For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lgarriga's avatar
Lgarriga
Icon for Nimbostratus rankNimbostratus
May 31, 2019

AMQP traffic LB through standard VS. Error = PROXY protocol header signature is not recognized.

Hi. We're trying to LB a cluster with three rabbitMQ (AMQP) servers.

The traffic on a Standard VS should LB to the pool members, the aforementioned rabbitMQ (AMQP) servers. We put the irule for proxy protocol (https://devcentral.f5.com/codeshare/proxy-protocol-initiator).

when CLIENT_ACCEPTED {

 set proxyheader "PROXY TCP[IP::version] [IP::remote_addr] [IP::local_addr] [TCP::remote_port] [TCP::local_port]\r\n"

 }

 

 when SERVER_CONNECTED {

 TCP::respond $proxyheader

 }

But at the end we received below error message:

"The PROXY protocol header signature was not recognized. (PP 2.1, PP 2.2) "

 

PROXY protocol has already been enabled on rabbitMQ.conf.

Seems if the PROXY protocol version is not accepted.

Anyone can help with this issue? Thanks in advance.

2 Replies

  • eklas's avatar
    eklas
    Icon for Nimbostratus rankNimbostratus

    hello,

    facing very similar issues!

    were you able to find a workaround?

    • eklas's avatar
      eklas
      Icon for Nimbostratus rankNimbostratus

      actually I just found solution for my problem, it was TCP version.

       

      my irule look like this:

      when CLIENT_ACCEPTED {

        set proxyheader "PROXY "

        if {[IP::version] eq 4} {

          append proxyheader "TCP4 "

        } else {

          append proxyheader "TCP6 "

        }

        append proxyheader "[IP::remote_addr] [IP::local_addr] [TCP::remote_port] [TCP::local_port]\r\n"

      }

      when SERVER_CONNECTED {

        TCP::respond $proxyheader

      }

      --worked