Proxy protocol support

[Michael Schwartzkopff]

Am Donnerstag, 30. Oktober 2014, 20:07:07 schrieb Tom Sommer:
> So how do you make sure the postfix and amavis instances see the IP of
> the mailserver and not of the haproxy server?
> 
> ---
> Tom Sommer

Use a loadbalancer and not a proxy.


> On 2014-10-30 19:59, Tom Johnson wrote:
> > We just run postfix and amavisd-new on all our servers, and those sit
> > behind haproxy.
> > 
> >> On Oct 30, 2014, at 11:53 AM, Kent Oyer <kent at micro-source.net> wrote:
> >> 
> >> Hi Tom,
> >> 
> >> I don't know if amavis supports the PROXY protocol but I kinda doubt
> >> it. I've solved the problem by putting haproxy in between postfix and
> >> amavis like this
> >> 
> >> --> Postfix (ingress) --> haproxy --> amavisd --> Postfix (egress) -->
> >> 
> >> The ingress Postfix server does all the SPF and RBL checks. Then it
> >> sends the messages to haproxy which divides the load between several
> >> amavis servers to do the heavy lifting. You should add the IP address
> >> of the haproxy server to the trusted_networks list in Spamassassin. In
> >> my case, I'm running haproxy on the same machine as the ingress
> >> Postfix server. So I have 2 Postfix/haproxy servers and 6 amavisd
> >> servers followed by 2 Postfix egress servers. It been working great so
> >> far.
> >> 
> >> Thanks
> >> Kent
> >> 
> >> -----Original Message-----
> >> From: Tom Sommer [mailto:mail at tomsommer.dk]
> >> Sent: Monday, October 27, 2014 8:42 AM
> >> To: amavis-users at amavis.org
> >> Subject: Proxy protocol support
> >> 
> >> Hi
> >> 
> >> Does amavis support the PROXY protocol?
> >> http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
> >> 
> >> I want to create an amavis cluster with a load-balancer in front of
> >> all the nodes, I was thinking haproxy.
> >> I need the source IP in amavis to be the mailserver and not the load
> >> balancer (to support forward_method=*), the PROXY protocol seem to fix
> >> this?
> >> 
> >> Thanks
> >> 
> >> --
> >> Tom Sommer
-- 
Dr. Michael Schwartzkopff
Guardinistr. 63
81375 München

Tel: (0162) 1650044
Fax: (089) 620 304 13
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20141030/d93335fc/attachment.sig>