From: Remi Gacogne Date: Thu, 6 Jun 2024 07:53:50 +0000 (+0200) Subject: dnsdist: Apply Charles-Henri's suggestion to the Proxy Protocol documentation X-Git-Tag: rec-5.2.0-alpha0~32^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F14234%2Fhead;p=thirdparty%2Fpdns.git dnsdist: Apply Charles-Henri's suggestion to the Proxy Protocol documentation Co-authored-by: Charles-Henri Bruyand --- diff --git a/pdns/dnsdistdist/docs/advanced/passing-source-address.rst b/pdns/dnsdistdist/docs/advanced/passing-source-address.rst index 675612336f..afd92a05ec 100644 --- a/pdns/dnsdistdist/docs/advanced/passing-source-address.rst +++ b/pdns/dnsdistdist/docs/advanced/passing-source-address.rst @@ -46,7 +46,7 @@ Such a Proxy Protocol header can also be passed from the client to dnsdist, usin setProxyProtocolACL({'192.0.2.0/24'}) -Note that a proxy protocol payload will be required from these clients, regular DNS queries will no longer be accepted if they are not preceded by a proxy protocol payload. +Note that a Proxy Protocol payload will be required from these clients, regular DNS queries will no longer be accepted if they are not preceded by a Proxy Protocol payload. If :func:`setProxyProtocolApplyACLToProxiedClients` is set (default is false), the general ACL will be applied to the source IP address as seen by dnsdist first, but also to the source IP address provided in the Proxy Protocol header.