New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

HAProxy proxy protocol? #2

Open

laanwj opened this issue May 4, 2022 · 1 comment

laanwj commented May 4, 2022 •

edited

Loading

Thanks for writing this. I stumbled on this guide and it's similar to something I'd been thinking of!

An alternative to using wireguard to forward one port might be the HAProxy proxy protocol:

The Proxy Protocol was designed to chain proxies / reverse-proxies without losing the client information.
A proxy will use its own IP stack to get connected on remote servers. Because of this, we lose the initial TCP connection information like source and destination IP and port when a proxy in involved in an architecture.

https://www.haproxy.com/blog/haproxy/proxy-protocol/

Advantages to wireguard:

No OS-level setup needed; it's a matter of making sure a TCP stream lands at its destination, this can be through ssh forward, stunnel, tor, or other means.
It's just one port. Not more, not less.

Disadvantages to wireguard:

Needs special support in the receiving service (c-lightning in this case).
Not encrypted by default. Stream needs wrapping to be secure over the internet.
Does not automatically route outgoing traffic. This may be the biggest problem.

shakibaei65 commented May 16, 2022

درورهلااااا

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment