Update docs for maxconn ACL with indirect clients

diff --git a/src/cf.data.pre b/src/cf.data.pre
index 60108a242384d4702a203b2c5ea12eea8d171369..38c1909fc83d7d67eb413735decb5ead1744949b 100644 (file)
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -770,7 +770,9 @@ DOC_START
 
        acl aclname maxconn number
          # This will be matched when the client's IP address has
-         # more than <number> HTTP connections established. [fast]
+         # more than <number> TCP connections established. [fast]
+         # NOTE: This only measures direct TCP links so X-Forwarded-For
+         # indirect clients are not counted.
 
        acl aclname max_user_ip [-s] number
          # This will be matched when the user attempts to log in from more
@@ -943,6 +945,9 @@ DOC_START
        Controls whether the indirect client address
        (see follow_x_forwarded_for) is used instead of the
        direct client address in acl matching.
+
+       NOTE: maxconn ACL considers direct TCP links and indirect
+             clients will always have zero. So no match.
 DOC_END
 
 NAME: delay_pool_uses_indirect_client