On 9/08/19 1:44 am, neok wrote: > Hi, I finally did the configuration differently. It's working very well for > me. > What you are doing is polluting every HTTP message with two new headers. The way Rafael suggested is more efficient since the PROXY protocol details are only delivered at the start of each TCP connection, and HTTP messages do not need to be reformatted at the LB as they pass. Note that Squid will be extending that XFF header itself anyway. But with your way the LB IP address will be broadcast to the origin(s) in the XFF header along with the client address. With PROXY protocol Squid adds only the client address there. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users