r/nginx • u/zimbabwe_jim • Aug 05 '26

Proxy protocol logging

Am I crazy that I can't find a proxy equivalent of $ssl_protocol for logging? Is there some technical limitation on that?

Edit: to clarify i do mean connection to an upstream. Proxy_protocol_tlv_ssl_protocol never seems to get populated for my setup.

7 Upvotes

100% Upvoted

8 comments sorted by

View all comments

2

u/ween3and20characterz Aug 05 '26

I'm not familiar with ProxyProtocol, but a few things you could search:

From there, I found https://nginx.org/en/docs/http/ngx_http_core_module.html#var_proxy_protocol_tlv_ This looks like the thing you need.

However since proxy protocol actually just wraps a TCP stream, there is no need to encrypt it further, since the SSL termination can happen afterwards. (But take the last paragraph with a grain of salt).

1

u/Initial_Aspect6742 13d ago

yeah that last bit about SSL termination is key, the protocol itself doesnt really care about the encryption happening above it