Proxy protocol support

Tom Johnson tj at terramar.net
Thu Oct 30 19:59:55 CET 2014


We just run postfix and amavisd-new on all our servers, and those sit behind haproxy. 



> On Oct 30, 2014, at 11:53 AM, Kent Oyer <kent at micro-source.net> wrote:
> 
> Hi Tom,
> 
> I don't know if amavis supports the PROXY protocol but I kinda doubt it. I've solved the problem by putting haproxy in between postfix and amavis like this
> 
> --> Postfix (ingress) --> haproxy --> amavisd --> Postfix (egress) -->
> 
> The ingress Postfix server does all the SPF and RBL checks. Then it sends the messages to haproxy which divides the load between several amavis servers to do the heavy lifting. You should add the IP address of the haproxy server to the trusted_networks list in Spamassassin. In my case, I'm running haproxy on the same machine as the ingress Postfix server. So I have 2 Postfix/haproxy servers and 6 amavisd servers followed by 2 Postfix egress servers. It been working great so far.
> 
> Thanks
> Kent
> 
> -----Original Message-----
> From: Tom Sommer [mailto:mail at tomsommer.dk] 
> Sent: Monday, October 27, 2014 8:42 AM
> To: amavis-users at amavis.org
> Subject: Proxy protocol support
> 
> Hi
> 
> Does amavis support the PROXY protocol?
> http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
> 
> I want to create an amavis cluster with a load-balancer in front of all the nodes, I was thinking haproxy.
> I need the source IP in amavis to be the mailserver and not the load balancer (to support forward_method=*), the PROXY protocol seem to fix this?
> 
> Thanks
> 
> --
> Tom Sommer
> 
> 


More information about the amavis-users mailing list