Commit Graph
2 Commits
Author SHA1 Message Date
user.email 94f200ce52 fix(util): parse PROXY v1 header lazily inside the connection read path
Reading the header in Accept let a silent peer stall the listener for
everyone and let a malformed header surface as an accept error. The
header now parses on first Read/RemoteAddr under a once, inside the
connection's own goroutine lifecycle.
2026-10-24 23:01:31 -07:00
user.email 76597324e6 feat(volume): carry client address through PROXY v1 to supervised backends
The proxy/native frontends terminate the client TCP connection, so the
Go backend saw loopback peers and -whiteList could not be enforced.
The launcher now passes -proxyProtocol and prepends a PROXY v1 line to
each proxied connection; opted-in listeners unwrap it and expose the
real client address to HTTP and gRPC checks.
2026-10-24 22:45:21 -07:00