fabio: TCP proxy broken since v1.5.8
Impact It’s not possible to connect to MySQL since v1.5.8
STR
- Setup fabio as TCP proxy that listen 3306 port and has rule to route traffic to MySQL container (fabio version v1.5.7)
- Upgrade fabio to v1.5.8
Expected result mysql client can establish connection to MySQL service
Actual result mysql client hangs during connection establishment.
Additional info v1.5.7
$ nc 10.0.0.10 3306
J
5.6.40G!
B\'J}[0z��9KM"^612FK%umysql_native_password
v1.5.8
$ nc 10.0.0.10 3306
<empty output, process hangs until enter press>
J
5.6.40G!
B\'J}[0z��9KM"^612FK%umysql_native_password
Configuration
proxy_addr
:3306;proto=tcp,:80,:22;proto=tcp,:23;proto=tcp,:8080,:1025;proto=tcp,:5672;proto=tcp,:5673;proto=tcp;cs=certstore,:443;cs=certstore,:8125;proto=tcp,:9000;cs=certstore,:27017;proto=tcp
mysql service register at Consul with following tag: urlprefix-:3306 proto=tcp
About this issue
- Original URL
- State: closed
- Created 6 years ago
- Reactions: 1
- Comments: 26 (25 by maintainers)
Commits related to this issue
- skip access checks when rules are not defined - see #524 — committed to fabiolb/fabio by leprechau 6 years ago
- allow toggling of proxy-protocol per listener - see #524 — committed to fabiolb/fabio by leprechau 6 years ago
- skip access checks when rules are not defined - see #524 Co-authored-by: Peter Schultz <peter.schultz@classmarkets.com> — committed to fabiolb/fabio by leprechau 6 years ago
- allow toggling of proxy-protocol per listener - see #524 — committed to fabiolb/fabio by leprechau 6 years ago
- Merge pull request #581 from fabiolb/issue-524-tcp-proxy address concerns raised while troubleshooting #524 — committed to fabiolb/fabio by magiconair 6 years ago
- enforce access rules for tcp proxy This fixes a mistake made in #524 that put the deny check inside the assertion error block. This effectively disabled checking of access rules for TCP proxy reques... — committed to fabiolb/fabio by leprechau 6 years ago
- fast followers for #524 * update documentation around the changes to PROXY protocol * be consistent with accessRules check * fix mistake made in #524 that put the deny check inside the assertion er... — committed to fabiolb/fabio by leprechau 6 years ago
@pschultz I’ve invited you to be a collaborator so that we can work on the same branches.