Proxy Protocol Not Working in AVI Load Balancer

Products

• VMware Avi Load Balancer

Issue/Introduction

• The VS is configured with Proxy Protocol enabled in the application profile, but the Proxy Protocol header is not being sent to the backend server.
• Ideally, the Proxy Protocol header should appear as shown below in the capture, but it will be missing due to this issue.

• Proxy protocol spec format:

PROXY TCP4 (real source address) (proxy address) (TCP source port) (TCP destination port) (CRLF sequence)

Cause

 

• This is a Day-1 gap. A change in the app profile of the VS to enable Proxy Protocol doesn’t take effect today without disabling and re-enabling the VS, as it needs to be treated as a disruptive update, which hasn’t been implemented yet.

Resolution

Temporary Workaround:

For Proxy Protocol to work on L4 VS in versions 22.x and 30.2.x, the VS must be disabled and re-enabled for the changes to take effect.

 

Permanent Fix: The issue will be fixed in the following version.

31.1.1