Proxy Protocol support in kube-vip

[sandys]

Is your feature request related to a problem? Please describe.
k3s-io/k3s#2997 (comment)
moby/moby#39465
moby/moby#25526
traefik/traefik-helm-chart#380

Getting real client-ip is a very big issue that comes all over the place. The only real way to solve this in a scalable, standards compliant way is to inject Proxy Protocol headers

Describe the solution you'd like
Proxy protocol is a fully open standard and supported by most known network servers:

• https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
• https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/enable-proxy-protocol.html
• https://cloud.google.com/load-balancing/docs/tcp/setting-up-tcp#proxy-protocol
• https://docs.openshift.com/container-platform/3.9/install_config/router/proxy_protocol.html
• https://docs.traefik.io/configuration/entrypoints/#proxyprotocol
• https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/
• https://aws.amazon.com/about-aws/whats-new/2013/07/30/elastic-load-balancing-now-supports-proxy-protocol/
• https://avinetworks.com/docs/16.3/proxy-protocol-support/
• https://blog.digitalocean.com/load-balancers-now-support-proxy-protocol/
• https://www.brightbox.com/blog/2019/03/12/proxy-protocol-load-balancer-api/
• https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-proxy-protocol

kube-vip should inject proxy protocol v2 headers into the requests.

[nickperry]

Kube-vip is not a proxy / load balancer - it's a control-plane component that provides VIPs. As it doesn't sit in the data path, I don't believe there's any scope for it to do anything with Proxy Protocol.

[thebsdbox]

Closing as stale, please re-open if there is a need in the future.