support for haproxy's protocol if it has wide usage
like this. It looks fairly straightforward.
-Jason
--
Chris
5:36 p.m.
I have created a JIRA to track this: https://issues.jboss.org/browse/UNDERTOW-573
Stuart
----- Original Message -----
From: "Christopher Smith" <cbsmith(a)gmail.com>
To: "Jason T. Greene" <jason.greene(a)redhat.com>
Cc: undertow-dev(a)lists.jboss.org
Sent: Wednesday, 4 November, 2015 3:36:12 AM
Subject: Re: [undertow-dev] Proxy Protocol/Layer-4 load balancing/AWS ELB
I think ELB constitutes pretty wide usage. ;-)
People do tend to use the layer-7 load balancing, but given undertow's
extensive support for http/2 & spdy, the advantages of using layer-4 load
balancing are significant. I agree it is a very straightforward
implementation. You mostly just parse one line before handing off the logic
to some other handler. I'm not familiar with undertow's code base, but I'd
be happy to work with someone on it.
--Chris
On Tue, Nov 3, 2015 at 3:59 AM, Jason T. Greene < jason.greene(a)redhat.com >
wrote:
Sent from my iPhone
On Nov 2, 2015, at 10:24 PM, Christopher Smith < cbsmith(a)gmail.com > wrote:
ELB supports layer-4 load balancing, which would just multiplex inbound TCP
connections (with an added bonus of offloading TLS), but I'm concerned about
losing client IP addresses. ELB actually has a way to address this with
HAProxy's PROXY protocol:
http://www.haproxy.org/download/1.6/doc/proxy-protocol.txt
However, I haven't found a place for setting up the PROXY protocol support in
undertow. Has anyone done this? Is there a way I should be going about it?
We should probably add support for haproxy's protocol if it has wide usage
like this. It looks fairly straightforward.
-Jason
--
Chris
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
3293
days inactive
3293
days old
3 comments
3 participants
participants (3)
-
Christopher Smith -
Jason T. Greene -
Stuart Douglas