engineering/sshpiper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add proxy-read-header-timeout flag for PROXY protocol support (#586)

Browse source 
fix: update go-proxyproto and golang.org/x/net dependencies
This commit is contained in:
Boshi Lian 2025-05-11 02:20:16 -07:00 • committed by GitHub
parent 7eb2dd9bcd
commit 8ea9eb3f4f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 18 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

12
cmd/sshpiperd/main.go
View file

@ -184,6 +184,12 @@ func main() {
Usage: "allowed proxy addresses, only connections from these ip ranges are allowed to send a proxy header based on the PROXY protocol, empty will disable the PROXY protocol support",
EnvVars: []string{"SSHPIPERD_ALLOWED_PROXY_ADDRESSES"},
},
&cli.DurationFlag{
Name: "proxy-read-header-timeout",
Value: 200 * time.Millisecond,
Usage: "timeout for reading the PROXY protocol header, only used when --allowed-proxy-addresses is set",
EnvVars: []string{"SSHPIPERD_PROXY_READ_HEADER_TIMEOUT"},
},
&cli.StringSliceFlag{
Name: "allowed-downstream-keyexchange-algos",
Value: cli.NewStringSlice(),
@ -242,7 +248,11 @@ func main() {
return err
}
d.lis = &proxyproto.Listener{Listener: d.lis, Policy: proxypolicy}
d.lis = &proxyproto.Listener{
Listener: d.lis,
Policy: proxypolicy,
ReadHeaderTimeout: ctx.Duration("proxy-read-header-timeout"),
}
}
var plugins []*plugin.GrpcPlugin