[GH-ISSUE #2254] proxy_protocol + nginx = broken header? #1792

New issue

Closed

opened 2026-05-05 13:09:32 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 13:09:32 -06:00

Owner

Originally created by @RockyLOMO on GitHub (Feb 22, 2021).
Original GitHub issue: https://github.com/fatedier/frp/issues/2254

[REQUIRED] hat version of frp are you using

Version: 0.35.1

[REQUIRED] What operating system and processor architecture are you using
OS: windows 10
CPU architecture: amd64

[REQUIRED] description of errors
client -> frps -> [frpc -> nginx(windows v1.18.0)] -> web server

proxy_protocol_version = v2
nginx error

*182 broken header: "  ü³򎫥ZW뇝ş½h՘!¾I«r1³D¿) +Xu÷+U¹>§!°Bzg°)$ú ~¾| "

À+À/À,À0̨̩ÀÀ   /" while reading PROXY protocol, client: 127.0.0.1, server: 0.0.0.0:443

confile

frpc

[web-1]
type = http
local_ip = 127.0.0.1
local_port = 80
custom_domains = xx.cn
[web-2]
type = https
local_ip = 127.0.0.1
local_port = 443
custom_domains = xx.cn
proxy_protocol_version = v2

nginx

server {
    listen 443 ssl http2 proxy_protocol;
    set_real_ip_from 127.0.0.1;
    real_ip_header proxy_protocol;
    real_ip_recursive on;
    server_name xx.cn;
	
    ssl_certificate .xx.pem;
    ssl_certificate_key xx.key;
    ssl_session_cache  builtin:1000  shared:SSL:10m;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_verify_client off;

proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $proxy_connection;
proxy_set_header X-Forwarded-Host $the_host;
proxy_set_header X-Forwarded-Proto $the_scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;

    add_header Strict-Transport-Security max-age=31536000;
    add_header X-Content-Type-Options nosniff;

    location / {
        proxy_pass http://xx;
    }
}

log file

Steps to reproduce the issue
1.
2.
3.

Supplementary information

Can you guess what caused this issue

Checklist:

[] I included all information required in the sections above
[] I made sure there are no duplicates of this report (Use Search)

Originally created by @RockyLOMO on GitHub (Feb 22, 2021). Original GitHub issue: https://github.com/fatedier/frp/issues/2254     **[REQUIRED] hat version of frp are you using**  Version: 0.35.1 **[REQUIRED] What operating system and processor architecture are you using** OS: windows 10 CPU architecture: amd64 **[REQUIRED] description of errors** client -> frps -> [frpc -> nginx(windows v1.18.0)] -> web server proxy_protocol_version = v2 nginx error ``` *182 broken header: " ü³򎫥ZW뇝ş½h՘!¾I«r1³D¿) +Xu÷+U¹>§!°Bzg°)$ú ~¾| " À+À/À,À0̨̩ÀÀ /" while reading PROXY protocol, client: 127.0.0.1, server: 0.0.0.0:443 ``` **confile**  frpc ``` [web-1] type = http local_ip = 127.0.0.1 local_port = 80 custom_domains = xx.cn [web-2] type = https local_ip = 127.0.0.1 local_port = 443 custom_domains = xx.cn proxy_protocol_version = v2 ``` nginx ``` server { listen 443 ssl http2 proxy_protocol; set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; real_ip_recursive on; server_name xx.cn; ssl_certificate .xx.pem; ssl_certificate_key xx.key; ssl_session_cache builtin:1000 shared:SSL:10m; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_prefer_server_ciphers on; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_verify_client off; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $proxy_connection; proxy_set_header X-Forwarded-Host $the_host; proxy_set_header X-Forwarded-Proto $the_scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Real-IP $remote_addr; add_header Strict-Transport-Security max-age=31536000; add_header X-Content-Type-Options nosniff; location / { proxy_pass http://xx; } } ``` **log file**  **Steps to reproduce the issue** 1. 2. 3. **Supplementary information** **Can you guess what caused this issue** **Checklist**:  - [] I included all information required in the sections above - [] I made sure there are no duplicates of this report [(Use Search)](https://github.com/fatedier/frp/issues?q=is%3Aissue)