upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-02-03 20:40:45 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 11
vault/command/server
History
Rémi Lapeyre 1d06d25433
Add support for PROXY protocol v2 in TCP listener (#13540) 
* Add support for PROXY protocol v2 in TCP listener

I did not find tests for this so I added one trying to cover different
configurations to make sure I did not break something. As far as I know,
the behavior should be exactly the same as before except for one thing
when proxy_protocol_behavior is set to "deny_unauthorized", unauthorized
requests were previously silently reject because of https://github.com/armon/go-proxyproto/blob/7e956b284f0a/protocol.go#L81-L84
but it will now be logged.

Also fixes https://github.com/hashicorp/vault/issues/9462 by adding
support for `PROXY UNKNOWN` for PROXY protocol v1.

Closes https://github.com/hashicorp/vault/issues/3807

* Add changelog
2022-03-08 12:13:00 -05:00
..
test-fixtures prevent int64 overflow for default_lease_ttl and max_lease_ttl (#14206) 2022-02-23 17:08:52 -05:00
config.go prevent int64 overflow for default_lease_ttl and max_lease_ttl (#14206) 2022-02-23 17:08:52 -05:00
config_custom_response_headers_test.go Customizing HTTP headers in the config file (#12485) 2021-10-13 11:06:33 -04:00
config_oss_test.go Convert to Go 1.17 go:build directive (#13579) 2022-01-05 12:02:03 -06:00
config_telemetry_test.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
config_test.go Add support for go-sockaddr templated addresses in config. (#9109) 2021-10-21 10:10:48 -04:00
config_test_helpers.go Quit agent endpoint with config (#14223) 2022-02-25 10:29:05 +00:00
config_test_helpers_util.go Convert to Go 1.17 go:build directive (#13579) 2022-01-05 12:02:03 -06:00
config_util.go Convert to Go 1.17 go:build directive (#13579) 2022-01-05 12:02:03 -06:00
listener.go Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
listener_tcp.go Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
listener_tcp_test.go Add support for PROXY protocol v2 in TCP listener (#13540) 2022-03-08 12:13:00 -05:00
listener_test.go Add support for PROXY protocol v2 in TCP listener (#13540) 2022-03-08 12:13:00 -05:00
server_seal_transit_acc_test.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00