plain_tcp_port

This server exposes a plain TCP listening port in front of another local server.

It only forwards accepted TCP connections to another local server and does not perform application-layer parsing itself.

The following common keys are supported:

• listen_in_worker

• ingress_network_filter

listen

required, type: tcp listen

Listening configuration for this server.

The instance count setting will be ignored if listen_in_worker is correctly enabled.

server

required, type: str

Name of the next server to which accepted connections are forwarded.

The next server must be able to accept TCP connections.

proxy_protocol

optional, type: proxy protocol version

PROXY Protocol version expected on incoming TCP connections.

If set, connections with no matched PROXY Protocol message will be dropped.

Note

The ingress_network_filter option on this server always applies to the real socket client address.

default: not set, which means PROXY protocol won’t be used

Added in version 1.7.19.

proxy_protocol_read_timeout

optional, type: humanize duration

Timeout for reading a complete PROXY Protocol message.

default: 5s

Added in version 1.7.19.

Example

listen: 0.0.0.0:443
server: tls-entry
proxy_protocol: v2