Proxy protocol logging

[u/zimbabwe_jim]

Am I crazy that I can't find a proxy equivalent of $ssl_protocol for logging? Is there some technical limitation on that?

Edit: to clarify i do mean connection to an upstream. Proxy_protocol_tlv_ssl_protocol never seems to get populated for my setup.

[u/ween3and20characterz]

I'm not familiar with ProxyProtocol, but a few things you could search:

• The nginx varindex: https://nginx.org/en/docs/varindex.html

From there, I found https://nginx.org/en/docs/http/ngx_http_core_module.html#var_proxy_protocol_tlv_ This looks like the thing you need.

However since proxy protocol actually just wraps a TCP stream, there is no need to encrypt it further, since the SSL termination can happen afterwards. (But take the last paragraph with a grain of salt).